Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a2142fd7-6150-3f9d-867b-bc7b9200dd85.roa
File:                     a2142fd7-6150-3f9d-867b-bc7b9200dd85.roa (raw, json)
Hash identifier:          LlkUzw9C5pYfwC0nG4KyXPbOhQYt8kFIGwA7sWTBZ3o=
Subject key identifier:   32:94:65:67:08:9F:34:1D:6A:F5:4E:95:66:B7:EF:F1:89:FD:64:BC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE62CB0B3F272B17EA5E82B40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a2142fd7-6150-3f9d-867b-bc7b9200dd85.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        167.234.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b0:b3:f2:72:b1:7e:a5:e8:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=cfd0d1e5-11d2-40c9-a7cf-66ace2798a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:bf:0a:25:9d:96:3a:76:0b:2c:f1:f6:fb:
                    d4:fa:30:cf:c5:c9:80:37:da:56:c2:c6:9e:06:ad:
                    df:72:02:5d:87:4e:76:78:e5:46:40:4e:24:06:7c:
                    8c:c2:17:cb:c0:79:34:09:ed:08:3a:e0:3d:2b:01:
                    03:ba:27:25:f0:86:2b:a2:2d:55:84:06:43:5f:f2:
                    89:f3:11:7b:e8:d9:9c:b7:36:b8:04:6a:61:d3:83:
                    52:cc:3d:80:56:f1:75:db:31:53:51:c5:9e:c8:ca:
                    83:7b:da:83:26:7e:cb:05:8f:51:47:99:f6:53:2b:
                    d1:ae:61:7f:26:40:fb:8f:33:d8:c9:45:15:03:00:
                    eb:fc:4d:a2:41:84:ae:3b:84:52:8f:5d:d0:f8:c2:
                    bf:43:70:11:ea:e8:42:bb:74:6e:17:3b:c5:e1:9e:
                    05:15:2a:3d:27:d6:79:6f:af:76:42:16:c3:68:33:
                    d1:a2:24:67:09:92:33:51:92:05:98:b0:9e:db:ad:
                    0f:35:c5:5e:f2:2e:2a:03:e1:2b:f2:09:87:40:56:
                    6f:a7:32:4c:69:2c:79:08:32:b8:29:4e:a9:cf:b5:
                    2f:59:d6:ec:f1:dc:66:f9:a0:26:07:ce:b5:d1:43:
                    0e:74:e9:84:58:97:02:b1:6c:1c:b5:5f:8a:25:27:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:94:65:67:08:9F:34:1D:6A:F5:4E:95:66:B7:EF:F1:89:FD:64:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a2142fd7-6150-3f9d-867b-bc7b9200dd85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:85:06:3a:7a:ce:93:07:78:d2:91:3c:d8:3d:91:3f:40:28:
         49:66:39:f4:ac:aa:b3:dc:6f:ce:96:92:b8:8f:26:e3:fe:e9:
         a3:e8:c0:4e:15:51:81:5f:ea:62:2b:76:f4:ad:12:5f:a3:79:
         d3:c2:d1:ff:4d:7e:6f:c4:12:fc:ba:0a:18:32:44:9d:ca:a2:
         e6:bd:e7:b6:97:de:db:0b:ed:22:70:70:2e:0e:a5:45:ad:28:
         3c:09:bf:53:44:1f:ff:32:80:14:6e:c9:c3:b4:68:27:7a:51:
         2f:e4:47:53:2e:5c:43:16:31:0a:45:7d:b4:54:8c:21:d4:31:
         bf:3d:d7:1c:29:0a:e1:96:3e:2c:0e:ff:6b:93:5f:61:42:ff:
         ee:4c:96:63:c4:3c:07:29:83:4d:be:27:eb:a7:a9:84:ff:06:
         e4:ce:7d:b3:bd:51:d9:8e:df:76:60:41:6e:b8:9c:9b:09:8e:
         8f:fc:68:87:ff:00:e5:2e:4c:aa:7a:32:4b:f8:3c:c4:14:88:
         35:ac:d3:a5:7d:31:fc:eb:81:66:ba:71:35:46:76:52:35:c8:
         27:65:28:d4:04:04:39:37:2d:1c:8a:23:3b:18:6f:8e:f8:c0:
         fd:7f:41:e2:cb:40:14:78:74:7d:30:dc:67:e9:96:b8:87:0e:
         a7:f2:63:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLLCz8nKxfqXoK0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
Y2ZkMGQxZTUtMTFkMi00MGM5LWE3Y2YtNjZhY2UyNzk4YTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+G/CiWdljp2Cyzx9vvU+jDPxcmAN9pWwsae
Bq3fcgJdh052eOVGQE4kBnyMwhfLwHk0Ce0IOuA9KwEDuicl8IYroi1VhAZDX/KJ
8xF76Nmctza4BGph04NSzD2AVvF12zFTUcWeyMqDe9qDJn7LBY9RR5n2UyvRrmF/
JkD7jzPYyUUVAwDr/E2iQYSuO4RSj13Q+MK/Q3AR6uhCu3RuFzvF4Z4FFSo9J9Z5
b692QhbDaDPRoiRnCZIzUZIFmLCe260PNcVe8i4qA+Er8gmHQFZvpzJMaSx5CDK4
KU6pz7UvWdbs8dxm+aAmB8610UMOdOmEWJcCsWwctV+KJSc6qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKUZWcInzQdavVOlWa37/GJ/WS8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTIxNDJmZDctNjE1MC0z
ZjlkLTg2N2ItYmM3YjkyMDBkZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp+qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiFBjp6zpMHeNKRPNg9kT9AKElmOfSsqrPcb86WkriPJuP+6aPowE4V
UYFf6mIrdvStEl+jedPC0f9Nfm/EEvy6ChgyRJ3Koua957aX3tsL7SJwcC4OpUWt
KDwJv1NEH/8ygBRuycO0aCd6US/kR1MuXEMWMQpFfbRUjCHUMb891xwpCuGWPiwO
/2uTX2FC/+5MlmPEPAcpg02+J+unqYT/BuTOfbO9UdmO33ZgQW64nJsJjo/8aIf/
AOUuTKp6Mkv4PMQUiDWs06V9MfzrgWa6cTVGdlI1yCdlKNQEBDk3LRyKIzsYb474
wP1/QeLLQBR4dH0w3GfplriHDqfyY5Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:50 2026 by rpki-client