Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa
File:                     ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa (raw, json)
Hash identifier:          v1888L2m35vJWocPEEZAc2CU3vVUKQRGPxTAwpCWvFs=
Subject key identifier:   C5:F8:7E:45:88:B1:11:6D:A9:E1:AA:37:04:20:DB:B5:42:07:09:27
Certificate issuer:       /CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
Certificate serial:       010D0C9F4328584CEFF235503AE265CBB3CD81C0
Authority key identifier: B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     399252
IP address blocks:        140.106.80.0/20 maxlen: 24
                          207.66.80.0/20 maxlen: 24
                          2606:3240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:35:50:3a:e2:65:cb:b3:cd:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=3e262c6d-ace4-48ef-ab90-b7d0de3c1897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:55:fc:e7:5d:38:71:42:fa:2e:82:de:6d:
                    11:6a:4e:53:b6:99:f1:45:d2:4a:a1:74:a5:fc:ed:
                    32:81:78:ca:1e:a0:e7:a6:9c:d5:6d:11:45:82:a4:
                    b7:e6:6a:8a:4d:e7:91:3d:be:af:81:a9:c6:68:5f:
                    85:b3:a2:6e:9d:43:7b:f8:44:4e:cf:b3:a7:b4:98:
                    8f:e7:ef:a9:b6:5e:f0:f5:3c:df:3c:22:27:4c:a3:
                    50:62:6c:29:13:a8:c9:3e:73:01:7b:dd:aa:45:47:
                    65:cc:5d:90:46:3b:d0:ca:76:fe:bb:61:7a:b2:f0:
                    93:d5:61:ac:f1:7a:eb:46:16:a3:55:fe:87:8a:61:
                    05:a6:74:58:25:59:e5:ed:a2:ac:e8:13:b3:a9:4e:
                    56:8c:05:65:d0:7d:5c:82:24:28:b2:f3:87:47:50:
                    62:90:70:ce:4a:c1:2d:70:a5:77:ff:fc:a3:1b:24:
                    6e:28:7c:66:c8:39:7d:4d:6b:94:48:d7:9b:85:26:
                    a1:d3:3b:2d:fc:e4:87:eb:0c:81:3e:7d:1f:77:69:
                    62:98:1e:96:eb:5d:5e:9d:48:fe:35:88:d7:ab:62:
                    22:b5:13:d8:ab:d0:fb:6d:2f:e2:44:0d:ab:91:0d:
                    12:39:30:20:59:2f:8e:10:95:4a:2d:80:85:1b:89:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F8:7E:45:88:B1:11:6D:A9:E1:AA:37:04:20:DB:B5:42:07:09:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl

            X509v3 Authority Key Identifier:
                keyid:B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.80.0/20
                  207.66.80.0/20
                IPv6:
                  2606:3240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:f7:ee:a9:67:31:50:24:76:d0:a5:9c:c5:52:a0:58:ac:
         a4:81:25:e9:02:52:b9:33:36:c6:1a:4b:45:04:86:86:f1:ab:
         8e:88:f8:62:92:34:a7:b9:b6:68:cb:a9:c3:55:91:a4:0f:01:
         a2:78:d5:e1:a9:93:7c:02:e6:41:e3:87:f2:a7:a2:8d:65:86:
         26:07:ee:4c:48:66:27:c9:54:c8:eb:d4:a2:71:ce:0e:81:49:
         4a:90:cf:b2:9b:0e:b9:19:67:1c:c0:bc:ef:f2:08:99:4a:c7:
         5b:4f:6f:2a:e1:d4:4a:f9:46:a9:6f:aa:7b:d9:94:18:91:b8:
         a7:8e:4a:c0:4b:d4:2c:1d:95:e9:51:4b:d7:ea:3c:5a:22:9e:
         94:b7:67:df:77:1d:8b:9f:37:7e:18:f7:2c:48:46:1d:1b:61:
         18:b6:97:41:bb:ca:e3:e0:e5:18:36:f6:0a:ea:01:b7:99:ef:
         8e:51:d3:8a:ee:55:33:22:94:3f:67:43:e8:c3:8f:91:6a:68:
         f2:38:ec:b3:e4:21:90:aa:c4:57:a0:48:1d:38:7b:9e:b8:04:
         bc:8a:e1:3f:26:d4:3c:5a:1f:2e:83:27:44:66:29:f9:f5:0f:
         16:4b:57:12:eb:de:9c:24:52:92:1b:27:6f:05:3a:88:ad:ed:
         d3:6d:3c:36
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEzv8jVQOuJly7PNgcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiN2RlN2ItOThkZS00YzliLWEzN2MtZDdlY2I4OGNm
NDIyMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
M2UyNjJjNmQtYWNlNC00OGVmLWFiOTAtYjdkMGRlM2MxODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMhV/OddOHFC+i6C3m0Rak5TtpnxRdJKoXSl
/O0ygXjKHqDnppzVbRFFgqS35mqKTeeRPb6vganGaF+Fs6JunUN7+EROz7OntJiP
5++ptl7w9TzfPCInTKNQYmwpE6jJPnMBe92qRUdlzF2QRjvQynb+u2F6svCT1WGs
8XrrRhajVf6HimEFpnRYJVnl7aKs6BOzqU5WjAVl0H1cgiQosvOHR1BikHDOSsEt
cKV3//yjGyRuKHxmyDl9TWuUSNebhSah0zst/OSH6wyBPn0fd2limB6W611enUj+
NYjXq2IitRPYq9D7bS/iRA2rkQ0SOTAgWS+OEJVKLYCFG4l45wIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFMX4fkWIsRFtqeGqNwQg27VCBwknMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMmI3
ZGU3Yi05OGRlLTRjOWItYTM3Yy1kN2VjYjg4Y2Y0MjIvZmZhZGI5MzktYjZjNi0z
YzU3LWJjNWQtMjFiZDI2YjdmNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDJiN2RlN2ItOThkZS00YzliLWEz
N2MtZDdlY2I4OGNmNDIyL2QyYjdkZTdiLTk4ZGUtNGM5Yi1hMzdjLWQ3ZWNiODhj
ZjQyMi5jcmwwHwYDVR0jBBgwFoAUtCyD7GiK9fMnqKu3K6XheDWhK9swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMmI3ZGU3Yi05OGRlLTRjOWItYTM3Yy1kN2Vj
Yjg4Y2Y0MjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEjGpQAwQE
z0JQMA0EAgACMAcDBQAmBjJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEac9+6pZzFQJHbQpZzFUqBYrKSB
JekCUrkzNsYaS0UEhobxq46I+GKSNKe5tmjLqcNVkaQPAaJ41eGpk3wC5kHjh/Kn
oo1lhiYH7kxIZifJVMjr1KJxzg6BSUqQz7KbDrkZZxzAvO/yCJlKx1tPbyrh1Er5
RqlvqnvZlBiRuKeOSsBL1CwdlelRS9fqPFoinpS3Z993HYufN34Y9yxIRh0bYRi2
l0G7yuPg5Rg29grqAbeZ745R04ruVTMilD9nQ+jDj5FqaPI47LPkIZCqxFegSB04
e564BLyK4T8m1DxaHy6DJ0RmKfn1DxZLVxLr3pwkUpIbJ28FOoit7dNtPDY=
-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:24 2026 by rpki-client