Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
File:                     ec8ade42-f384-3872-bf6b-790c544fbeca.roa (raw, json)
Hash identifier:          zbH2QKnS2LU5A/oeP81eXb/yRd7Zoh1WI5gBpxGBTUg=
Subject key identifier:   C2:F0:DA:E5:43:D5:C0:18:0E:B6:E1:52:59:DB:9C:31:F8:5E:E1:88
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584D746FCC1034B6843C1DC38680
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     14579
IP address blocks:        167.80.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:cc:10:34:b6:84:3c:1d:c3:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=f4c25488-8c45-4a10-87c6-ee01eda5b76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:ee:d7:22:29:38:a6:ee:2b:aa:29:da:da:
                    a1:2e:a8:48:2c:75:e4:11:0d:26:10:69:96:2e:af:
                    5c:9e:7d:b8:a0:c3:f5:0a:5d:ce:3d:86:85:75:28:
                    39:70:ea:81:7f:7b:65:6a:96:46:aa:86:0b:a9:6b:
                    e5:87:1d:aa:a8:08:c6:38:cb:f6:3f:c7:ab:77:9b:
                    aa:f1:d0:0b:29:4a:76:18:df:ab:56:bc:5f:95:09:
                    6b:3b:6e:c7:b9:b9:eb:ca:dd:58:3f:dd:41:b8:50:
                    7e:7c:14:95:9e:18:8d:3a:a8:75:92:7a:33:99:33:
                    90:05:8e:2e:c5:a8:c2:66:a2:74:db:60:c1:09:5d:
                    d0:23:da:14:e3:fe:07:bc:92:7c:ba:6d:5a:7d:9c:
                    ae:78:48:9a:ae:0d:68:b7:8f:d8:b8:4e:da:6c:36:
                    4b:5a:7a:92:52:ae:9e:0c:53:49:3a:97:7a:d9:a5:
                    0e:5c:1d:ff:14:b5:b6:17:f1:81:13:56:42:9a:e8:
                    6a:38:b9:74:ac:95:39:43:c0:22:9f:b1:28:61:51:
                    40:5c:3a:ad:44:3f:51:ee:b9:7a:26:8c:bf:ee:c3:
                    36:d8:6d:4b:48:65:99:36:6f:fb:20:27:d1:98:81:
                    9c:70:2a:f9:5f:17:4c:46:1e:0a:5f:6e:38:79:09:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:DA:E5:43:D5:C0:18:0E:B6:E1:52:59:DB:9C:31:F8:5E:E1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:1e:df:7e:5a:83:6a:2b:37:37:a7:b4:56:cd:24:be:c4:
         9e:b9:7f:cd:b5:69:8e:e9:47:2e:4f:84:45:40:a0:8d:c9:46:
         54:3a:21:23:ad:25:3b:8a:b7:fa:80:c8:e6:14:a1:66:78:30:
         24:a1:f0:c7:a1:5e:17:6e:3b:80:9f:f1:5f:a9:43:fd:47:97:
         2f:92:43:27:b9:57:68:77:13:75:6a:25:f2:66:f3:cd:db:90:
         55:88:97:b5:ae:fb:2a:ff:a7:0a:1f:d0:80:c7:32:b6:c4:a3:
         a4:66:9c:a3:f7:ea:17:26:5a:d3:7d:c4:a2:48:e6:1b:f7:de:
         c4:69:46:d0:74:10:b6:ad:1b:47:a2:e0:a6:79:5a:76:f0:8f:
         78:84:a6:89:e1:43:f3:cb:12:54:50:4e:99:ef:e8:9c:dd:a9:
         2a:47:85:bc:71:7e:54:bd:e8:4a:e7:42:85:db:7a:06:6d:c3:
         df:ba:44:e8:4d:ab:16:f4:c6:fd:45:a1:f6:0c:a6:42:2c:81:
         2e:15:43:10:b3:14:8b:fa:22:4d:6e:f3:99:c6:b7:fa:09:47:
         0f:40:0c:db:58:8b:83:04:a6:fe:80:42:85:6f:e1:1f:fd:5f:
         29:8c:f1:dc:68:f6:6b:00:c3:e6:e0:f6:eb:65:7c:46:9d:5e:
         c2:cc:35:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8wQNLaEPB3DhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYzYzU1NGItZThjZC00MzA2LTkxZTAtNGEyNzUyNjlj
Y2JiMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZjRjMjU0ODgtOGM0NS00YTEwLTg3YzYtZWUwMWVkYTViNzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Lu1yIpOKbuK6op2tqhLqhILHXkEQ0mEGmW
Lq9cnn24oMP1Cl3OPYaFdSg5cOqBf3tlapZGqoYLqWvlhx2qqAjGOMv2P8erd5uq
8dALKUp2GN+rVrxflQlrO27Hubnryt1YP91BuFB+fBSVnhiNOqh1knozmTOQBY4u
xajCZqJ022DBCV3QI9oU4/4HvJJ8um1afZyueEiarg1ot4/YuE7abDZLWnqSUq6e
DFNJOpd62aUOXB3/FLW2F/GBE1ZCmuhqOLl0rJU5Q8Ain7EoYVFAXDqtRD9R7rl6
Joy/7sM22G1LSGWZNm/7ICfRmIGccCr5XxdMRh4KX244eQkTQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLw2uVD1cAYDrbhUlnbnDH4XuGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZjNj
NTU0Yi1lOGNkLTQzMDYtOTFlMC00YTI3NTI2OWNjYmIvZWM4YWRlNDItZjM4NC0z
ODcyLWJmNmItNzkwYzU0NGZiZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGYzYzU1NGItZThjZC00MzA2LTkx
ZTAtNGEyNzUyNjljY2JiLzRmM2M1NTRiLWU4Y2QtNDMwNi05MWUwLTRhMjc1MjY5
Y2NiYi5jcmwwHwYDVR0jBBgwFoAU3wM28+iu8MD4VP4VO4mOxBvO6vwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZjNjNTU0Yi1lOGNkLTQzMDYtOTFlMC00YTI3
NTI2OWNjYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1CVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2eHt9+WoNqKzc3p7RWzSS+xJ65f821aY7pRy5PhEVAoI3JRlQ6ISOt
JTuKt/qAyOYUoWZ4MCSh8MehXhduO4Cf8V+pQ/1Hly+SQye5V2h3E3VqJfJm883b
kFWIl7Wu+yr/pwof0IDHMrbEo6RmnKP36hcmWtN9xKJI5hv33sRpRtB0ELatG0ei
4KZ5Wnbwj3iEponhQ/PLElRQTpnv6JzdqSpHhbxxflS96ErnQoXbegZtw9+6ROhN
qxb0xv1FofYMpkIsgS4VQxCzFIv6Ik1u85nGt/oJRw9ADNtYi4MEpv6AQoVv4R/9
XymM8dxo9msAw+bg9utlfEadXsLMNb0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:34 2026 by rpki-client