Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa
File:                     ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa (raw, json)
Hash identifier:          fxSmtom99FhKqUpEhiI0xD+v6ZpvnLpCUrnT0C2WHQ8=
Subject key identifier:   79:96:43:CC:C6:A9:4A:EF:57:23:F1:75:AA:6D:51:20:0C:B9:B3:F0
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CF6ECCC77318B176457185500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        149.118.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:cc:77:31:8b:17:64:57:18:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=c3872914-b3a7-4e70-948b-82941ef7db67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:a9:c4:43:4d:dc:87:d3:2b:22:0c:59:23:
                    b8:1a:dd:a4:8f:ea:9e:44:79:21:a3:9f:55:8a:ed:
                    3a:9a:2e:f3:f2:2b:14:aa:18:7d:0b:be:50:d7:fd:
                    f1:aa:42:e2:c8:75:33:4f:bf:92:d7:62:3e:51:e4:
                    4c:d5:11:26:06:88:60:bf:8c:62:75:54:91:4b:8f:
                    60:1d:6f:2a:6b:69:1a:5d:d7:33:36:b8:c9:23:ea:
                    f4:e7:d4:f5:5b:3b:2c:0f:89:1c:01:a8:c8:19:48:
                    4a:da:ac:69:4b:58:93:09:ae:18:2a:97:51:09:03:
                    43:8f:c5:ba:bb:b5:d5:9c:b4:cb:3f:b7:8a:36:48:
                    a2:98:81:c1:c3:9f:a0:5a:f4:23:5a:5e:ad:9a:16:
                    e2:c3:ee:06:c2:07:de:8b:de:70:b2:d9:64:c1:e9:
                    f8:ee:20:c8:4a:5a:14:8c:e2:fc:ce:cc:0e:ff:56:
                    7b:4f:ed:0a:0b:c9:9a:3c:34:53:83:20:3c:6d:3b:
                    02:85:43:10:36:74:f7:aa:b8:52:a9:e3:68:8e:83:
                    a3:f6:d3:fd:fd:a6:40:a4:0c:d9:47:24:90:9a:bf:
                    cf:e4:fd:58:e6:76:c8:af:d2:e9:d3:9e:4d:57:2c:
                    76:58:48:f0:00:4a:0c:8c:6b:eb:5e:e5:de:a8:af:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:96:43:CC:C6:A9:4A:EF:57:23:F1:75:AA:6D:51:20:0C:B9:B3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.118.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:25:8b:a4:c6:d6:ed:ec:b4:dd:82:b9:a3:19:72:cc:81:
         ab:76:35:f5:25:fb:28:8a:ac:f9:d5:b1:71:80:d2:c1:35:e1:
         84:66:3b:84:cf:0b:c0:ee:1e:bf:37:9d:c7:48:fb:dc:fe:7e:
         d8:a1:2c:b2:5b:d8:7d:05:ad:e8:2e:a2:7f:70:bc:a7:04:57:
         99:13:d9:1e:8a:91:c5:5a:07:63:9f:fe:e6:cf:66:34:06:10:
         48:e8:9e:92:7e:b1:4e:6d:45:01:2e:22:f0:79:b5:de:d8:9c:
         87:e8:c7:cf:4c:9f:56:5a:5c:2f:cd:b7:e1:01:4e:a2:1b:e0:
         6b:9a:b7:2e:f6:65:c5:c1:df:ca:04:3b:b6:f7:4a:18:c4:10:
         1c:06:7d:24:00:01:71:33:33:bd:0e:c3:4d:e6:55:4c:41:65:
         89:a0:5c:6d:ce:f9:0b:40:f0:71:aa:6c:7e:0d:13:4b:a3:84:
         c1:0d:2f:5c:c1:a5:93:82:b4:78:97:8c:5d:cf:20:96:9d:57:
         44:0f:e5:78:1a:76:17:18:cb:68:a6:09:3b:59:a7:80:c9:a9:
         90:d6:aa:30:17:ec:e1:c9:0a:67:9b:13:ed:b3:3a:97:68:24:
         52:f9:fa:20:a8:7e:b9:11:f9:f8:22:92:d4:78:b8:17:58:bd:
         f6:40:b1:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27Mx3MYsXZFcYVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YzM4NzI5MTQtYjNhNy00ZTcwLTk0OGItODI5NDFlZjdkYjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ6pxENN3IfTKyIMWSO4Gt2kj+qeRHkho59V
iu06mi7z8isUqhh9C75Q1/3xqkLiyHUzT7+S12I+UeRM1REmBohgv4xidVSRS49g
HW8qa2kaXdczNrjJI+r059T1WzssD4kcAajIGUhK2qxpS1iTCa4YKpdRCQNDj8W6
u7XVnLTLP7eKNkiimIHBw5+gWvQjWl6tmhbiw+4Gwgfei95wstlkwen47iDISloU
jOL8zswO/1Z7T+0KC8maPDRTgyA8bTsChUMQNnT3qrhSqeNojoOj9tP9/aZApAzZ
RySQmr/P5P1Y5nbIr9Lp055NVyx2WEjwAEoMjGvrXuXeqK+8jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmWQ8zGqUrvVyPxdaptUSAMubPwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWJmOWQyN2UtM2U4OC0z
ZGNlLTg0MmYtNGE1NzAyYzAyYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXbzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABt3JYukxtbt7LTdgrmjGXLMgat2NfUl+yiKrPnVsXGA0sE14YRmO4TP
C8DuHr83ncdI+9z+ftihLLJb2H0Freguon9wvKcEV5kT2R6KkcVaB2Of/ubPZjQG
EEjonpJ+sU5tRQEuIvB5td7YnIfox89Mn1ZaXC/Nt+EBTqIb4Guaty72ZcXB38oE
O7b3ShjEEBwGfSQAAXEzM70Ow03mVUxBZYmgXG3O+QtA8HGqbH4NE0ujhMENL1zB
pZOCtHiXjF3PIJadV0QP5XgadhcYy2imCTtZp4DJqZDWqjAX7OHJCmebE+2zOpdo
JFL5+iCofrkR+fgiktR4uBdYvfZAsWM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:04 2026 by rpki-client