Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa
File:                     83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa (raw, json)
Hash identifier:          4HnzhwBBZwLuBpFPcHJbpZVdGaFp1bStVZ3X5yCAfY4=
Subject key identifier:   BE:6C:C0:3F:11:A0:C7:21:47:A6:A4:DB:83:4E:CD:59:1B:2C:E0:B4
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584CD40760B0CC2706C5949A1080
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     1280
IP address blocks:        149.20.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:60:b0:cc:27:06:c5:94:9a:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=7c50fc33-3f37-4119-bdd5-0608630d0608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:5b:34:98:ab:a7:a3:8c:e6:46:05:2b:6a:
                    ae:34:d7:90:b3:7f:f0:65:74:5e:65:0f:a5:65:52:
                    14:ad:46:c0:2f:ee:9b:f7:fa:b4:1f:93:af:c6:1b:
                    15:a7:27:1e:66:8a:ca:34:37:16:7a:e1:e9:ea:1a:
                    5d:94:77:7b:3c:3b:60:0f:a8:83:96:aa:ae:82:85:
                    e9:6a:61:10:af:88:d4:f6:39:bf:fc:f0:fa:59:85:
                    69:09:a3:b2:ab:50:a2:18:62:f7:21:91:f0:82:56:
                    b5:c9:a1:f0:20:8b:31:fc:bf:2a:27:54:2d:ad:2c:
                    8d:ef:17:23:ca:61:2c:81:27:66:c8:66:a7:ab:d8:
                    1f:dc:55:6d:9b:5a:56:7f:37:8e:43:dd:a7:4b:3f:
                    02:d8:69:8c:b8:bf:31:66:86:e4:3e:b5:14:ad:61:
                    72:89:c8:3c:a6:ec:1b:4a:fa:cd:19:6c:c8:21:19:
                    14:1a:95:0e:d0:3d:2c:f6:41:71:e7:a2:cc:fa:32:
                    8a:1a:c4:d6:2d:ac:5e:e5:ff:a0:b2:94:ed:27:83:
                    7a:46:1e:16:8b:53:1d:4e:d2:68:f5:df:44:19:a1:
                    c7:bc:25:fb:a2:6a:b3:1f:e2:d8:26:ea:15:83:d7:
                    f1:cf:f7:c6:71:7d:a9:3f:29:5e:35:c2:b0:ae:e8:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6C:C0:3F:11:A0:C7:21:47:A6:A4:DB:83:4E:CD:59:1B:2C:E0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3e:6a:4a:2d:4c:dd:3d:16:f3:01:25:15:8c:25:cf:63:23:
         40:5f:ad:ac:b7:80:da:48:07:ae:99:c0:cd:1e:4a:73:0e:41:
         9e:98:5f:2e:32:b5:62:15:d9:10:18:c7:03:26:ca:18:ce:f8:
         f8:91:44:90:c2:c2:ba:39:48:ff:34:6e:d9:11:24:40:31:29:
         9f:c0:0a:a6:a0:d1:c5:7f:ea:0f:69:56:d1:48:55:25:a2:e5:
         19:61:d7:62:36:95:5e:40:03:33:57:aa:8d:ba:18:81:20:12:
         c8:3c:64:36:9b:01:90:41:1c:8e:8d:02:74:88:35:c3:1e:1c:
         8c:66:d2:22:47:38:08:a7:da:93:79:b6:db:fc:5b:e8:f4:6a:
         f8:5f:d8:5b:13:89:f2:8e:07:62:34:a8:df:8e:dc:6c:f4:06:
         82:b3:36:58:71:d7:c0:ca:04:9c:12:dc:68:8c:c1:08:d4:a0:
         fc:dc:69:1e:79:fe:ba:b3:53:a9:1f:e5:0a:09:56:66:39:78:
         73:c2:ec:33:21:5a:4d:ae:00:e6:bf:2f:4b:69:ec:ce:ad:2f:
         32:da:50:3c:ca:75:53:9f:6f:c4:c1:57:50:6d:8f:5f:e2:21:
         94:31:33:71:00:8b:e8:58:a1:e8:83:cd:2a:a2:30:e9:04:81:
         3f:cc:ce:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2CwzCcGxZSaEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
N2M1MGZjMzMtM2YzNy00MTE5LWJkZDUtMDYwODYzMGQwNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhFbNJirp6OM5kYFK2quNNeQs3/wZXReZQ+l
ZVIUrUbAL+6b9/q0H5OvxhsVpyceZorKNDcWeuHp6hpdlHd7PDtgD6iDlqqugoXp
amEQr4jU9jm//PD6WYVpCaOyq1CiGGL3IZHwgla1yaHwIIsx/L8qJ1QtrSyN7xcj
ymEsgSdmyGanq9gf3FVtm1pWfzeOQ92nSz8C2GmMuL8xZobkPrUUrWFyicg8puwb
SvrNGWzIIRkUGpUO0D0s9kFx56LM+jKKGsTWLaxe5f+gspTtJ4N6Rh4Wi1MdTtJo
9d9EGaHHvCX7omqzH+LYJuoVg9fxz/fGcX2pPyleNcKwruhtVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5swD8RoMchR6ak24NOzVkbLOC0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODNlMWFmMDctYzA1ZS0z
ZGRhLTliNGQtYzc0ZGZlZGM2NTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADk+akotTN09FvMBJRWMJc9jI0Bfray3gNpIB66ZwM0eSnMOQZ6YXy4y
tWIV2RAYxwMmyhjO+PiRRJDCwro5SP80btkRJEAxKZ/ACqag0cV/6g9pVtFIVSWi
5Rlh12I2lV5AAzNXqo26GIEgEsg8ZDabAZBBHI6NAnSINcMeHIxm0iJHOAin2pN5
ttv8W+j0avhf2FsTifKOB2I0qN+O3Gz0BoKzNlhx18DKBJwS3GiMwQjUoPzcaR55
/rqzU6kf5QoJVmY5eHPC7DMhWk2uAOa/L0tp7M6tLzLaUDzKdVOfb8TBV1Btj1/i
IZQxM3EAi+hYoeiDzSqiMOkEgT/Mzuk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:06 2026 by rpki-client