Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56efdaf5-5393-38a3-b2e5-e45896dfcc76.roa
File:                     56efdaf5-5393-38a3-b2e5-e45896dfcc76.roa (raw, json)
Hash identifier:          ltNLnrNHVbnR2LRwchOKzfQw0a2tN7OLrxjp0BRy9cI=
Subject key identifier:   70:69:95:3F:52:3D:23:4A:EC:5E:81:B7:47:8E:1C:04:9F:B5:46:03
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584CE62CC17141F4B46C1E3F39C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56efdaf5-5393-38a3-b2e5-e45896dfcc76.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     20115
IP address blocks:        150.224.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c1:71:41:f4:b4:6c:1e:3f:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=ad760263-5fea-4a4c-b2aa-4883e0cda8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:4f:d5:e2:ba:5c:84:14:e8:27:df:b8:b4:
                    6a:be:b2:8b:09:45:a5:d6:5f:1b:aa:58:53:ad:f7:
                    f7:ff:95:46:9e:6c:5a:3d:3c:f5:42:1d:da:93:e6:
                    44:c3:1a:06:f5:b4:02:28:84:d0:f2:ba:e7:44:a4:
                    b7:ff:37:88:3a:f5:aa:aa:99:9a:f5:3c:9f:09:39:
                    60:36:2d:5e:57:3f:7e:d3:0c:a6:63:fd:24:fc:be:
                    78:9d:73:fc:5a:a8:cf:00:dd:16:d4:23:e3:3c:cc:
                    89:c0:7f:95:4d:e0:88:cc:56:c8:0c:bf:96:de:45:
                    28:3d:ed:ab:b5:53:18:dd:e4:39:7b:15:b1:cc:89:
                    0b:ce:c4:30:03:ee:6c:b3:dc:ed:91:69:e2:af:d5:
                    3c:7d:ce:7b:cf:58:d7:06:82:6f:b0:fb:28:0c:88:
                    44:ef:bc:70:ab:97:e7:ea:5d:d5:09:77:a9:a7:b9:
                    8d:f1:26:86:41:fb:4c:9d:1f:61:9f:32:09:e1:7c:
                    26:57:d0:3f:e1:98:87:32:d5:1f:ed:3c:f3:65:ab:
                    59:f7:84:58:e1:22:4e:56:b3:0c:a0:60:2e:d7:4e:
                    f3:62:81:d1:ad:4b:86:6d:51:d6:ec:46:23:ec:26:
                    ab:87:f7:3a:27:81:32:07:52:05:4c:9b:c4:98:10:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:69:95:3F:52:3D:23:4A:EC:5E:81:B7:47:8E:1C:04:9F:B5:46:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56efdaf5-5393-38a3-b2e5-e45896dfcc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:70:87:ab:97:5e:61:d0:4c:29:b1:8a:15:9c:4b:f7:ba:
         06:fc:fb:81:0b:82:42:ef:2f:e1:ae:6a:d2:38:a7:10:ae:f4:
         8d:f7:03:d6:74:59:fc:e6:85:56:e7:40:c1:14:9e:c6:00:b8:
         55:bc:f0:8a:a9:8f:f9:f6:60:18:2d:cb:53:e5:9c:c5:04:5b:
         7e:bb:91:dd:ac:ee:c2:4d:19:3a:db:76:25:0b:48:6d:d4:c0:
         06:c6:87:d8:5a:c8:df:22:70:71:70:3a:bb:9d:9a:3e:3a:2a:
         06:86:b2:27:98:d3:de:43:6a:d0:ef:ad:67:3d:b8:cb:fe:90:
         5a:d6:bf:6e:75:54:cb:95:2a:c2:f4:72:8f:19:bd:30:4f:b5:
         16:43:4f:40:16:d0:57:13:a9:4c:38:56:de:25:2f:d6:ad:3d:
         81:40:12:f5:6a:dc:77:37:9c:f5:75:ed:a9:3b:a8:6c:70:db:
         91:36:d5:e8:71:2d:e3:ce:7f:7f:d0:62:db:fe:be:13:18:e3:
         4d:12:58:f3:17:04:36:0c:50:73:61:27:09:cf:30:0c:2a:e7:
         85:ce:13:71:d3:e7:d2:4a:f6:7b:86:60:6e:2a:c4:0e:78:10:
         1d:8e:18:c1:18:21:94:b7:9b:6c:ea:b8:ef:e4:ce:97:8e:c6:
         41:e9:f8:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLMFxQfS0bB4/OcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
YWQ3NjAyNjMtNWZlYS00YTRjLWIyYWEtNDg4M2UwY2RhOGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2dP1eK6XIQU6CffuLRqvrKLCUWl1l8bqlhT
rff3/5VGnmxaPTz1Qh3ak+ZEwxoG9bQCKITQ8rrnRKS3/zeIOvWqqpma9TyfCTlg
Ni1eVz9+0wymY/0k/L54nXP8WqjPAN0W1CPjPMyJwH+VTeCIzFbIDL+W3kUoPe2r
tVMY3eQ5exWxzIkLzsQwA+5ss9ztkWnir9U8fc57z1jXBoJvsPsoDIhE77xwq5fn
6l3VCXepp7mN8SaGQftMnR9hnzIJ4XwmV9A/4ZiHMtUf7TzzZatZ94RY4SJOVrMM
oGAu107zYoHRrUuGbVHW7EYj7Carh/c6J4EyB1IFTJvEmBA/7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBplT9SPSNK7F6Bt0eOHASftUYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTZlZmRhZjUtNTM5My0z
OGEzLWIyZTUtZTQ1ODk2ZGZjYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAluC1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEv5cIerl15h0EwpsYoVnEv3ugb8+4ELgkLvL+GuatI4pxCu9I33A9Z0
WfzmhVbnQMEUnsYAuFW88Iqpj/n2YBgty1PlnMUEW367kd2s7sJNGTrbdiULSG3U
wAbGh9hayN8icHFwOrudmj46KgaGsieY095DatDvrWc9uMv+kFrWv251VMuVKsL0
co8ZvTBPtRZDT0AW0FcTqUw4Vt4lL9atPYFAEvVq3Hc3nPV17ak7qGxw25E21ehx
LePOf3/QYtv+vhMY400SWPMXBDYMUHNhJwnPMAwq54XOE3HT59JK9nuGYG4qxA54
EB2OGMEYIZS3m2zquO/kzpeOxkHp+Do=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:39 2026 by rpki-client