Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c343f333-6f55-330e-b1ab-48b6508d1794.roa
File:                     c343f333-6f55-330e-b1ab-48b6508d1794.roa (raw, json)
Hash identifier:          IYl9fqkb81vxTJaTNEsPkeHod7YfCIAV2v7hnsWHN94=
Subject key identifier:   68:D6:E2:FC:6D:E1:F6:E4:A4:08:61:A9:9E:5F:C1:65:F4:9D:48:3F
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CDCB711A5A3E8078B1B08DB00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c343f333-6f55-330e-b1ab-48b6508d1794.roa
Signing time:             Sat 14 Feb 2026 16:41:20 +0000
ROA not before:           Sat 14 Feb 2026 16:41:20 +0000
ROA not after:            Fri 15 May 2026 15:41:20 +0000
asID:                     4922
IP address blocks:        8.225.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:b7:11:a5:a3:e8:07:8b:1b:08:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 14 16:41:20 2026 GMT
            Not After : May 15 15:41:20 2026 GMT
        Subject: CN=3123e956-f2a1-47f7-af5c-e6fc035f9e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:a2:0b:bf:06:5e:e0:37:06:43:fa:68:23:
                    88:c6:1a:63:b3:32:5e:36:a3:a1:2f:a3:c5:14:eb:
                    e1:e5:80:ef:c8:76:c6:3e:2c:47:d9:ba:22:55:6e:
                    4e:cc:cf:bd:84:9e:45:c9:3e:5a:c3:c2:b6:88:0d:
                    53:46:47:9e:74:ce:97:bb:54:68:29:38:de:4f:82:
                    5f:ba:38:05:eb:d0:d1:ad:f8:c0:57:dc:bc:7a:4d:
                    92:b9:d4:7a:da:be:d6:8d:af:de:25:ac:77:ad:f1:
                    0b:58:c6:67:74:5b:f5:9e:d7:cc:33:e0:2d:f4:1f:
                    52:0c:c7:75:02:15:90:8b:3e:d2:e1:7b:aa:04:4a:
                    65:9b:fc:b8:f8:cc:3d:4a:c7:3d:46:f6:3e:4f:25:
                    c2:b1:e5:6d:72:07:03:ee:79:14:bc:15:70:b1:60:
                    df:cb:07:9c:28:f0:d5:67:53:d9:63:2d:cf:62:37:
                    99:df:9f:2c:06:2f:df:ee:c7:f3:84:48:7a:c5:2b:
                    52:18:54:79:23:e4:d6:0c:c7:4f:df:49:a0:60:9d:
                    8d:3a:f7:e6:4e:98:67:20:5b:50:71:25:0f:0e:8e:
                    b8:8f:0c:20:6f:ab:34:bf:9d:6b:10:e9:2b:df:29:
                    80:c4:86:59:cc:ef:05:a4:1b:f1:95:71:bc:17:db:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D6:E2:FC:6D:E1:F6:E4:A4:08:61:A9:9E:5F:C1:65:F4:9D:48:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c343f333-6f55-330e-b1ab-48b6508d1794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.225.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:20:c7:d2:74:21:74:7f:b3:ee:83:7b:0b:0e:3b:77:1b:78:
         55:b1:a1:5a:6b:5d:5f:c5:0d:4c:ae:30:06:9d:23:ae:6a:68:
         b8:be:30:37:b1:7b:03:b4:ac:49:8a:f0:e1:fe:03:4b:dc:76:
         69:34:06:5e:02:01:d5:af:36:b9:99:de:3a:4b:7a:d8:40:42:
         51:d0:74:ec:17:0f:1b:0f:9b:7f:87:0a:55:0a:b1:61:a8:f0:
         70:6e:43:28:3d:dd:94:e9:6e:49:ac:cd:06:ef:06:c6:83:93:
         8a:03:e2:94:81:af:b0:73:a9:82:82:52:72:ee:3b:a9:01:9c:
         05:e6:33:96:de:12:be:7b:1c:97:3c:db:7e:0e:4c:ec:36:fa:
         c6:f3:7b:c5:b3:02:3a:7e:3e:c0:a6:05:c5:70:e2:08:ca:15:
         f0:94:44:b7:c4:15:f1:a3:89:f6:90:ac:0a:ba:f7:03:9f:4c:
         7f:05:3c:4b:fc:c0:f2:1c:3b:93:5d:8b:f6:f5:d8:62:3b:50:
         61:71:dd:4b:17:bf:99:0a:64:f3:2b:72:42:96:fa:90:40:d9:
         f2:0e:6e:11:40:56:db:2f:60:03:f5:71:92:e9:1f:db:24:5b:
         37:51:9e:b0:fa:14:1c:3d:2c:e2:6e:de:1d:15:80:13:c4:13:
         c6:6d:18:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzctxGlo+gHixsI2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDIxNDE2NDEyMFoXDTI2MDUxNTE1NDEyMFowLzEtMCsGA1UEAxMk
MzEyM2U5NTYtZjJhMS00N2Y3LWFmNWMtZTZmYzAzNWY5ZTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuuiC78GXuA3BkP6aCOIxhpjszJeNqOhL6PF
FOvh5YDvyHbGPixH2boiVW5OzM+9hJ5FyT5aw8K2iA1TRkeedM6Xu1RoKTjeT4Jf
ujgF69DRrfjAV9y8ek2SudR62r7Wja/eJax3rfELWMZndFv1ntfMM+At9B9SDMd1
AhWQiz7S4XuqBEplm/y4+Mw9Ssc9RvY+TyXCseVtcgcD7nkUvBVwsWDfywecKPDV
Z1PZYy3PYjeZ358sBi/f7sfzhEh6xStSGFR5I+TWDMdP30mgYJ2NOvfmTphnIFtQ
cSUPDo64jwwgb6s0v51rEOkr3ymAxIZZzO8FpBvxlXG8F9uzjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjW4vxt4fbkpAhhqZ5fwWX0nUg/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzM0M2YzMzMtNmY1NS0z
MzBlLWIxYWItNDhiNjUwOGQxNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCOHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEgx9J0IXR/s+6DewsOO3cbeFWxoVprXV/FDUyuMAadI65qaLi+MDex
ewO0rEmK8OH+A0vcdmk0Bl4CAdWvNrmZ3jpLethAQlHQdOwXDxsPm3+HClUKsWGo
8HBuQyg93ZTpbkmszQbvBsaDk4oD4pSBr7BzqYKCUnLuO6kBnAXmM5beEr57HJc8
234OTOw2+sbze8WzAjp+PsCmBcVw4gjKFfCURLfEFfGjifaQrAq69wOfTH8FPEv8
wPIcO5Ndi/b12GI7UGFx3UsXv5kKZPMrckKW+pBA2fIObhFAVtsvYAP1cZLpH9sk
WzdRnrD6FBw9LOJu3h0VgBPEE8ZtGKY=
-----END CERTIFICATE-----
Generated at Fri Feb 27 02:20:48 2026 by rpki-client