Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa
File:                     2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa (raw, json)
Hash identifier:          qe3g69Fswr0BQXFk5e9YCN834s/KpSXVOGkevHMamyU=
Subject key identifier:   93:F2:13:4A:ED:D0:E6:EE:B0:B4:29:77:E8:5E:C7:18:DB:37:70:43
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F4328584CDB020E16892A6C47EB7A0000
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        170.200.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:0e:16:89:2a:6c:47:eb:7a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=03c89b1e-1b3d-4b6b-a314-1aa990bc1785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:ae:e2:d6:2f:54:dd:49:9e:97:c2:95:6d:
                    34:8c:a5:98:52:ee:06:94:15:b2:32:f1:f9:d8:8b:
                    8a:61:b6:89:07:e3:8c:da:58:ad:95:f0:6a:cd:84:
                    0f:95:e9:4c:3e:5e:d4:fa:e0:74:73:e1:0d:a7:a6:
                    a6:76:22:28:1a:a1:8b:56:50:5f:51:90:f6:b6:f7:
                    f4:ea:5a:1b:c3:72:c9:37:5a:a0:cc:cf:1c:22:ee:
                    19:75:53:3a:30:8f:b8:61:4c:39:2a:23:77:96:42:
                    25:89:6f:39:de:80:d8:59:5b:64:96:a0:ef:f0:c8:
                    b0:4d:98:4e:28:12:f7:89:4c:34:a7:46:0b:05:3a:
                    be:11:cd:3c:85:d6:5d:da:2f:53:ff:23:32:98:9a:
                    71:83:b7:93:17:4c:22:aa:b8:16:b1:fa:2e:56:96:
                    80:98:8a:23:84:4b:63:9b:5b:01:fd:51:80:2e:31:
                    d7:77:f7:d5:71:cc:cc:8e:47:32:35:8b:63:05:b2:
                    33:5b:0c:59:5f:32:3c:e9:6a:b9:b8:e8:3c:4e:4b:
                    78:cd:20:2d:2b:09:a7:8f:6a:1d:18:d6:5e:14:5f:
                    37:6a:6c:6d:68:63:d8:a0:e2:5c:a1:2f:51:52:24:
                    3c:b6:f2:eb:6f:00:00:9f:8d:d4:db:69:dc:98:ad:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F2:13:4A:ED:D0:E6:EE:B0:B4:29:77:E8:5E:C7:18:DB:37:70:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:95:86:41:2c:ac:a1:2b:d6:ae:17:74:77:e8:f0:be:8a:
         32:7a:da:c8:d6:31:db:17:f2:55:e2:4f:b4:5b:d7:d4:7c:9d:
         88:b5:19:d1:30:0a:f8:63:0a:e5:1f:49:90:6d:5d:63:39:7c:
         be:13:74:0d:c4:cd:3b:45:a5:3b:19:d5:99:01:93:de:ae:07:
         fa:25:a3:1e:68:ce:02:93:19:cd:61:dd:61:76:bf:44:2c:a8:
         20:7e:d8:c5:3b:4c:a2:9f:46:f2:6f:f7:58:cc:1a:f4:57:d3:
         ab:48:5b:10:98:71:54:d6:ab:31:64:50:6a:6f:a9:43:aa:8c:
         94:45:54:9a:90:90:b0:07:1d:a0:94:6c:05:4a:2b:11:6f:20:
         0f:4c:ed:84:cb:49:10:ca:71:5b:aa:bf:52:d6:4e:b4:10:f2:
         b7:bc:c7:98:54:94:2c:de:44:a4:f2:63:d4:e0:9d:42:9a:ef:
         87:fb:16:46:22:ee:fb:14:c6:9c:bc:1c:ca:82:6e:c4:92:57:
         e5:b6:6c:f3:3b:31:5f:c6:d6:26:c9:f1:c5:04:18:02:1a:36:
         e7:47:49:f7:4f:34:c8:1c:76:bd:6a:a5:15:eb:54:99:eb:26:
         ff:43:1d:48:83:47:86:30:cf:70:14:73:97:44:3c:81:53:e3:
         f9:6c:05:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAg4WiSpsR+t6AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk
MGJkMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
MDNjODliMWUtMWIzZC00YjZiLWEzMTQtMWFhOTkwYmMxNzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdCu4tYvVN1JnpfClW00jKWYUu4GlBWyMvH5
2IuKYbaJB+OM2litlfBqzYQPlelMPl7U+uB0c+ENp6amdiIoGqGLVlBfUZD2tvf0
6lobw3LJN1qgzM8cIu4ZdVM6MI+4YUw5KiN3lkIliW853oDYWVtklqDv8MiwTZhO
KBL3iUw0p0YLBTq+Ec08hdZd2i9T/yMymJpxg7eTF0wiqrgWsfouVpaAmIojhEtj
m1sB/VGALjHXd/fVcczMjkcyNYtjBbIzWwxZXzI86Wq5uOg8Tkt4zSAtKwmnj2od
GNZeFF83amxtaGPYoOJcoS9RUiQ8tvLrbwAAn43U22ncmK360wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPyE0rt0ObusLQpd+hexxjbN3BDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk
NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMjAwNWQ1OGEtOGI1OC0z
NWEyLWJiZmItZGRhM2UwMmU0NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw
Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi
ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj
NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaRlYZBLKyhK9auF3R36PC+ijJ62sjWMdsX8lXiT7Rb19R8nYi1GdEw
CvhjCuUfSZBtXWM5fL4TdA3EzTtFpTsZ1ZkBk96uB/olox5ozgKTGc1h3WF2v0Qs
qCB+2MU7TKKfRvJv91jMGvRX06tIWxCYcVTWqzFkUGpvqUOqjJRFVJqQkLAHHaCU
bAVKKxFvIA9M7YTLSRDKcVuqv1LWTrQQ8re8x5hUlCzeRKTyY9TgnUKa74f7FkYi
7vsUxpy8HMqCbsSSV+W2bPM7MV/G1ibJ8cUEGAIaNudHSfdPNMgcdr1qpRXrVJnr
Jv9DHUiDR4Ywz3AUc5dEPIFT4/lsBQI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:15 2026 by rpki-client