Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa
File:                     1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa (raw, json)
Hash identifier:          z6c1Fbf1oOV+kyTjfPY1tPryh6aOUfRUlLveK+sbAH8=
Subject key identifier:   1A:B5:64:74:51:18:18:1E:2F:87:D4:56:F9:EF:6B:BB:0B:A5:A5:A0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CCEB8C4C3DEB04B83FAB7FA80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa
Signing time:             Mon 09 Feb 2026 16:23:27 +0000
ROA not before:           Mon 09 Feb 2026 16:23:27 +0000
ROA not after:            Sun 10 May 2026 15:23:27 +0000
asID:                     395839
IP address blocks:        205.164.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:b8:c4:c3:de:b0:4b:83:fa:b7:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  9 16:23:27 2026 GMT
            Not After : May 10 15:23:27 2026 GMT
        Subject: CN=4e75b22b-38a9-432d-b358-5992ebad893a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:a5:e4:53:5a:36:62:1b:6e:5d:a1:2b:ea:
                    63:b8:d8:1c:86:d3:be:e4:c3:98:55:26:73:c3:ab:
                    48:76:97:7c:86:c6:78:a8:aa:76:c5:3e:a6:60:92:
                    e9:c7:7e:e9:5c:05:62:2b:44:b4:00:ac:b8:34:94:
                    af:00:07:5b:47:99:65:ee:6a:3b:94:29:5b:c6:b4:
                    0d:94:ce:d3:9b:ca:d3:72:75:a5:93:14:e1:d9:c0:
                    5b:22:24:33:f8:f0:e2:a9:49:58:e0:bb:97:ca:31:
                    a2:18:21:60:85:57:ef:f2:6f:b3:48:0b:44:86:81:
                    10:fa:60:00:2a:af:34:02:97:6f:27:10:1c:5f:c4:
                    98:77:de:c1:3b:1b:ae:60:db:1e:5f:23:ad:9a:ed:
                    15:fd:d6:41:4f:f8:ac:05:1a:ff:84:a2:bd:cd:5f:
                    cd:b4:ac:e7:95:0b:2e:11:22:b5:ea:e7:b6:c8:26:
                    0b:a4:c9:a8:af:fc:46:1f:69:54:cc:ae:60:a4:ec:
                    2c:bf:13:8a:73:3e:e5:c2:e0:33:cb:22:3a:be:9b:
                    00:8e:63:27:dc:d4:c0:d7:48:a7:72:5f:58:f2:c3:
                    8f:ec:2b:94:37:12:85:af:9c:c5:f1:61:6f:d3:64:
                    be:00:c1:9f:df:8c:21:ef:43:d2:61:1f:f5:78:1e:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B5:64:74:51:18:18:1E:2F:87:D4:56:F9:EF:6B:BB:0B:A5:A5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.164.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:f3:c8:c5:cc:8f:17:f5:d6:f0:f1:ba:79:28:6c:e8:31:
         1b:8d:bb:5b:18:fe:61:d3:c1:49:a5:b7:a8:44:52:e9:d5:60:
         29:11:56:c0:ee:83:d8:37:aa:cc:29:af:46:6a:81:f6:80:ed:
         1a:4e:30:06:13:2f:47:84:3a:69:38:b5:e5:f8:e9:b8:8c:97:
         a7:d0:aa:23:81:dd:67:b0:fe:d5:a9:9d:d3:9d:b0:3a:07:6a:
         9b:da:60:7e:82:ff:5f:7a:11:38:f0:cd:38:a9:90:8c:7d:3e:
         b5:54:c4:74:cb:da:d7:2b:bf:cb:cc:1e:8a:aa:fa:ae:b4:e5:
         23:69:87:79:26:dc:cb:7d:ef:29:37:3f:49:62:4f:2f:41:b2:
         86:c9:63:d9:48:cd:aa:a4:82:13:2d:6e:1d:e2:b0:be:f5:dc:
         39:76:4e:f8:46:58:d4:16:84:9b:f1:e1:41:ec:40:5c:dd:b3:
         d1:80:4d:ad:e4:8c:72:4c:89:d9:52:8c:b0:6e:bd:9d:a4:f5:
         db:40:56:9c:68:ce:a7:77:fe:dc:78:20:6a:38:4b:07:84:0f:
         7c:f9:99:3b:19:03:e3:62:b0:e5:73:3c:aa:7f:36:9d:87:5f:
         ea:f2:58:35:0c:8c:d3:ab:0e:54:e8:2a:b0:a9:4f:fd:af:f9:
         b8:f6:4c:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOuMTD3rBLg/q3+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIwOTE2MjMyN1oXDTI2MDUxMDE1MjMyN1owLzEtMCsGA1UEAxMk
NGU3NWIyMmItMzhhOS00MzJkLWIzNTgtNTk5MmViYWQ4OTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45yl5FNaNmIbbl2hK+pjuNgchtO+5MOYVSZz
w6tIdpd8hsZ4qKp2xT6mYJLpx37pXAViK0S0AKy4NJSvAAdbR5ll7mo7lClbxrQN
lM7Tm8rTcnWlkxTh2cBbIiQz+PDiqUlY4LuXyjGiGCFghVfv8m+zSAtEhoEQ+mAA
Kq80ApdvJxAcX8SYd97BOxuuYNseXyOtmu0V/dZBT/isBRr/hKK9zV/NtKznlQsu
ESK16ue2yCYLpMmor/xGH2lUzK5gpOwsvxOKcz7lwuAzyyI6vpsAjmMn3NTA10in
cl9Y8sOP7CuUNxKFr5zF8WFv02S+AMGf34wh70PSYR/1eB6RFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBq1ZHRRGBgeL4fUVvnva7sLpaWgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWIxZGFkYmQtMmM0ZS0z
YTU3LTg1MjktMTYyNjY5Zjk0YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzaRyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwI88jFzI8X9dbw8bp5KGzoMRuNu1sY/mHTwUmlt6hEUunVYCkRVsDu
g9g3qswpr0ZqgfaA7RpOMAYTL0eEOmk4teX46biMl6fQqiOB3Wew/tWpndOdsDoH
apvaYH6C/196ETjwzTipkIx9PrVUxHTL2tcrv8vMHoqq+q605SNph3km3Mt97yk3
P0liTy9BsobJY9lIzaqkghMtbh3isL713Dl2TvhGWNQWhJvx4UHsQFzds9GATa3k
jHJMidlSjLBuvZ2k9dtAVpxozqd3/tx4IGo4SweED3z5mTsZA+NisOVzPKp/Np2H
X+ryWDUMjNOrDlToKrCpT/2v+bj2TAQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:57 2026 by rpki-client