Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/37edd5c0-1647-326a-99d3-568a55977180.roa
File:                     37edd5c0-1647-326a-99d3-568a55977180.roa (raw, json)
Hash identifier:          aOcJv0W89bkqtwVt+M0O/WimFTRLdnccU5+Ha37FSvE=
Subject key identifier:   87:E1:A1:5A:C4:9E:EC:F4:8B:E4:B2:6B:27:DD:98:77:D5:9E:F5:81
Certificate issuer:       /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial:       010D0C9F4328584CE5463117C4BA144409ED1A40
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/37edd5c0-1647-326a-99d3-568a55977180.roa
Signing time:             Tue 17 Feb 2026 18:16:11 +0000
ROA not before:           Tue 17 Feb 2026 18:16:11 +0000
ROA not after:            Mon 18 May 2026 17:16:11 +0000
asID:                     16509
IP address blocks:        198.145.124.0/24 maxlen: 24
                          198.145.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:46:31:17:c4:ba:14:44:09:ed:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
        Validity
            Not Before: Feb 17 18:16:11 2026 GMT
            Not After : May 18 17:16:11 2026 GMT
        Subject: CN=fa10aeb0-ab2a-45d4-8a9d-d1db2adf4e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:18:06:46:93:d7:c6:98:a9:f9:3f:bb:b7:55:
                    03:96:48:f2:fa:b8:d0:06:c0:3c:67:4e:47:d6:45:
                    a7:95:1c:5a:d0:77:05:bc:c0:e2:51:ae:5d:8c:61:
                    3e:42:0d:2f:da:71:3f:f4:94:c9:30:e8:c5:a1:e8:
                    19:0f:b5:47:3d:b1:fc:6a:ad:fd:e7:1e:1b:66:d6:
                    b4:1f:09:94:49:88:7a:1f:7c:d1:fc:79:5e:e1:5f:
                    a5:77:fa:46:2c:a3:86:43:a8:4c:17:d5:c9:f8:6b:
                    83:84:30:2d:b9:65:0a:24:a3:59:cd:80:87:ce:98:
                    17:5b:1b:4e:5b:31:cd:f2:5c:83:ef:ef:5c:ce:3c:
                    2c:e7:13:c9:d2:12:7a:b4:e1:a4:e3:5d:3e:dc:2d:
                    06:37:b5:01:b2:1b:13:9b:36:94:48:7c:7f:6b:51:
                    a1:bb:1e:9f:77:11:2f:c9:99:98:17:a0:95:d4:21:
                    22:25:d0:01:04:f0:21:1f:99:dc:dc:dc:ea:bd:b3:
                    0b:0f:f0:21:f6:39:b4:be:24:91:d0:07:b4:c5:8a:
                    c6:9b:29:7b:ae:f0:88:89:20:eb:03:dd:12:79:33:
                    96:1b:ad:5a:4e:6e:b5:21:97:4e:d9:e7:19:e9:be:
                    da:d5:e8:1d:b3:9a:0b:86:3c:87:00:78:23:b6:dc:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E1:A1:5A:C4:9E:EC:F4:8B:E4:B2:6B:27:DD:98:77:D5:9E:F5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/37edd5c0-1647-326a-99d3-568a55977180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl

            X509v3 Authority Key Identifier:
                keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4a:23:56:71:23:c8:97:f8:42:a5:23:43:a6:5d:9e:14:c1:
         bf:f4:e8:ec:72:9b:41:ec:8a:6a:7a:ec:d1:e6:65:f3:08:2d:
         1c:8a:a5:21:58:a2:fe:26:c4:ca:97:e0:ff:b8:0f:a4:3a:db:
         b9:5c:39:3b:d3:e4:02:af:ef:b1:57:66:14:9c:13:2d:7b:dc:
         12:0a:5d:80:84:83:cb:0f:38:47:60:fc:e1:dd:53:9b:8a:a3:
         5c:6d:f1:a9:7a:f4:26:d2:45:58:c3:6b:e6:34:09:97:b3:1c:
         30:86:b6:d3:d6:1a:bc:a8:16:53:21:ba:20:48:ba:af:35:f8:
         3a:9e:5b:2a:11:4b:02:1d:11:f2:dd:3a:d0:15:b9:0e:6d:97:
         25:d3:16:1a:de:16:fd:51:91:af:b0:32:e4:8c:b2:0b:88:40:
         1a:3c:ac:27:cc:64:a4:72:b4:38:14:e8:45:25:84:c3:cf:16:
         0e:28:30:c4:cd:95:22:80:69:e5:ee:e4:4c:08:fb:e0:bf:71:
         cf:3c:1f:42:b3:4b:5f:2f:b0:be:f2:22:c4:ca:ee:e4:84:fd:
         7f:3f:e4:4e:21:c2:0a:33:e0:42:41:1b:23:60:47:e5:6d:6f:
         a3:f9:b5:83:78:a2:16:e8:75:98:ea:b8:9e:3b:a3:35:21:d5:
         2f:61:84:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlRjEXxLoURAntGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk
MTcwMB4XDTI2MDIxNzE4MTYxMVoXDTI2MDUxODE3MTYxMVowLzEtMCsGA1UEAxMk
ZmExMGFlYjAtYWIyYS00NWQ0LThhOWQtZDFkYjJhZGY0ZTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBgGRpPXxpip+T+7t1UDlkjy+rjQBsA8Z05H
1kWnlRxa0HcFvMDiUa5djGE+Qg0v2nE/9JTJMOjFoegZD7VHPbH8aq395x4bZta0
HwmUSYh6H3zR/Hle4V+ld/pGLKOGQ6hMF9XJ+GuDhDAtuWUKJKNZzYCHzpgXWxtO
WzHN8lyD7+9czjws5xPJ0hJ6tOGk410+3C0GN7UBshsTmzaUSHx/a1Ghux6fdxEv
yZmYF6CV1CEiJdABBPAhH5nc3NzqvbMLD/Ah9jm0viSR0Ae0xYrGmyl7rvCIiSDr
A90SeTOWG61aTm61IZdO2ecZ6b7a1egds5oLhjyHAHgjttzYnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfhoVrEnuz0i+SyayfdmHfVnvWBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy
MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvMzdlZGQ1YzAtMTY0Ny0z
MjZhLTk5ZDMtNTY4YTU1OTc3MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm
YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5
ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3
ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpF8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNKI1ZxI8iX+EKlI0OmXZ4Uwb/06Oxym0Hsimp67NHmZfMILRyKpSFY
ov4mxMqX4P+4D6Q627lcOTvT5AKv77FXZhScEy173BIKXYCEg8sPOEdg/OHdU5uK
o1xt8al69CbSRVjDa+Y0CZezHDCGttPWGryoFlMhuiBIuq81+DqeWyoRSwIdEfLd
OtAVuQ5tlyXTFhreFv1Rka+wMuSMsguIQBo8rCfMZKRytDgU6EUlhMPPFg4oMMTN
lSKAaeXu5EwI++C/cc88H0KzS18vsL7yIsTK7uSE/X8/5E4hwgoz4EJBGyNgR+Vt
b6P5tYN4ohbodZjquJ47ozUh1S9hhK8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:16:51 2026 by rpki-client