Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
File:                     2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa (raw, json)
Hash identifier:          1Q1qclKNwBeYqcW70pjH//fVu6s55GibB6K1SB/1bEc=
Subject key identifier:   B3:6D:EB:28:C4:4E:AB:8E:D3:D4:EF:E8:1A:82:F5:DC:46:00:A7:06
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584CC77746F4F602DEC4E52F1000
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     6142
IP address blocks:        74.85.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:46:f4:f6:02:de:c4:e5:2f:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=bed0e608-5536-4fb7-8056-5e6abdbc1c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:5b:28:51:6d:09:e1:5a:48:99:d2:48:ba:
                    9a:2b:f9:af:10:c6:6c:0b:19:c5:a3:bc:a0:20:5e:
                    0f:a9:95:be:73:bf:ef:ab:d8:e8:dd:55:33:e8:e6:
                    d7:c8:84:a8:f5:27:53:c5:e5:fc:9d:e8:e8:00:31:
                    18:cd:c8:7c:28:95:4c:65:d0:39:d6:9b:32:3a:30:
                    d2:15:e6:1b:53:ba:d3:88:e7:c2:68:62:4d:ab:47:
                    f5:bc:b5:2e:e4:b5:bb:4c:9e:64:b8:33:77:a6:3d:
                    cc:53:8c:1b:f1:20:71:dc:04:79:6e:a3:55:45:46:
                    c2:05:08:9b:28:e4:22:c8:88:a9:fb:af:8f:f8:73:
                    df:f4:d5:5a:e3:0e:b8:e1:ea:f4:a9:49:27:71:01:
                    24:b5:e3:03:54:65:3f:ba:a3:16:db:f9:18:92:10:
                    ad:2b:7a:e7:22:5b:24:12:0f:ba:9b:01:4c:e9:b8:
                    8f:0f:59:ec:27:ee:4e:f1:c1:ba:ec:46:34:95:94:
                    ec:72:b7:70:b8:cb:af:03:a1:6b:0d:f3:af:5d:dd:
                    a3:15:cd:69:ba:b9:88:8a:0d:f6:f5:30:be:2c:b4:
                    60:97:bd:ce:8f:33:2e:00:05:83:c4:62:d0:55:af:
                    22:59:a1:b8:91:46:93:3b:67:d1:6f:82:17:e3:f8:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:EB:28:C4:4E:AB:8E:D3:D4:EF:E8:1A:82:F5:DC:46:00:A7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:30:c7:a9:8d:36:e9:b4:b0:7f:73:cb:84:d2:df:49:68:
         63:f5:a0:d5:25:3e:9b:14:93:bc:64:71:20:f4:66:b7:18:9e:
         fd:a7:2f:10:d0:a9:1b:64:ae:5f:eb:ee:fe:db:56:b6:ef:3d:
         b4:f0:11:3f:3e:90:65:17:58:66:24:b1:b6:5a:f5:98:f3:e4:
         fa:fa:a1:4a:30:f5:18:32:44:6f:d2:f8:67:4b:6d:3b:5d:d8:
         9a:a2:7f:7b:d7:bd:5f:7b:96:14:94:7c:e7:fb:40:b4:ae:90:
         bb:ad:da:b7:89:6b:ee:b9:5f:ba:ad:31:05:d2:50:94:a9:56:
         ea:7a:fc:0c:7f:83:7b:95:db:c3:3e:78:6d:04:d8:60:cd:15:
         fe:38:56:d9:c6:44:df:bf:4d:15:ed:f7:c5:ba:96:e0:6b:64:
         83:ec:38:a3:32:55:04:87:db:4d:62:bc:c5:0a:16:63:2b:59:
         72:13:ef:23:1a:1d:ef:00:0d:37:47:2f:04:f6:75:e9:9f:1b:
         c8:60:ab:93:b8:b1:ff:62:4b:43:e9:6a:91:9d:45:42:68:6c:
         ea:70:a5:a1:d9:18:22:8f:49:7f:f0:41:6a:db:2f:09:30:04:
         a6:0f:b5:a3:c1:ae:80:64:e7:ce:22:9e:a1:2e:df:7f:94:c7:
         84:5e:29:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0b09gLexOUvEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQxMmYwMzUtYjM3Ni00ODA3LWE4YWMtZTk4NjgwYWIw
ZTM2MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
YmVkMGU2MDgtNTUzNi00ZmI3LTgwNTYtNWU2YWJkYmMxYzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGdbKFFtCeFaSJnSSLqaK/mvEMZsCxnFo7yg
IF4PqZW+c7/vq9jo3VUz6ObXyISo9SdTxeX8nejoADEYzch8KJVMZdA51psyOjDS
FeYbU7rTiOfCaGJNq0f1vLUu5LW7TJ5kuDN3pj3MU4wb8SBx3AR5bqNVRUbCBQib
KOQiyIip+6+P+HPf9NVa4w644er0qUkncQEkteMDVGU/uqMW2/kYkhCtK3rnIlsk
Eg+6mwFM6biPD1nsJ+5O8cG67EY0lZTscrdwuMuvA6FrDfOvXd2jFc1purmIig32
9TC+LLRgl73OjzMuAAWDxGLQVa8iWaG4kUaTO2fRb4IX4/gu1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLNt6yjETquO09Tv6BqC9dxGAKcGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEy
ZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2ODBhYjBlMzYvMmY4MThlZDEtN2ViZC0z
Yzc1LTk1MjYtMzU1OGNmOTBhYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQxMmYwMzUtYjM3Ni00ODA3LWE4
YWMtZTk4NjgwYWIwZTM2LzA0MTJmMDM1LWIzNzYtNDgwNy1hOGFjLWU5ODY4MGFi
MGUzNi5jcmwwHwYDVR0jBBgwFoAUiXGp/4PgRhbYPlvneCsT+IQp8HowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEyZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2
ODBhYjBlMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqTMMepjTbptLB/c8uE0t9JaGP1oNUlPpsUk7xkcSD0ZrcYnv2nLxDQ
qRtkrl/r7v7bVrbvPbTwET8+kGUXWGYksbZa9Zjz5Pr6oUow9RgyRG/S+GdLbTtd
2Jqif3vXvV97lhSUfOf7QLSukLut2reJa+65X7qtMQXSUJSpVup6/Ax/g3uV28M+
eG0E2GDNFf44VtnGRN+/TRXt98W6luBrZIPsOKMyVQSH201ivMUKFmMrWXIT7yMa
He8ADTdHLwT2demfG8hgq5O4sf9iS0PpapGdRUJobOpwpaHZGCKPSX/wQWrbLwkw
BKYPtaPBroBk584inqEu33+Ux4ReKYI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:17 2026 by rpki-client