Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a6e87cb-d69c-3fe7-a209-0d968e3fe085.roa
File:                     4a6e87cb-d69c-3fe7-a209-0d968e3fe085.roa (raw, json)
Hash identifier:          yGg5JyrQpA+tHdexgXWaPYa9t7t1J4KDpL6VOt/U/7o=
Subject key identifier:   8A:1B:41:72:F3:0F:F9:88:BF:25:5B:70:34:46:F4:4D:09:80:4C:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC6797A1BAF4A5EFCD8ADDC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a6e87cb-d69c-3fe7-a209-0d968e3fe085.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        141.152.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:97:a1:ba:f4:a5:ef:cd:8a:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=53b0d0e1-6c56-4070-991c-83041dc82bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:70:e5:27:d2:39:c3:dc:53:44:66:88:43:
                    fa:ed:f4:b7:ee:32:83:45:be:12:7e:4a:be:2d:4c:
                    ce:61:01:34:1f:ab:b4:9a:0d:9b:f5:4f:3f:42:2b:
                    8d:e9:2b:fe:9b:e1:61:6c:7d:24:2a:42:d7:99:ba:
                    f3:71:92:a3:11:ab:5d:39:40:ac:3c:59:35:3b:4f:
                    a2:18:69:8a:27:9a:c9:f4:c8:7c:ce:87:70:c4:41:
                    19:17:1c:72:18:56:f4:0b:13:29:1b:1d:38:28:b7:
                    b4:ed:0b:9b:0f:0f:4f:05:b5:c5:cb:36:f4:65:29:
                    d2:88:37:c5:1c:14:5a:a5:f0:a5:c8:fc:33:e2:4d:
                    b9:c1:c6:33:bb:1c:85:d8:c9:9a:52:a3:eb:dd:3d:
                    43:e7:4f:e1:2f:42:62:ba:82:64:4c:6e:af:d2:74:
                    17:97:9a:dc:ad:60:65:b9:6a:b4:51:d8:50:02:b1:
                    a4:de:5d:11:e6:6f:62:95:35:fa:ce:19:05:8a:a5:
                    5c:97:bc:8e:f4:4f:c0:66:6d:87:85:71:ac:2e:e4:
                    44:03:6f:cd:8a:df:9b:4f:6c:61:20:a4:61:cb:a1:
                    a7:6b:0d:34:ff:7e:b7:25:c0:4e:a9:1c:35:51:92:
                    e4:7f:a5:ab:57:24:1e:c3:67:74:a8:3d:5f:52:b1:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:41:72:F3:0F:F9:88:BF:25:5B:70:34:46:F4:4D:09:80:4C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a6e87cb-d69c-3fe7-a209-0d968e3fe085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:8a:c5:db:03:7d:3c:8a:e3:2c:5b:32:01:a5:41:52:a8:
         8c:2b:8e:cf:2e:9e:28:83:90:aa:53:20:34:67:07:2b:f7:90:
         65:30:95:b1:6c:42:96:ff:0f:85:1e:88:e9:ff:39:03:7c:3f:
         ec:01:97:d5:86:7a:0d:7c:33:37:88:c6:fc:60:7f:0c:a7:99:
         10:66:ee:a3:52:75:91:b3:60:c1:a9:98:e6:01:85:21:d5:b6:
         f0:ef:0d:51:c6:f4:1f:fb:2f:66:1e:60:37:09:31:d2:31:5c:
         91:0d:f7:ad:50:b6:14:9e:48:0f:6c:6e:27:5c:20:9e:7d:c4:
         34:ae:7d:56:f1:dc:89:ed:58:68:0a:82:56:4c:41:5f:58:6f:
         78:a3:2e:89:f9:0b:8b:66:b2:d6:ad:05:a8:a6:3e:6b:9a:7e:
         26:5f:94:da:d7:20:b1:64:9e:13:b7:16:b1:1a:ee:08:12:7b:
         25:c7:18:c0:78:61:b1:86:ad:de:24:57:68:5a:be:7e:fb:b9:
         df:c1:d7:c7:6b:46:9c:ad:ef:cb:d5:4f:f9:14:f3:ca:91:1f:
         cc:28:e5:96:32:ba:a3:e3:17:9a:c3:13:98:fe:b2:7e:82:32:
         d6:99:c3:b1:7e:29:48:58:ac:3c:e8:8c:8e:bd:18:66:9b:1c:
         19:f6:ad:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzcZ5ehuvSl782K3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
NTNiMGQwZTEtNmM1Ni00MDcwLTk5MWMtODMwNDFkYzgyYmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Vw5SfSOcPcU0RmiEP67fS37jKDRb4Sfkq+
LUzOYQE0H6u0mg2b9U8/QiuN6Sv+m+FhbH0kKkLXmbrzcZKjEatdOUCsPFk1O0+i
GGmKJ5rJ9Mh8zodwxEEZFxxyGFb0CxMpGx04KLe07QubDw9PBbXFyzb0ZSnSiDfF
HBRapfClyPwz4k25wcYzuxyF2MmaUqPr3T1D50/hL0JiuoJkTG6v0nQXl5rcrWBl
uWq0UdhQArGk3l0R5m9ilTX6zhkFiqVcl7yO9E/AZm2HhXGsLuREA2/Nit+bT2xh
IKRhy6Gnaw00/363JcBOqRw1UZLkf6WrVyQew2d0qD1fUrF1TQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIobQXLzD/mIvyVbcDRG9E0JgEwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGE2ZTg3Y2ItZDY5Yy0z
ZmU3LWEyMDktMGQ5NjhlM2ZlMDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjZgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjWqKxdsDfTyK4yxbMgGlQVKojCuOzy6eKIOQqlMgNGcHK/eQZTCVsWxC
lv8PhR6I6f85A3w/7AGX1YZ6DXwzN4jG/GB/DKeZEGbuo1J1kbNgwamY5gGFIdW2
8O8NUcb0H/svZh5gNwkx0jFckQ33rVC2FJ5ID2xuJ1wgnn3ENK59VvHcie1YaAqC
VkxBX1hveKMuifkLi2ay1q0FqKY+a5p+Jl+U2tcgsWSeE7cWsRruCBJ7JccYwHhh
sYat3iRXaFq+fvu538HXx2tGnK3vy9VP+RTzypEfzCjlljK6o+MXmsMTmP6yfoIy
1pnDsX4pSFisPOiMjr0YZpscGfatUw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:10 2026 by rpki-client