Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
File:                     1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa (raw, json)
Hash identifier:          MLmW3AmbcfO6zLLxMoYzskqlVmtN4lfJVCdTC2pSTnY=
Subject key identifier:   8D:71:2C:3E:F5:BE:E0:0C:CB:B9:C9:36:92:37:19:F4:6B:86:11:10
Certificate issuer:       /CN=024863fe-f941-4bf2-81d9-ad03d50aa194
Certificate serial:       010D0C9F4328584D100CFDD2F27F549D93422280
Authority key identifier: 26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     13576
IP address blocks:        204.147.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fd:d2:f2:7f:54:9d:93:42:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024863fe-f941-4bf2-81d9-ad03d50aa194
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=867cda66-5415-4903-bfe8-6dbe80bf7d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:f6:91:78:96:01:00:58:5b:41:59:6f:27:
                    6e:58:b4:33:5b:87:fc:94:46:e3:73:30:40:7f:cb:
                    06:45:22:7c:d8:2c:cb:49:d2:39:84:e2:e1:04:6c:
                    89:c6:5a:cc:8a:11:69:e5:f6:57:52:a4:2f:55:63:
                    3d:7d:34:7f:e2:21:89:ac:88:f6:7e:55:61:38:eb:
                    e3:20:fd:1a:af:ce:18:13:21:96:d9:1d:46:05:e3:
                    44:17:33:92:80:4b:92:0d:0a:a7:00:ed:94:74:74:
                    e2:98:fe:61:7e:c3:70:6b:16:21:64:c7:ab:de:31:
                    0c:a1:dc:1a:e4:ca:53:b8:05:8d:e8:29:70:97:47:
                    ae:e6:c6:a4:be:2f:c6:36:f8:a4:cd:81:4a:0c:1e:
                    b0:be:57:65:04:39:00:1e:d5:a1:40:78:ac:7c:9a:
                    f8:b3:3c:f6:5d:68:74:a5:cf:29:56:54:35:a6:84:
                    ab:da:7f:17:da:b2:f7:6b:ed:94:78:43:3e:2e:99:
                    81:61:20:a5:0a:74:3a:a0:50:11:c0:1a:39:c3:46:
                    d9:3c:94:7d:b8:56:b6:8a:c2:a1:ca:66:65:25:ce:
                    99:6a:2b:aa:9c:23:20:b1:92:12:2d:2b:0a:75:df:
                    9b:fa:3c:54:f3:b7:73:d3:a5:31:a9:41:92:9d:95:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:2C:3E:F5:BE:E0:0C:CB:B9:C9:36:92:37:19:F4:6B:86:11:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl

            X509v3 Authority Key Identifier:
                keyid:26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:45:d6:99:50:92:80:bb:cf:a4:72:9f:b6:e3:e8:06:07:81:
         07:ba:16:89:bf:57:59:98:e9:6a:5f:92:50:e5:e1:43:2d:de:
         d3:30:de:bf:dd:79:0f:13:25:02:ef:4f:9c:a5:c6:cb:ce:51:
         42:91:5c:d2:10:b6:87:f2:64:9e:9e:d7:d5:06:8f:72:44:19:
         ee:ca:a1:1c:3d:d0:55:30:63:07:fa:a0:1e:ad:14:11:ce:1e:
         7c:d6:e3:c8:b4:cd:c1:1d:d3:85:18:e8:76:23:15:39:47:c2:
         4f:69:a3:bd:d9:42:36:65:8d:25:7c:be:5b:f6:5d:36:f3:13:
         ae:ea:ad:bb:49:e2:40:60:4d:38:47:67:f2:62:6b:b6:24:77:
         a2:fa:2c:bd:fe:a5:19:f2:75:67:d9:51:9d:39:17:8b:f7:6a:
         29:69:6e:46:c5:71:58:b6:bc:4f:75:78:dd:2f:6f:d3:ef:90:
         45:4c:fe:d3:96:e3:0c:f2:48:e4:0b:e3:33:4d:29:db:5b:50:
         52:95:b8:af:b0:ba:b7:f2:15:14:09:73:f4:c6:97:8b:5b:61:
         32:72:71:22:30:2d:8f:fd:85:0f:c3:cb:1c:0e:ca:aa:1d:b1:
         d3:79:31:86:3a:f3:10:81:87:f6:d5:57:fe:95:24:a3:35:bd:
         4c:1f:12:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDP3S8n9UnZNCIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI0ODYzZmUtZjk0MS00YmYyLTgxZDktYWQwM2Q1MGFh
MTk0MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk
ODY3Y2RhNjYtNTQxNS00OTAzLWJmZTgtNmRiZTgwYmY3ZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV32kXiWAQBYW0FZbyduWLQzW4f8lEbjczBA
f8sGRSJ82CzLSdI5hOLhBGyJxlrMihFp5fZXUqQvVWM9fTR/4iGJrIj2flVhOOvj
IP0ar84YEyGW2R1GBeNEFzOSgEuSDQqnAO2UdHTimP5hfsNwaxYhZMer3jEModwa
5MpTuAWN6Clwl0eu5sakvi/GNvikzYFKDB6wvldlBDkAHtWhQHisfJr4szz2XWh0
pc8pVlQ1poSr2n8X2rL3a+2UeEM+LpmBYSClCnQ6oFARwBo5w0bZPJR9uFa2isKh
ymZlJc6ZaiuqnCMgsZISLSsKdd+b+jxU87dz06UxqUGSnZUMrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1xLD71vuAMy7nJNpI3GfRrhhEQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4
NjNmZS1mOTQxLTRiZjItODFkOS1hZDAzZDUwYWExOTQvMWFiMGRjNzUtZDc3Ny0z
ZjU2LWE4YzQtYjg4NDAxZWFiZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDI0ODYzZmUtZjk0MS00YmYyLTgx
ZDktYWQwM2Q1MGFhMTk0LzAyNDg2M2ZlLWY5NDEtNGJmMi04MWQ5LWFkMDNkNTBh
YTE5NC5jcmwwHwYDVR0jBBgwFoAUJs+3LPEpJRh0cw8fUN61/VSjIN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4NjNmZS1mOTQxLTRiZjItODFkOS1hZDAz
ZDUwYWExOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVF1plQkoC7z6Ryn7bj6AYHgQe6Fom/V1mY6WpfklDl4UMt3tMw3r/d
eQ8TJQLvT5ylxsvOUUKRXNIQtofyZJ6e19UGj3JEGe7KoRw90FUwYwf6oB6tFBHO
HnzW48i0zcEd04UY6HYjFTlHwk9po73ZQjZljSV8vlv2XTbzE67qrbtJ4kBgTThH
Z/Jia7Ykd6L6LL3+pRnydWfZUZ05F4v3ailpbkbFcVi2vE91eN0vb9PvkEVM/tOW
4wzySOQL4zNNKdtbUFKVuK+wurfyFRQJc/TGl4tbYTJycSIwLY/9hQ/DyxwOyqod
sdN5MYY68xCBh/bVV/6VJKM1vUwfEt4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:02 2026 by rpki-client