Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5f45f22-cdc2-3a41-8771-55420fe3b413.roa
File:                     a5f45f22-cdc2-3a41-8771-55420fe3b413.roa (raw, json)
Hash identifier:          SS5LIhJGvWl2OjzbqhJNBlAV4h4yT5ohJJTfcdRNd/4=
Subject key identifier:   EA:AB:A5:5D:61:36:0E:5C:75:51:25:F6:D5:2F:CB:C7:04:F6:0A:C1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CCA41E4A54A872F8F83E77580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5f45f22-cdc2-3a41-8771-55420fe3b413.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     998
IP address blocks:        184.174.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e4:a5:4a:87:2f:8f:83:e7:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=ab5148ab-6660-4c48-af55-ca3dd2af21a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:18:7d:36:d1:b3:a6:4e:5e:78:79:b7:30:
                    82:43:28:33:48:7e:28:31:cb:25:56:95:1d:00:e8:
                    6c:3c:94:e5:b6:0e:cd:3d:9e:b0:45:63:ec:f2:0e:
                    54:82:46:50:8d:dd:7f:14:bb:92:64:2f:74:91:82:
                    ed:ed:8a:4f:09:3a:36:4d:09:21:19:f3:31:5b:6c:
                    b0:a8:46:e1:8d:87:f7:5d:a4:a9:0a:b1:12:b1:f0:
                    b4:81:19:3f:86:e2:6b:da:41:58:80:45:be:f1:5b:
                    3f:07:e4:26:f5:71:c4:77:6b:13:1b:08:e3:4b:6f:
                    47:b4:87:d7:fd:e4:5b:01:92:0f:7e:79:e2:69:ad:
                    34:34:46:e6:1a:58:98:7e:e9:76:58:0a:39:23:c9:
                    2b:fb:45:bd:40:e1:31:f6:c4:db:17:55:f8:c9:f0:
                    b7:cb:81:80:da:61:f8:68:5f:87:b3:f4:1e:8e:b2:
                    2c:30:4c:de:f9:56:3b:5e:0e:83:ce:64:a1:57:c9:
                    59:29:e3:95:a3:b5:ba:3c:a7:32:2b:7a:b1:26:a3:
                    d7:3b:3e:0a:cc:f5:5b:d8:a4:c4:33:a5:34:21:40:
                    20:e8:8a:72:3d:6c:c5:b6:0b:a1:18:c8:04:e7:5b:
                    8b:1c:9f:94:fc:97:48:ee:45:21:a0:ca:06:f8:f5:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AB:A5:5D:61:36:0E:5C:75:51:25:F6:D5:2F:CB:C7:04:F6:0A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5f45f22-cdc2-3a41-8771-55420fe3b413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:6b:c2:c6:a5:c4:0d:0b:d2:a1:1f:42:b7:bf:9f:40:f2:aa:
         f6:d1:b8:6d:66:72:2a:86:3c:2b:8e:75:8d:76:09:9c:e0:6b:
         d3:a7:6f:25:c7:29:33:1d:b2:5f:8e:90:9d:bd:b4:18:a7:95:
         40:a1:e9:9c:f8:a0:bc:69:3a:81:0d:21:70:3d:60:33:14:f0:
         ee:8c:8a:b2:a0:d4:b2:ff:32:ae:96:6d:b6:9b:e3:59:93:d6:
         34:c5:cd:da:bf:10:03:46:15:76:84:a3:76:42:74:08:55:e0:
         27:07:90:bb:2c:36:2a:b4:4a:69:c8:5c:ab:a2:44:4b:66:8c:
         9f:26:90:4d:49:62:78:2d:97:41:3e:ac:cb:f8:77:bc:04:df:
         9d:22:49:f5:81:ca:00:33:62:a8:98:5b:81:e2:04:ed:2b:f1:
         32:bc:10:ce:aa:e1:6b:5c:1f:57:97:13:eb:48:93:79:3e:27:
         0d:fa:44:bc:50:37:78:58:a5:8e:01:79:ce:95:c7:ab:bd:94:
         7e:76:84:eb:18:cf:bb:9b:58:98:97:27:4d:df:30:03:c0:e9:
         54:47:91:72:91:61:8e:61:98:b4:32:9b:25:7e:41:16:dd:3d:
         83:f4:dd:5a:73:08:c8:56:b6:7a:a0:3a:44:57:53:13:c8:5f:
         c5:08:53:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQeSlSocvj4PndYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
YWI1MTQ4YWItNjY2MC00YzQ4LWFmNTUtY2EzZGQyYWYyMWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnUYfTbRs6ZOXnh5tzCCQygzSH4oMcslVpUd
AOhsPJTltg7NPZ6wRWPs8g5UgkZQjd1/FLuSZC90kYLt7YpPCTo2TQkhGfMxW2yw
qEbhjYf3XaSpCrESsfC0gRk/huJr2kFYgEW+8Vs/B+Qm9XHEd2sTGwjjS29HtIfX
/eRbAZIPfnniaa00NEbmGliYful2WAo5I8kr+0W9QOEx9sTbF1X4yfC3y4GA2mH4
aF+Hs/QejrIsMEze+VY7Xg6DzmShV8lZKeOVo7W6PKcyK3qxJqPXOz4KzPVb2KTE
M6U0IUAg6IpyPWzFtguhGMgE51uLHJ+U/JdI7kUhoMoG+PVBCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqrpV1hNg5cdVEl9tUvy8cE9grBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTVmNDVmMjItY2RjMi0z
YTQxLTg3NzEtNTU0MjBmZTNiNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMBrwsalxA0L0qEfQre/n0DyqvbRuG1mciqGPCuOdY12CZzga9OnbyXH
KTMdsl+OkJ29tBinlUCh6Zz4oLxpOoENIXA9YDMU8O6MirKg1LL/Mq6Wbbab41mT
1jTFzdq/EANGFXaEo3ZCdAhV4CcHkLssNiq0SmnIXKuiREtmjJ8mkE1JYngtl0E+
rMv4d7wE350iSfWBygAzYqiYW4HiBO0r8TK8EM6q4WtcH1eXE+tIk3k+Jw36RLxQ
N3hYpY4Bec6Vx6u9lH52hOsYz7ubWJiXJ03fMAPA6VRHkXKRYY5hmLQymyV+QRbd
PYP03VpzCMhWtnqgOkRXUxPIX8UIU9I=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:30 2026 by rpki-client