Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa
File:                     f3ebe319-be5f-3778-a975-9213caf64420.roa (raw, json)
Hash identifier:          HDwIySKbnefEJL5sPW6hjEX6q/CwO33Fy81oehT9Sxg=
Subject key identifier:   AE:46:51:CF:95:FB:23:41:8B:86:92:95:A9:58:E4:5A:5D:2E:7E:B8
Certificate issuer:       /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Certificate serial:       010D0C9F4328584CF422268EF38CDFBD92480F80
Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     10930
IP address blocks:        209.251.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:26:8e:f3:8c:df:bd:92:48:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=60f38424-50ea-41ae-aa70-7ddf9f5e7343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:3e:c1:a0:29:75:da:38:3b:96:90:92:54:
                    39:d2:23:13:1f:43:a8:22:85:0c:2d:ef:63:e3:95:
                    c5:4d:71:e6:7a:04:a0:05:f7:12:87:75:a1:03:06:
                    5e:98:1c:52:3d:46:60:e3:c1:ba:3c:97:d5:eb:b9:
                    5e:85:2a:9e:31:ec:f8:01:05:21:17:20:7f:db:47:
                    6f:c0:9c:b2:d3:fd:ba:ab:ac:9e:16:0d:32:02:5e:
                    d0:ee:56:c5:97:e3:64:b4:f4:a8:12:a5:a3:66:c5:
                    15:55:8c:ee:e1:ce:e2:09:89:a0:45:81:48:81:29:
                    65:67:38:38:3b:e1:d7:6a:fb:6b:7f:07:42:5c:b5:
                    41:09:94:c0:a9:87:50:a1:c0:9c:09:e5:fc:74:f4:
                    0f:9f:79:4b:c7:d5:e8:28:ce:4e:0d:95:76:b4:70:
                    f9:e6:79:4a:70:2c:e2:7d:fb:b5:a5:5a:2c:38:59:
                    f1:b3:e5:49:b4:7e:a6:12:ef:a7:bb:fe:da:fd:b2:
                    db:be:b5:9f:75:30:7a:09:3b:36:a6:8c:d7:b8:ba:
                    46:8b:0c:d9:20:2f:c0:81:3b:31:f5:83:e0:cb:d1:
                    1a:78:99:3e:b4:00:bf:69:8a:4f:2a:cc:9c:fa:b4:
                    29:3f:9c:15:c6:7a:23:f4:97:27:72:18:a3:3e:5f:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:51:CF:95:FB:23:41:8B:86:92:95:A9:58:E4:5A:5D:2E:7E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl

            X509v3 Authority Key Identifier:
                keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:45:4a:62:ad:64:53:f9:12:9e:24:80:46:5f:e1:fe:a4:ff:
         3c:c8:bd:af:66:c5:05:f4:83:1f:c6:e1:27:d2:15:36:b2:4f:
         de:99:3d:0f:95:c5:fe:ae:c4:39:4e:8f:79:03:ed:94:ce:94:
         d2:17:91:5c:41:2e:16:06:67:dd:6e:be:6e:1f:1e:57:f2:87:
         76:5f:fc:e9:c5:c7:e7:83:6e:04:7d:64:2f:af:62:35:ed:38:
         83:7f:b6:c5:68:26:bf:b6:eb:f2:12:6c:d5:ac:49:e9:42:b9:
         dc:b3:79:b1:f1:76:bb:8d:11:77:03:86:69:2c:9c:39:a1:51:
         0e:ff:68:11:3c:6c:ce:79:54:a4:73:90:c5:98:61:7e:35:02:
         c8:79:12:cd:3d:41:7c:cb:bf:23:2b:18:da:79:35:c4:f6:83:
         69:de:57:c9:27:a0:71:21:49:bf:3d:b6:79:5d:24:d6:21:67:
         bc:3a:18:fd:9a:34:7f:bc:85:4f:e7:3f:72:e5:24:05:cc:75:
         87:5b:84:f5:b4:f6:18:68:10:98:05:97:d7:e3:1c:81:c4:58:
         2b:57:fe:a5:21:89:4c:4e:e1:bb:af:93:54:b2:26:c8:d3:73:
         b5:22:d3:ab:57:55:0a:2b:ac:7b:5a:4d:bb:5b:a0:39:7c:a4:
         72:0f:3b:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiaO84zfvZJID4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQyMzM5MTMtOGMzZC00ZGY0LWJkN2QtNDk1ZjdhZmJh
MmFjMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
NjBmMzg0MjQtNTBlYS00MWFlLWFhNzAtN2RkZjlmNWU3MzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgo+waApddo4O5aQklQ50iMTH0OoIoUMLe9j
45XFTXHmegSgBfcSh3WhAwZemBxSPUZg48G6PJfV67lehSqeMez4AQUhFyB/20dv
wJyy0/26q6yeFg0yAl7Q7lbFl+NktPSoEqWjZsUVVYzu4c7iCYmgRYFIgSllZzg4
O+HXavtrfwdCXLVBCZTAqYdQocCcCeX8dPQPn3lLx9XoKM5ODZV2tHD55nlKcCzi
ffu1pVosOFnxs+VJtH6mEu+nu/7a/bLbvrWfdTB6CTs2pozXuLpGiwzZIC/AgTsx
9YPgy9EaeJk+tAC/aYpPKsyc+rQpP5wVxnoj9JcnchijPl9U5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5GUc+V+yNBi4aSlalY5FpdLn64MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDIz
MzkxMy04YzNkLTRkZjQtYmQ3ZC00OTVmN2FmYmEyYWMvZjNlYmUzMTktYmU1Zi0z
Nzc4LWE5NzUtOTIxM2NhZjY0NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQyMzM5MTMtOGMzZC00ZGY0LWJk
N2QtNDk1ZjdhZmJhMmFjL2U0MjMzOTEzLThjM2QtNGRmNC1iZDdkLTQ5NWY3YWZi
YTJhYy5jcmwwHwYDVR0jBBgwFoAUI+lnoVuplvNe90Th0dYIfg7sYKswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDIzMzkxMy04YzNkLTRkZjQtYmQ3ZC00OTVm
N2FmYmEyYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fvhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBFSmKtZFP5Ep4kgEZf4f6k/zzIva9mxQX0gx/G4SfSFTayT96ZPQ+V
xf6uxDlOj3kD7ZTOlNIXkVxBLhYGZ91uvm4fHlfyh3Zf/OnFx+eDbgR9ZC+vYjXt
OIN/tsVoJr+26/ISbNWsSelCudyzebHxdruNEXcDhmksnDmhUQ7/aBE8bM55VKRz
kMWYYX41Ash5Es09QXzLvyMrGNp5NcT2g2neV8knoHEhSb89tnldJNYhZ7w6GP2a
NH+8hU/nP3LlJAXMdYdbhPW09hhoEJgFl9fjHIHEWCtX/qUhiUxO4buvk1SyJsjT
c7Ui06tXVQorrHtaTbtboDl8pHIPO0s=
-----END CERTIFICATE-----
Generated at Mon Feb 23 18:43:00 2026 by rpki-client