Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
File:                     423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json)
Hash identifier:          uvh5NPqA1ErkOWzomytp+Z8yQm/6J2mZGFRBtRqCIdE=
Subject key identifier:   2B:DD:B6:40:73:82:C8:FC:7B:3B:63:E9:87:C0:A5:5F:7C:33:B9:F1
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328584CDB01FDB105865C5272AFD940
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     7057
IP address blocks:        216.8.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:fd:b1:05:86:5c:52:72:af:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=9f894ad3-72cd-40d8-983b-37ff5f93ad12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:6e:d4:58:24:44:9e:8b:0d:46:23:3f:e7:
                    db:d2:32:56:1b:a7:c9:e0:e8:20:02:b2:e4:9a:9a:
                    45:d7:93:8c:1a:ab:41:7d:53:97:f3:48:8d:b2:01:
                    03:1b:e2:bd:c9:3a:10:3c:5a:ab:9b:d0:0b:c4:f2:
                    5d:f6:b2:12:15:33:fe:57:28:64:c2:15:d3:6f:e8:
                    ae:65:c4:85:c3:a1:df:5d:48:2c:92:5f:dd:dd:06:
                    be:96:97:b0:ac:2c:1c:e3:5e:be:5d:28:28:7d:b6:
                    a8:ab:7b:26:ea:bf:1e:b8:71:2c:c4:5d:50:f6:fd:
                    b8:94:b6:33:02:bd:63:1a:49:d6:c5:08:c4:54:db:
                    cd:3b:a7:50:2f:94:98:b5:33:4b:b3:a2:b0:99:60:
                    7b:be:67:12:0e:77:b5:4d:ab:ca:e4:d2:94:94:49:
                    d1:fb:ba:bc:5c:d8:5a:80:9a:ae:b4:f2:d1:47:fb:
                    6b:36:3c:a9:54:fd:20:39:49:9f:ec:4d:51:3a:0a:
                    06:41:8e:ff:71:a2:de:b5:26:52:eb:5c:f5:a6:46:
                    0d:07:8f:0a:b8:4a:7a:ac:2e:74:55:b5:3c:26:19:
                    02:10:cc:3e:38:9c:29:00:d0:7b:b7:dd:83:27:0e:
                    f0:fe:08:1d:9e:34:10:90:6d:94:7f:49:f5:fa:88:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DD:B6:40:73:82:C8:FC:7B:3B:63:E9:87:C0:A5:5F:7C:33:B9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:ee:71:35:d4:cc:8b:6a:c4:99:26:5b:52:71:69:db:aa:
         24:6f:0f:bc:8a:05:21:31:8e:c6:db:de:cb:b5:8a:a3:b7:05:
         09:8f:6b:ca:7c:14:fe:d7:ff:45:eb:aa:1e:80:1f:ba:22:a7:
         6d:f1:82:af:ec:91:2a:41:33:04:19:dd:66:66:73:f8:0d:58:
         06:e3:30:0b:4c:a1:52:47:2d:66:8d:ef:01:b6:6b:71:53:f6:
         4f:8e:18:6a:30:fa:d1:0c:d2:0f:07:82:2b:40:57:bf:b7:43:
         37:23:c5:f3:94:4f:4c:ae:b2:b0:b8:52:2a:c7:8b:4a:71:8f:
         e9:aa:02:d5:64:d3:77:1c:d8:16:f0:f9:9e:4e:cf:77:a3:aa:
         da:9c:4e:72:ff:63:87:b0:40:e7:a1:85:e6:67:3e:76:ec:a3:
         cd:c8:7e:42:77:4e:9b:ed:3f:33:ff:26:73:d2:c2:0d:a4:95:
         59:bc:6d:d7:75:55:e2:f1:01:5a:11:5a:be:06:f6:d0:b0:fb:
         39:ba:06:93:32:4a:e0:12:ef:02:4c:8e:1f:5d:58:a4:81:63:
         1e:71:dc:b7:7e:25:92:ab:66:bd:25:d7:4a:9f:8e:3f:bb:dd:
         a4:0c:b2:52:aa:df:d3:e2:3c:d6:33:3e:28:a4:d2:4e:3b:e2:
         59:47:5c:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAf2xBYZcUnKv2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz
OWM4MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
OWY4OTRhZDMtNzJjZC00MGQ4LTk4M2ItMzdmZjVmOTNhZDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKRu1FgkRJ6LDUYjP+fb0jJWG6fJ4OggArLk
mppF15OMGqtBfVOX80iNsgEDG+K9yToQPFqrm9ALxPJd9rISFTP+VyhkwhXTb+iu
ZcSFw6HfXUgskl/d3Qa+lpewrCwc416+XSgofbaoq3sm6r8euHEsxF1Q9v24lLYz
Ar1jGknWxQjEVNvNO6dQL5SYtTNLs6KwmWB7vmcSDne1TavK5NKUlEnR+7q8XNha
gJqutPLRR/trNjypVP0gOUmf7E1ROgoGQY7/caLetSZS61z1pkYNB48KuEp6rC50
VbU8JhkCEMw+OJwpANB7t92DJw7w/ggdnjQQkG2Uf0n1+oj2NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvdtkBzgsj8eztj6YfApV98M7nxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi
YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvNDIzYzIzYTMtZmQ2My0z
MDQwLTlmOGItMjg2ZmM4ODQzY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0
ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky
MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx
ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2AiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgM7nE11MyLasSZJltScWnbqiRvD7yKBSExjsbb3su1iqO3BQmPa8p8
FP7X/0Xrqh6AH7oip23xgq/skSpBMwQZ3WZmc/gNWAbjMAtMoVJHLWaN7wG2a3FT
9k+OGGow+tEM0g8HgitAV7+3QzcjxfOUT0yusrC4UirHi0pxj+mqAtVk03cc2Bbw
+Z5Oz3ejqtqcTnL/Y4ewQOehheZnPnbso83IfkJ3TpvtPzP/JnPSwg2klVm8bdd1
VeLxAVoRWr4G9tCw+zm6BpMySuAS7wJMjh9dWKSBYx5x3Ld+JZKrZr0l10qfjj+7
3aQMslKq39PiPNYzPiik0k474llHXGQ=
-----END CERTIFICATE-----
Generated at Fri Feb 27 10:01:34 2026 by rpki-client