Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9b876474-5117-3fc4-917b-b75e1fed7f26.roa
File:                     9b876474-5117-3fc4-917b-b75e1fed7f26.roa (raw, json)
Hash identifier:          BxR8ubHQsXYY38fqowL2A/ZEUgqJ8i0W2vXJv+icT0k=
Subject key identifier:   A0:21:2A:62:E1:C0:9F:63:26:07:B5:02:A9:DF:3C:41:AB:09:C2:A6
Certificate issuer:       /CN=9753e726-64c1-48a7-af77-48b8031adfe4
Certificate serial:       010D0C9F4328584CE8F76EA7C8B3902F80884400
Authority key identifier: E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9b876474-5117-3fc4-917b-b75e1fed7f26.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        204.69.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6e:a7:c8:b3:90:2f:80:88:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9753e726-64c1-48a7-af77-48b8031adfe4
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=33bd8b55-a809-4fd5-be0b-153e7f8badbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:a5:e5:97:24:3b:57:d7:a2:e9:9c:c0:64:
                    da:91:e2:70:df:ac:14:55:63:20:12:a3:0e:6e:52:
                    0e:60:80:9c:b2:eb:51:19:05:10:64:a6:eb:2f:c7:
                    7b:a9:c7:5c:a7:52:dc:ac:75:26:c2:37:e3:4a:bd:
                    f2:48:28:59:cb:ee:55:09:19:ce:64:56:5c:b1:a8:
                    13:db:d8:28:3c:be:e4:4b:78:1c:4f:1d:22:33:d9:
                    1d:61:f2:55:97:1b:dc:9b:8b:f6:7b:99:43:33:a2:
                    78:0c:f4:d9:0e:ad:df:77:2d:a0:e0:4a:d1:96:a6:
                    6e:8c:3e:ce:96:53:01:47:fc:89:fd:cc:ae:ee:92:
                    75:57:07:99:49:1e:22:bc:47:1a:a6:85:47:78:72:
                    71:2d:4c:f2:a8:3a:2e:ee:da:f5:e9:63:0e:4b:63:
                    ce:52:ee:2a:ed:8f:4b:ee:a0:bb:6f:a7:51:29:9d:
                    1f:a9:bb:41:7a:5c:50:ec:a6:71:5e:e7:50:71:35:
                    a8:ce:30:7d:df:fa:5d:d6:9d:75:1f:66:1e:8d:94:
                    52:af:49:51:f1:90:f8:0b:0b:55:5e:20:6b:65:a9:
                    d7:6b:c0:0b:d1:94:a6:b4:99:c3:c2:c3:0e:ec:e4:
                    59:03:bf:d5:17:74:e6:68:ff:74:0b:1c:57:b7:76:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:21:2A:62:E1:C0:9F:63:26:07:B5:02:A9:DF:3C:41:AB:09:C2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9b876474-5117-3fc4-917b-b75e1fed7f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:30:42:c7:9a:95:70:cc:71:6b:dc:70:33:f7:08:97:27:
         19:04:51:f6:59:c0:49:8b:66:5e:2f:18:bf:d1:a7:c1:0a:54:
         b2:98:d2:b2:f6:3f:10:7e:4e:05:20:27:7a:27:f2:e9:04:81:
         e3:f5:d6:cc:74:da:c9:47:6a:00:7a:39:24:78:3f:fa:92:26:
         30:20:b6:38:c7:8b:d7:89:30:87:78:2f:42:58:95:cf:67:14:
         91:bd:18:a1:60:2d:fa:56:21:ef:22:33:c2:99:b6:78:36:73:
         97:d7:69:61:1f:fa:1d:2f:62:fa:98:8d:09:67:b3:1a:e0:67:
         8e:1c:e1:aa:49:ee:8f:22:37:b6:40:70:42:ba:92:d2:8b:d0:
         17:56:ca:e7:87:c5:9d:8b:2c:a8:b0:f6:24:7d:34:92:b1:0c:
         4a:66:44:d1:90:46:4c:fa:1d:ba:96:3c:76:65:6b:3e:4e:9e:
         5a:84:7e:e1:c3:4e:40:ed:37:8c:44:c1:67:1d:0d:14:9b:2f:
         f9:1e:4b:9e:9c:17:5c:49:c3:51:10:c8:cd:93:40:37:d0:1f:
         ac:04:e5:a6:1c:97:47:1a:59:38:13:7a:af:62:03:05:15:dc:
         7c:e1:ce:78:52:ac:95:f1:13:12:03:7c:49:ac:e5:84:4b:84:
         78:83:7e:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo926nyLOQL4CIRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc1M2U3MjYtNjRjMS00OGE3LWFmNzctNDhiODAzMWFk
ZmU0MB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
MzNiZDhiNTUtYTgwOS00ZmQ1LWJlMGItMTUzZTdmOGJhZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimel5ZckO1fXoumcwGTakeJw36wUVWMgEqMO
blIOYICcsutRGQUQZKbrL8d7qcdcp1LcrHUmwjfjSr3ySChZy+5VCRnOZFZcsagT
29goPL7kS3gcTx0iM9kdYfJVlxvcm4v2e5lDM6J4DPTZDq3fdy2g4ErRlqZujD7O
llMBR/yJ/cyu7pJ1VweZSR4ivEcapoVHeHJxLUzyqDou7tr16WMOS2POUu4q7Y9L
7qC7b6dRKZ0fqbtBelxQ7KZxXudQcTWozjB93/pd1p11H2YejZRSr0lR8ZD4CwtV
XiBrZanXa8AL0ZSmtJnDwsMO7ORZA7/VF3TmaP90CxxXt3bUCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAhKmLhwJ9jJge1AqnfPEGrCcKmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NzUz
ZTcyNi02NGMxLTQ4YTctYWY3Ny00OGI4MDMxYWRmZTQvOWI4NzY0NzQtNTExNy0z
ZmM0LTkxN2ItYjc1ZTFmZWQ3ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTc1M2U3MjYtNjRjMS00OGE3LWFm
NzctNDhiODAzMWFkZmU0Lzk3NTNlNzI2LTY0YzEtNDhhNy1hZjc3LTQ4YjgwMzFh
ZGZlNC5jcmwwHwYDVR0jBBgwFoAU6PljIatCRZhABynXahAs++XS5kowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NzUzZTcyNi02NGMxLTQ4YTctYWY3Ny00OGI4
MDMxYWRmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEUKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhqMELHmpVwzHFr3HAz9wiXJxkEUfZZwEmLZl4vGL/Rp8EKVLKY0rL2
PxB+TgUgJ3on8ukEgeP11sx02slHagB6OSR4P/qSJjAgtjjHi9eJMId4L0JYlc9n
FJG9GKFgLfpWIe8iM8KZtng2c5fXaWEf+h0vYvqYjQlnsxrgZ44c4apJ7o8iN7ZA
cEK6ktKL0BdWyueHxZ2LLKiw9iR9NJKxDEpmRNGQRkz6HbqWPHZlaz5OnlqEfuHD
TkDtN4xEwWcdDRSbL/keS56cF1xJw1EQyM2TQDfQH6wE5aYcl0caWTgTeq9iAwUV
3HzhznhSrJXxExIDfEms5YRLhHiDfp4=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:58 2026 by rpki-client