Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa
File:                     cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa (raw, json)
Hash identifier:          XhCf3YfLKyotktKDDoxAmPvvAkFq6WAAXQ6DYgxLt4U=
Subject key identifier:   6D:B7:CC:10:1B:3B:4E:16:F2:8E:72:AF:44:6D:B9:1C:E2:99:D2:CF
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584CE09781EDCDE08CE244920940
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     3561
IP address blocks:        206.156.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:81:ed:cd:e0:8c:e2:44:92:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=d03455fa-9a21-478b-a063-c433efbf6425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:a2:99:cb:f6:f2:89:87:7a:58:32:57:e7:
                    33:03:33:85:3e:7f:e8:26:6a:c1:83:ec:84:d1:dc:
                    aa:df:97:9b:1e:3f:41:cf:e4:88:53:42:98:7f:4b:
                    21:1a:d1:b1:aa:1f:f7:86:af:e8:5f:4d:59:58:ca:
                    12:6f:3f:df:f3:cd:01:2d:45:87:35:81:27:79:2c:
                    30:7e:c4:b4:66:b5:2b:6b:8d:67:bc:d9:21:ed:18:
                    28:97:de:49:62:f5:67:cb:a3:9b:c8:80:cd:66:1f:
                    44:dc:40:4c:70:0b:cb:4d:5a:31:63:e6:50:a7:71:
                    0c:2b:73:dd:c2:31:7b:4f:5f:8c:9e:e3:49:36:94:
                    83:2d:7d:87:9f:c8:75:6f:31:25:69:da:0c:e5:5e:
                    9e:06:fd:dc:ea:ad:44:c1:0c:e1:1e:d9:e8:ab:72:
                    af:fa:4c:9f:3d:00:f4:36:ed:02:eb:83:d7:bb:a6:
                    54:05:f8:bc:80:55:dd:80:25:8c:db:ac:8b:ba:c5:
                    df:28:2f:0d:e7:ec:35:9f:11:d0:5c:4a:48:53:21:
                    9f:a5:5f:2b:bb:cf:4e:66:f9:6d:cb:9d:6d:5e:22:
                    74:5d:93:53:ac:54:51:90:bb:9b:e4:83:2c:57:78:
                    22:9c:df:c0:74:7c:26:ea:2d:74:16:44:aa:c3:ff:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:CC:10:1B:3B:4E:16:F2:8E:72:AF:44:6D:B9:1C:E2:99:D2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:1f:2e:8e:48:17:a5:2d:ea:98:83:34:db:c3:ce:66:6d:
         fd:eb:20:89:21:a0:61:38:e7:b3:40:0d:8b:f2:b5:60:fe:1d:
         a2:50:02:9a:04:37:c1:93:4c:75:0b:5b:d8:87:54:94:71:c7:
         c1:3d:6f:4a:b5:4e:fd:35:af:ca:8a:e6:93:31:15:32:73:41:
         59:e4:85:d5:aa:e9:d9:73:10:f9:15:bf:72:3a:64:cd:78:0c:
         50:f3:88:4a:b8:72:16:d2:d7:ba:e2:a2:92:f6:45:69:0e:93:
         e0:1e:8e:a2:18:c1:76:c7:c7:33:92:03:7a:4f:d8:cb:2b:4f:
         62:c1:6e:50:b0:21:9a:6f:27:03:6d:ae:98:50:11:0c:13:52:
         7b:53:5a:e9:6d:1a:0f:68:2d:2c:4e:a0:a6:34:9f:a5:b9:7c:
         bc:a4:cb:b2:33:b2:7b:92:a6:3e:51:1f:7d:3b:56:e5:97:a4:
         34:8f:33:5b:f5:a2:3f:93:9b:2b:92:bd:0f:4c:fe:17:eb:a1:
         4c:ea:8d:7c:b2:17:01:8b:2f:66:3b:93:ff:95:66:87:fd:64:
         74:57:21:c6:55:6a:9a:4f:89:e3:3e:3f:16:37:58:8c:ac:83:
         41:72:5d:0a:a3:76:f9:f7:c0:e7:da:1f:5e:e0:fd:9a:ae:61:
         4d:d7:42:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzgl4HtzeCM4kSSCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
ZDAzNDU1ZmEtOWEyMS00NzhiLWEwNjMtYzQzM2VmYmY2NDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaGimcv28omHelgyV+czAzOFPn/oJmrBg+yE
0dyq35ebHj9Bz+SIU0KYf0shGtGxqh/3hq/oX01ZWMoSbz/f880BLUWHNYEneSww
fsS0ZrUra41nvNkh7Rgol95JYvVny6ObyIDNZh9E3EBMcAvLTVoxY+ZQp3EMK3Pd
wjF7T1+MnuNJNpSDLX2Hn8h1bzEladoM5V6eBv3c6q1EwQzhHtnoq3Kv+kyfPQD0
Nu0C64PXu6ZUBfi8gFXdgCWM26yLusXfKC8N5+w1nxHQXEpIUyGfpV8ru89OZvlt
y51tXiJ0XZNTrFRRkLub5IMsV3ginN/AdHwm6i10FkSqw/8YnwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG23zBAbO04W8o5yr0RtuRzimdLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvY2QxMmM5ZjYtYjcwNi0z
OGU5LTg5NjAtYjgwYzdlYTYyMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBzpwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHUgfLo5IF6Ut6piDNNvDzmZt/esgiSGgYTjns0ANi/K1YP4dolACmgQ3
wZNMdQtb2IdUlHHHwT1vSrVO/TWvyormkzEVMnNBWeSF1arp2XMQ+RW/cjpkzXgM
UPOISrhyFtLXuuKikvZFaQ6T4B6OohjBdsfHM5IDek/YyytPYsFuULAhmm8nA22u
mFARDBNSe1Na6W0aD2gtLE6gpjSfpbl8vKTLsjOye5KmPlEffTtW5ZekNI8zW/Wi
P5ObK5K9D0z+F+uhTOqNfLIXAYsvZjuT/5Vmh/1kdFchxlVqmk+J4z4/FjdYjKyD
QXJdCqN2+ffA59ofXuD9mq5hTddCaA==
-----END CERTIFICATE-----
Generated at Thu Feb 26 18:30:23 2026 by rpki-client