Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2f68873-40b0-33d5-88be-59ba2428fb77.roa
File:                     a2f68873-40b0-33d5-88be-59ba2428fb77.roa (raw, json)
Hash identifier:          hdL8Xxs1EG9r+XuUKmV+j6QoGmg+h/1YAOcEJTWdBek=
Subject key identifier:   9C:B5:3D:8D:A1:06:32:84:0D:D2:3A:A5:AB:A7:BF:88:AC:91:65:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584CE3620A9235D2EDD995FAAE2A
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2f68873-40b0-33d5-88be-59ba2428fb77.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     577
IP address blocks:        156.34.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0a:92:35:d2:ed:d9:95:fa:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=77362435-85cd-4514-a90f-755af726ce5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:ca:8d:f6:e2:b0:63:86:d5:ea:65:8f:d3:
                    00:24:00:2b:c0:85:a8:72:86:5a:92:31:dd:71:2a:
                    c2:ef:8c:ab:21:77:6d:1f:19:2d:97:aa:55:ac:f5:
                    a9:c4:5f:34:eb:97:52:a0:fc:1a:f0:cf:47:88:00:
                    7e:b4:b5:6e:54:4f:ac:dc:97:a1:c2:08:7f:06:ce:
                    33:67:a0:fb:c1:69:f7:1c:78:8c:dc:73:a7:23:f9:
                    9a:63:18:87:c7:59:6e:ee:57:9b:4b:7d:aa:f5:03:
                    c9:e7:8a:f4:91:b4:06:05:45:fd:a3:95:16:dd:13:
                    5c:7e:14:09:ce:21:88:30:97:f8:84:78:b8:fb:05:
                    29:91:c2:60:e3:8f:46:e4:af:76:96:d3:2f:73:dd:
                    9a:cd:d4:1d:bb:04:3c:cb:fa:51:24:20:66:6a:f7:
                    3e:5a:80:a0:e7:96:4f:d2:00:fa:e4:e8:37:10:17:
                    aa:5c:eb:9c:5b:d5:04:a6:49:70:a4:ad:06:44:48:
                    bc:be:ab:0d:ce:77:87:48:13:50:d2:d4:7c:48:0d:
                    9f:e8:ba:4b:f7:e1:14:ed:c9:16:37:d0:5d:74:e4:
                    ff:4d:11:ba:1d:8b:b3:78:bc:48:ad:0e:78:65:ca:
                    73:dd:2e:2a:72:d6:20:74:07:51:b4:5b:1e:c4:ac:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B5:3D:8D:A1:06:32:84:0D:D2:3A:A5:AB:A7:BF:88:AC:91:65:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2f68873-40b0-33d5-88be-59ba2428fb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:6a:7e:78:65:35:f7:6e:f0:32:ae:63:26:82:e9:93:fa:
         43:84:cd:3e:9e:3f:7d:ea:43:59:c3:53:c7:8f:46:f4:ba:b6:
         b3:64:71:6d:f3:a3:35:f6:ae:f6:1f:de:81:5c:d0:d9:3d:55:
         be:84:60:d6:ba:e9:b1:85:28:62:e4:02:01:36:9a:71:65:1c:
         d6:17:57:27:89:e5:93:e9:94:42:eb:46:ce:d2:9d:24:a6:da:
         49:3b:6e:12:3f:a0:ce:cc:db:e9:c3:f4:7d:4b:42:fa:e3:34:
         97:0c:7d:52:cb:32:8a:04:e4:c2:75:06:cc:24:c1:9d:8d:95:
         2a:b7:8f:bb:1a:04:1c:eb:98:1c:5c:f7:05:87:02:8f:7a:2f:
         ea:45:9d:bf:b7:ec:85:91:12:51:ca:9d:58:fd:68:c1:bf:24:
         7e:db:16:bb:b9:c5:39:19:a1:2d:3b:da:b5:90:9a:b5:2f:96:
         a2:ec:3b:eb:cd:48:be:ec:64:f0:54:d9:c8:87:f8:7a:53:81:
         1b:66:a1:d7:32:60:82:16:77:0f:d0:7a:c3:36:59:27:e9:83:
         bf:f2:6b:f6:07:42:2d:1d:fe:5d:f3:8a:b6:8a:ad:85:b0:e3:
         f2:8b:17:53:32:8c:6c:ea:1e:f4:58:0d:95:63:15:dd:c9:1b:
         1e:c8:a2:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzjYgqSNdLt2ZX6riowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk
NzczNjI0MzUtODVjZC00NTE0LWE5MGYtNzU1YWY3MjZjZTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZbKjfbisGOG1eplj9MAJAArwIWocoZakjHd
cSrC74yrIXdtHxktl6pVrPWpxF8065dSoPwa8M9HiAB+tLVuVE+s3Jehwgh/Bs4z
Z6D7wWn3HHiM3HOnI/maYxiHx1lu7lebS32q9QPJ54r0kbQGBUX9o5UW3RNcfhQJ
ziGIMJf4hHi4+wUpkcJg449G5K92ltMvc92azdQduwQ8y/pRJCBmavc+WoCg55ZP
0gD65Og3EBeqXOucW9UEpklwpK0GREi8vqsNzneHSBNQ0tR8SA2f6LpL9+EU7ckW
N9BddOT/TRG6HYuzeLxIrQ54Zcpz3S4qctYgdAdRtFsexKzMQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJy1PY2hBjKEDdI6paunv4iskWV5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTJmNjg4NzMtNDBiMC0z
M2Q1LTg4YmUtNTliYTI0MjhmYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnCIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGg5qfnhlNfdu8DKuYyaC6ZP6Q4TNPp4/fepDWcNTx49G9Lq2s2RxbfOj
Nfau9h/egVzQ2T1VvoRg1rrpsYUoYuQCATaacWUc1hdXJ4nlk+mUQutGztKdJKba
STtuEj+gzszb6cP0fUtC+uM0lwx9UssyigTkwnUGzCTBnY2VKrePuxoEHOuYHFz3
BYcCj3ov6kWdv7fshZESUcqdWP1owb8kftsWu7nFORmhLTvatZCatS+Wouw7681I
vuxk8FTZyIf4elOBG2ah1zJgghZ3D9B6wzZZJ+mDv/Jr9gdCLR3+XfOKtoqthbDj
8osXUzKMbOoe9FgNlWMV3ckbHsiiaA==
-----END CERTIFICATE-----
Generated at Fri Feb 27 04:53:36 2026 by rpki-client