Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/1f5d381b-3297-3625-9090-3ffaaaff089b.roa
File:                     1f5d381b-3297-3625-9090-3ffaaaff089b.roa (raw, json)
Hash identifier:          fMJaD0NtpiXM0QaN326ptuQDvP8G1eKh2yAlKefjH/k=
Subject key identifier:   D7:D2:72:93:9E:76:54:ED:28:5B:01:57:6D:5B:70:C5:20:0E:A3:09
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584CD40767A7C5CEAB4A281CD580
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/1f5d381b-3297-3625-9090-3ffaaaff089b.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     2153
IP address blocks:        137.164.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:67:a7:c5:ce:ab:4a:28:1c:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=a9e9def4-6338-43b2-b2bc-f98315aa673c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:31:74:1f:cb:1b:a2:6c:72:c2:7b:2a:b8:
                    44:59:20:9e:ac:e2:23:1e:b4:60:a0:36:12:c3:69:
                    43:80:06:3c:58:5e:3f:9c:aa:86:9e:c6:ae:f4:80:
                    c2:0e:54:40:d4:25:0a:68:c4:dc:af:9a:e4:2b:fd:
                    2e:6b:14:f1:cf:dc:11:d4:a3:24:ae:3b:4c:1a:a2:
                    6e:d8:c1:b5:1a:4e:41:1e:fa:ff:38:29:a6:9d:dd:
                    27:4a:e4:66:a2:d9:be:1a:5c:6c:3b:aa:6e:05:22:
                    8a:da:ca:8b:9c:49:86:21:8b:d1:21:5f:1d:51:da:
                    d8:b2:81:49:a8:11:bf:af:1e:e5:64:ee:c4:5e:38:
                    eb:74:7e:8b:ee:ed:7d:af:7e:3b:73:35:58:23:3b:
                    6a:43:0f:a4:b5:64:bd:f6:9c:dd:20:f7:dc:e5:48:
                    80:ab:3b:70:65:38:82:a0:84:5e:15:1b:52:8c:a7:
                    9c:30:b1:f6:9a:5b:83:fa:40:d2:c2:4d:c3:31:c0:
                    ad:6a:9c:b9:16:3b:96:a2:1a:e8:79:78:af:69:65:
                    10:ff:9c:be:86:c6:35:b9:03:c4:1c:04:91:97:04:
                    dd:39:2d:e5:25:3e:a0:9f:a9:f0:13:d9:5a:ba:3f:
                    ae:46:5f:d6:72:b7:c9:77:95:c6:2e:8f:67:cf:c5:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D2:72:93:9E:76:54:ED:28:5B:01:57:6D:5B:70:C5:20:0E:A3:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/1f5d381b-3297-3625-9090-3ffaaaff089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ea:c4:49:b8:51:c5:65:5a:9d:5c:dc:0d:82:a5:8e:37:6a:
         24:f3:e8:cd:52:b1:45:0e:f9:40:df:f0:c8:93:a9:eb:4f:b9:
         fc:63:a5:58:1c:49:0b:d6:e2:18:7a:f0:70:24:2b:28:78:e6:
         00:76:99:08:82:b6:78:62:2b:ab:3c:f9:42:87:6d:57:51:bd:
         29:49:42:61:46:cd:12:2a:ae:12:31:52:80:5d:bc:7a:cb:fc:
         1f:24:47:59:44:53:cc:f3:07:1b:ef:22:f9:d5:e4:e5:0a:3c:
         91:29:a2:6d:35:3e:b2:df:0d:7f:b6:9b:c9:5d:33:25:cc:ad:
         a2:89:35:b6:fe:2a:60:1e:6f:76:10:6d:06:2c:e8:26:87:21:
         b4:56:32:6d:a3:97:43:d2:46:91:0e:d5:f4:69:d5:7f:41:d9:
         94:1e:64:31:51:1b:bf:38:34:16:71:74:6c:5d:b4:c5:c8:33:
         a9:69:ee:6c:03:af:23:e7:84:8b:68:80:58:be:29:fb:eb:81:
         23:10:2e:8e:26:b0:e2:ae:ef:04:61:f7:3e:1e:de:a2:6d:d3:
         d5:ba:06:aa:ee:27:cb:bf:17:b1:13:f3:72:bd:66:25:83:9e:
         45:16:42:65:4f:9e:b4:2b:7d:73:14:8f:70:1f:47:5d:b3:f9:
         d3:8b:b4:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2enxc6rSigc1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
YTllOWRlZjQtNjMzOC00M2IyLWIyYmMtZjk4MzE1YWE2NzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcxdB/LG6JscsJ7KrhEWSCerOIjHrRgoDYS
w2lDgAY8WF4/nKqGnsau9IDCDlRA1CUKaMTcr5rkK/0uaxTxz9wR1KMkrjtMGqJu
2MG1Gk5BHvr/OCmmnd0nSuRmotm+GlxsO6puBSKK2sqLnEmGIYvRIV8dUdrYsoFJ
qBG/rx7lZO7EXjjrdH6L7u19r347czVYIztqQw+ktWS99pzdIPfc5UiAqztwZTiC
oIReFRtSjKecMLH2mluD+kDSwk3DMcCtapy5FjuWohroeXivaWUQ/5y+hsY1uQPE
HASRlwTdOS3lJT6gn6nwE9lauj+uRl/WcrfJd5XGLo9nz8Xx3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfScpOedlTtKFsBV21bcMUgDqMJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMWY1ZDM4MWItMzI5Ny0z
NjI1LTkwOTAtM2ZmYWFhZmYwODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiaQaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvqxEm4UcVlWp1c3A2CpY43aiTz6M1SsUUO+UDf8MiTqetPufxjpVgc
SQvW4hh68HAkKyh45gB2mQiCtnhiK6s8+UKHbVdRvSlJQmFGzRIqrhIxUoBdvHrL
/B8kR1lEU8zzBxvvIvnV5OUKPJEpom01PrLfDX+2m8ldMyXMraKJNbb+KmAeb3YQ
bQYs6CaHIbRWMm2jl0PSRpEO1fRp1X9B2ZQeZDFRG784NBZxdGxdtMXIM6lp7mwD
ryPnhItogFi+KfvrgSMQLo4msOKu7wRh9z4e3qJt09W6BqruJ8u/F7ET83K9ZiWD
nkUWQmVPnrQrfXMUj3AfR12z+dOLtHs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:19 2026 by rpki-client