Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa
File:                     ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa (raw, json)
Hash identifier:          c8J5FNn9WrELN9/jEsEQYtyG30454mzT0LvyYRQlsvc=
Subject key identifier:   08:35:D8:64:E3:DD:F3:13:03:8B:94:8A:F1:A8:C3:B2:57:C6:F5:7F
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584CED277A3DB29365F1B7EC2680
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     6507
IP address blocks:        151.106.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:7a:3d:b2:93:65:f1:b7:ec:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=8ae739f8-9a22-4153-a3b0-4b0b2eb8071c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:3f:a0:5f:08:91:f0:a7:e0:d9:d7:2e:b0:
                    29:1c:de:1d:69:25:d2:1b:5a:97:eb:e6:91:86:35:
                    24:eb:51:78:77:81:72:ba:52:b4:a5:dd:0f:83:99:
                    21:68:85:e6:c1:9a:9d:41:d2:7f:f5:14:e8:ad:aa:
                    5d:4d:73:4d:f8:c1:69:78:46:3c:b6:6b:08:e0:77:
                    f7:cc:21:44:92:cf:a5:1c:07:39:7c:c0:3e:41:35:
                    1a:87:a1:ee:4a:dc:e7:d0:8e:d0:8b:a4:6c:3b:5f:
                    c2:0b:cf:f5:cc:7a:e6:44:c5:a9:2d:50:5b:48:3a:
                    c6:8f:3a:4e:d1:55:13:10:04:c9:e3:45:ee:0f:7a:
                    a7:58:d9:8a:5f:57:72:02:b6:60:71:1e:a8:41:7b:
                    c2:6a:e7:a0:a2:d1:b0:05:3c:5e:d6:bc:86:4c:6f:
                    aa:2f:e0:68:6a:50:65:26:24:35:a0:2d:bd:d8:d0:
                    46:c4:41:fe:89:e8:47:46:e1:b7:eb:0c:42:e2:29:
                    b8:53:b2:e5:5d:bb:02:90:2c:51:c6:a2:4a:47:90:
                    b1:15:ef:49:92:46:6a:05:5a:73:52:cc:80:ba:70:
                    5b:37:11:81:02:4a:a5:0a:99:fc:f1:51:5c:08:5d:
                    b2:b0:c6:1e:18:0b:d7:58:af:1b:d8:f0:9d:17:a6:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:D8:64:E3:DD:F3:13:03:8B:94:8A:F1:A8:C3:B2:57:C6:F5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:64:bc:2e:76:b3:62:c7:07:55:a8:6a:b3:e4:2a:99:42:e8:
         3b:e4:d2:52:08:99:dc:45:cb:b8:dd:d9:8c:e4:bd:1c:5e:61:
         57:67:40:19:1d:50:11:f7:19:77:23:00:13:06:7d:8d:94:60:
         49:5d:bb:49:cf:b5:08:81:b7:64:de:71:60:f6:4f:47:26:7a:
         fa:19:7b:e1:ed:a2:f0:4e:7d:fc:9f:6f:e9:d8:18:66:19:75:
         c1:df:30:e3:30:d6:3f:9c:ad:b8:4b:a1:25:01:7b:ec:95:8d:
         0d:28:1a:1a:4a:6f:6d:04:e0:1d:db:c4:f5:e5:12:c7:93:ef:
         f0:da:b7:64:30:99:50:aa:94:12:5f:7e:0d:b8:00:77:87:af:
         78:6f:d3:64:12:d6:a1:df:38:a9:91:18:26:0b:d9:80:99:1c:
         78:7c:56:7a:2f:7d:3c:67:dc:f6:3e:61:b9:0a:b0:c3:bd:c1:
         e4:1b:ec:52:23:9e:2b:a7:9b:a6:22:61:3f:fc:a3:7a:46:ab:
         37:50:b5:07:91:fb:a8:f6:45:88:0b:69:a7:0d:c7:72:10:77:
         88:5b:18:13:60:ad:5a:5a:84:74:44:7d:77:0b:55:69:ff:9f:
         79:38:9a:50:55:1b:72:3c:f6:d9:25:06:02:20:1a:a2:4a:ff:
         25:ad:3c:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ3o9spNl8bfsJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy
NjkyMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
OGFlNzM5ZjgtOWEyMi00MTUzLWEzYjAtNGIwYjJlYjgwNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK4/oF8IkfCn4NnXLrApHN4daSXSG1qX6+aR
hjUk61F4d4FyulK0pd0Pg5khaIXmwZqdQdJ/9RTorapdTXNN+MFpeEY8tmsI4Hf3
zCFEks+lHAc5fMA+QTUah6HuStzn0I7Qi6RsO1/CC8/1zHrmRMWpLVBbSDrGjzpO
0VUTEATJ40XuD3qnWNmKX1dyArZgcR6oQXvCauegotGwBTxe1ryGTG+qL+BoalBl
JiQ1oC292NBGxEH+iehHRuG36wxC4im4U7LlXbsCkCxRxqJKR5CxFe9JkkZqBVpz
UsyAunBbNxGBAkqlCpn88VFcCF2ysMYeGAvXWK8b2PCdF6b+6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAg12GTj3fMTA4uUivGow7JXxvV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2
YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvZWE4ZjNhNmMtODI0Ni0z
YTNhLWEyZGItNDkxOTFkYjg4YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx
ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl
MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4
MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl2r/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRkvC52s2LHB1WoarPkKplC6Dvk0lIImdxFy7jd2YzkvRxeYVdnQBkd
UBH3GXcjABMGfY2UYEldu0nPtQiBt2TecWD2T0cmevoZe+HtovBOffyfb+nYGGYZ
dcHfMOMw1j+crbhLoSUBe+yVjQ0oGhpKb20E4B3bxPXlEseT7/Dat2QwmVCqlBJf
fg24AHeHr3hv02QS1qHfOKmRGCYL2YCZHHh8VnovfTxn3PY+YbkKsMO9weQb7FIj
niunm6YiYT/8o3pGqzdQtQeR+6j2RYgLaacNx3IQd4hbGBNgrVpahHREfXcLVWn/
n3k4mlBVG3I89tklBgIgGqJK/yWtPIk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:57 2026 by rpki-client