Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa
File:                     ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa (raw, json)
Hash identifier:          jf5un8a63W3LwXXr5rZndv3ZgVUB9f1iDMhr1pYDdbg=
Subject key identifier:   45:AF:54:5F:BF:29:5A:66:B8:FD:9F:8E:6A:DE:1A:59:5A:64:EC:2A
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584D492A5651FBD8BDE60C7B4F00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14555
IP address blocks:        170.10.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:56:51:fb:d8:bd:e6:0c:7b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=a1412869-2fb2-4616-80d2-ec3c7d498ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:e2:3a:73:0c:08:6a:21:27:82:fb:37:2f:
                    8d:2d:f8:af:bb:b9:cf:56:c5:da:90:ed:9d:e0:16:
                    08:5d:ea:65:26:cf:01:88:f1:29:9d:47:42:0d:70:
                    c0:56:b8:4f:82:26:1e:90:df:b4:68:00:84:44:0a:
                    66:67:30:b9:85:4a:2d:ce:97:fc:12:cd:07:d6:14:
                    76:dd:4c:17:28:33:a7:cd:e2:10:c3:25:4b:a9:cb:
                    a4:83:e8:ec:2c:b7:57:1f:d6:4c:ac:56:86:f5:a0:
                    14:b2:50:ce:a7:bf:25:d0:39:33:82:03:7e:96:99:
                    4e:20:7e:3f:73:2a:1a:6b:9f:da:2c:0f:a4:07:8d:
                    1d:3c:38:fa:a6:11:a7:ba:68:2c:2b:d0:2c:c0:62:
                    c1:c5:36:5c:58:3d:a2:2a:09:2e:63:76:6e:5a:01:
                    e6:83:7c:d5:6b:57:7c:b3:a4:d4:97:9f:aa:15:be:
                    a3:72:89:1a:f5:cf:d6:14:e3:8d:1b:89:3a:13:5d:
                    57:94:6e:4a:60:f6:fd:79:92:97:e5:e2:a9:68:09:
                    45:e8:31:48:52:f7:5c:f6:32:f9:2c:7f:15:b5:96:
                    6e:a1:3e:78:ab:5a:aa:dc:cf:15:a1:c0:36:b3:56:
                    8d:00:23:1a:a6:1b:ac:ed:00:3b:8e:7f:39:cc:42:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AF:54:5F:BF:29:5A:66:B8:FD:9F:8E:6A:DE:1A:59:5A:64:EC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:ce:1d:47:00:62:5d:7d:4c:81:ba:19:62:45:06:91:6e:
         5c:05:e6:e7:7f:23:e8:e1:8c:0d:bf:f7:66:d7:0b:7b:36:e6:
         c5:3f:38:e9:f0:6d:44:d2:28:42:44:8f:27:24:52:42:e3:15:
         b5:04:a9:8b:3a:02:b8:d7:6d:bf:ae:b3:8b:1c:10:20:9a:f7:
         dc:b0:34:19:1a:16:20:33:00:5c:d1:3a:1b:45:51:88:2c:88:
         09:3d:4c:c8:9f:7f:4e:71:17:ce:ed:59:35:eb:59:6d:84:66:
         e9:4b:ad:76:fb:5d:e7:34:08:7c:fc:24:aa:36:0d:38:22:6b:
         0e:b4:b3:eb:f5:a2:d3:bc:f7:b3:72:90:aa:a0:3c:e4:ec:ab:
         af:21:95:3a:47:02:fe:29:b7:96:74:4c:1e:1e:7b:6e:19:5a:
         cc:06:ec:7e:3b:06:ba:c0:96:cc:aa:08:2f:9a:41:08:1b:e0:
         af:ac:1b:91:31:29:90:a6:89:17:44:7c:d6:3b:f1:3e:7f:5b:
         dd:ee:1c:db:95:d6:81:0c:26:c6:ff:c9:e5:49:7d:1a:93:44:
         bf:bc:ec:d2:33:48:db:5d:4a:3a:6b:15:3e:12:18:33:ae:46:
         e1:a4:54:a1:a1:a8:1c:46:83:e9:f7:e5:79:30:55:76:ad:44:
         83:4e:ea:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlZR+9i95gx7TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
YTE0MTI4NjktMmZiMi00NjE2LTgwZDItZWMzYzdkNDk4YWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAriOnMMCGohJ4L7Ny+NLfivu7nPVsXakO2d
4BYIXeplJs8BiPEpnUdCDXDAVrhPgiYekN+0aACERApmZzC5hUotzpf8Es0H1hR2
3UwXKDOnzeIQwyVLqcukg+jsLLdXH9ZMrFaG9aAUslDOp78l0DkzggN+lplOIH4/
cyoaa5/aLA+kB40dPDj6phGnumgsK9AswGLBxTZcWD2iKgkuY3ZuWgHmg3zVa1d8
s6TUl5+qFb6jcoka9c/WFOONG4k6E11XlG5KYPb9eZKX5eKpaAlF6DFIUvdc9jL5
LH8VtZZuoT54q1qq3M8VocA2s1aNACMaphus7QA7jn85zEKeUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWvVF+/KVpmuP2fjmreGllaZOwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvZWMwNGYwZWMtNzc3NC0z
OTU1LTgwMDctMGExNTUyYTllYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmizh1HAGJdfUyBuhliRQaRblwF5ud/I+jhjA2/92bXC3s25sU/OOnw
bUTSKEJEjyckUkLjFbUEqYs6ArjXbb+us4scECCa99ywNBkaFiAzAFzROhtFUYgs
iAk9TMiff05xF87tWTXrWW2EZulLrXb7Xec0CHz8JKo2DTgiaw60s+v1otO897Ny
kKqgPOTsq68hlTpHAv4pt5Z0TB4ee24ZWswG7H47BrrAlsyqCC+aQQgb4K+sG5Ex
KZCmiRdEfNY78T5/W93uHNuV1oEMJsb/yeVJfRqTRL+87NIzSNtdSjprFT4SGDOu
RuGkVKGhqBxGg+n35XkwVXatRINO6iE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:42 2026 by rpki-client