Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02376c28-113b-3696-ab07-ad8773dc30fb.roa
File:                     02376c28-113b-3696-ab07-ad8773dc30fb.roa (raw, json)
Hash identifier:          Zj0aMgBJdohBoKJWovStVxutUpNH/bvBkGUjPfb246I=
Subject key identifier:   5C:19:51:98:4A:75:A9:F6:BB:AD:70:CA:53:BD:E7:B1:5C:B6:72:92
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D340799CD9B82B4C8B8D7A1B0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02376c28-113b-3696-ab07-ad8773dc30fb.roa
Signing time:             Tue 17 Mar 2026 23:18:55 +0000
ROA not before:           Tue 17 Mar 2026 23:18:55 +0000
ROA not after:            Mon 15 Jun 2026 23:18:55 +0000
asID:                     31898
IP address blocks:        147.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:07:99:cd:9b:82:b4:c8:b8:d7:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Mar 17 23:18:55 2026 GMT
            Not After : Jun 15 23:18:55 2026 GMT
        Subject: CN=10237efc-8a20-4959-b62b-2f29544164eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:26:7d:6f:63:9e:a7:dd:b9:cf:5f:b5:b5:
                    f7:e9:45:6b:77:03:80:5f:e9:4e:36:6d:5d:36:eb:
                    88:5b:1d:a6:f1:20:ac:25:e7:61:91:af:b7:a2:6f:
                    7e:98:c5:4c:1c:20:1b:c9:8c:6b:1c:36:8a:fa:53:
                    bc:de:95:c7:14:81:c9:c0:31:8a:9a:8a:c1:cd:a6:
                    04:56:6e:a3:6a:a7:c1:be:84:dc:5b:02:35:10:22:
                    c7:0b:f3:ef:91:da:86:9b:ac:09:64:54:d4:34:9c:
                    a4:75:f6:49:23:07:c7:71:b4:a1:b0:28:d8:f3:12:
                    91:11:e4:7d:d8:34:19:ba:e3:7a:40:c7:60:d1:8a:
                    56:df:2b:03:f9:fa:97:80:37:58:ef:8a:0c:c2:ca:
                    30:cb:51:10:1e:b9:75:ac:c0:c5:0e:e8:87:19:fd:
                    9b:4e:2b:5e:2f:ba:6e:09:7c:e2:a4:e8:12:9c:5d:
                    8a:dc:02:ba:34:21:b8:67:88:c3:98:16:76:e5:e3:
                    82:ba:08:bd:42:92:f4:19:4e:b9:f2:04:21:c2:7a:
                    9b:1d:84:95:cb:49:29:d5:ee:a6:8a:bf:e7:a0:b1:
                    c8:9a:13:f1:14:71:18:a3:2b:86:9e:7a:49:5c:d3:
                    40:c7:12:41:52:18:f5:7b:e5:3e:48:bd:e9:c4:2e:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:19:51:98:4A:75:A9:F6:BB:AD:70:CA:53:BD:E7:B1:5C:B6:72:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02376c28-113b-3696-ab07-ad8773dc30fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:8a:61:14:a5:5d:14:36:79:33:80:df:1a:ba:31:8c:ad:
         35:d5:89:bd:29:e3:88:3f:ad:71:87:d7:92:5b:ff:13:59:54:
         d1:ed:b0:b5:7f:09:27:b1:d1:b7:ba:20:32:22:22:e3:24:d6:
         9d:a7:eb:e2:e0:33:24:9f:ec:06:c0:73:c7:1c:42:39:95:07:
         87:62:54:ff:15:27:2c:d3:01:df:33:6e:89:10:08:3b:0e:34:
         82:28:2d:8e:b3:e0:f2:63:fc:b7:be:0b:a6:09:db:78:2e:20:
         ab:d6:44:aa:a3:c1:4c:68:a8:7d:1d:bd:1d:e3:3e:90:37:f2:
         cb:0f:74:26:88:93:61:a2:9b:80:e6:99:47:ae:cf:df:29:d4:
         9e:55:63:7f:ed:f0:22:07:ad:a2:27:a3:67:29:8b:30:ba:ba:
         8c:ae:35:00:e2:f0:30:03:10:34:78:10:2e:56:21:23:49:ea:
         d9:7b:ad:11:e9:5c:f3:26:5e:24:93:ca:a2:45:a9:0e:12:e3:
         0e:b0:98:12:dd:35:5a:3c:e8:de:97:2c:22:e1:08:bd:df:3e:
         ed:c8:39:80:f5:b4:35:0e:e5:30:02:7b:fc:69:93:63:c2:d7:
         5e:af:27:88:62:89:23:20:f2:d5:ff:4c:d2:58:4b:9b:d7:45:
         4c:cf:d3:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00B5nNm4K0yLjXobAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDMxNzIzMTg1NVoXDTI2MDYxNTIzMTg1NVowLzEtMCsGA1UEAxMk
MTAyMzdlZmMtOGEyMC00OTU5LWI2MmItMmYyOTU0NDE2NGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN4mfW9jnqfduc9ftbX36UVrdwOAX+lONm1d
NuuIWx2m8SCsJedhka+3om9+mMVMHCAbyYxrHDaK+lO83pXHFIHJwDGKmorBzaYE
Vm6jaqfBvoTcWwI1ECLHC/PvkdqGm6wJZFTUNJykdfZJIwfHcbShsCjY8xKREeR9
2DQZuuN6QMdg0YpW3ysD+fqXgDdY74oMwsowy1EQHrl1rMDFDuiHGf2bTiteL7pu
CXzipOgSnF2K3AK6NCG4Z4jDmBZ25eOCugi9QpL0GU658gQhwnqbHYSVy0kp1e6m
ir/noLHImhPxFHEYoyuGnnpJXNNAxxJBUhj1e+U+SL3pxC6TtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwZUZhKdan2u61wylO957FctnKSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDIzNzZjMjgtMTEzYi0z
Njk2LWFiMDctYWQ4NzczZGMzMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcaimEUpV0UNnkzgN8aujGMrTXVib0p44g/rXGH15Jb/xNZVNHtsLV/
CSex0be6IDIiIuMk1p2n6+LgMySf7AbAc8ccQjmVB4diVP8VJyzTAd8zbokQCDsO
NIIoLY6z4PJj/Le+C6YJ23guIKvWRKqjwUxoqH0dvR3jPpA38ssPdCaIk2Gim4Dm
mUeuz98p1J5VY3/t8CIHraIno2cpizC6uoyuNQDi8DADEDR4EC5WISNJ6tl7rRHp
XPMmXiSTyqJFqQ4S4w6wmBLdNVo86N6XLCLhCL3fPu3IOYD1tDUO5TACe/xpk2PC
116vJ4hiiSMg8tX/TNJYS5vXRUzP0+o=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:06 2026 by rpki-client