Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/228db425-020f-30a0-9c0b-390b714b3aaf.roa
File:                     228db425-020f-30a0-9c0b-390b714b3aaf.roa (raw, json)
Hash identifier:          06Pewhr2hIVMHZvccF4nSPcpMSVRdoRJSclCFvU+LuI=
Subject key identifier:   DB:36:3E:09:25:D2:05:20:86:94:94:FE:88:49:04:55:13:94:17:AE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CD45C686E6E7B13FB4DE48940
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/228db425-020f-30a0-9c0b-390b714b3aaf.roa
Signing time:             Wed 11 Feb 2026 16:52:12 +0000
ROA not before:           Wed 11 Feb 2026 16:52:12 +0000
ROA not after:            Tue 12 May 2026 15:52:12 +0000
asID:                     140869
IP address blocks:        205.186.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:5c:68:6e:6e:7b:13:fb:4d:e4:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 16:52:12 2026 GMT
            Not After : May 12 15:52:12 2026 GMT
        Subject: CN=2df4298d-1f85-4522-bde7-4e2af3f5ef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:af:d5:e7:fe:cb:91:f7:bd:e0:3d:ec:2e:
                    75:65:fd:6c:96:91:32:1e:e8:78:2a:b8:e6:34:33:
                    b9:f0:4c:2e:5d:ef:57:32:c2:e0:9c:05:44:b1:fd:
                    a5:fe:d4:b9:4b:a7:58:01:a7:0e:cd:2c:88:b3:f0:
                    30:db:dc:60:05:34:80:12:a3:77:81:80:ca:26:13:
                    1e:a7:b1:fa:6d:19:0b:d1:d2:37:5e:c4:cf:23:bd:
                    3b:da:d5:11:2b:75:8f:4e:cb:e8:15:9e:ef:41:fd:
                    f3:f2:af:d4:28:ac:0e:6b:bc:3d:eb:1f:07:1d:6c:
                    94:c5:60:a6:86:41:5d:ee:45:3b:c0:1a:73:ec:61:
                    5c:14:2a:20:8a:03:6d:e4:09:51:ff:d8:01:eb:0d:
                    c6:09:d3:ec:4a:64:9f:cd:eb:2b:2d:fd:68:4f:72:
                    11:1c:c1:e8:f3:39:83:7f:2a:db:cb:41:0f:c4:62:
                    23:d2:ad:14:34:d0:53:dd:de:f5:97:b1:41:c8:85:
                    01:e7:07:7f:b1:96:e0:00:56:77:7f:4f:f9:37:ad:
                    c2:da:d4:ec:e0:2d:67:0c:0e:69:2e:0f:b0:f4:cf:
                    03:dd:3d:31:f1:1e:ba:d6:3f:d3:ca:b5:5b:dd:32:
                    d6:ba:b0:a8:cf:40:88:d1:15:e0:1b:d2:d2:1f:c7:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:3E:09:25:D2:05:20:86:94:94:FE:88:49:04:55:13:94:17:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/228db425-020f-30a0-9c0b-390b714b3aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:af:dd:8c:c9:8d:19:58:33:9d:51:8f:b4:a8:09:77:51:70:
         b3:74:d5:93:7e:16:24:31:ea:2d:a0:78:40:da:43:c3:da:db:
         60:7d:d2:8b:a8:50:66:5a:4a:65:7a:2b:59:90:7a:8d:6b:50:
         80:f0:ce:6e:73:b6:93:92:65:46:a9:a1:ef:04:24:8a:ac:fb:
         4b:32:6e:24:88:76:1a:70:cc:d1:04:80:53:49:8d:4c:bb:93:
         96:96:f9:97:26:29:90:97:60:0a:90:a8:92:33:6e:c0:f9:77:
         77:3a:ac:e6:5d:80:d0:83:9f:70:d3:24:ee:be:af:29:76:6f:
         d9:87:75:fa:1c:4b:f1:a8:f0:b6:32:f5:45:30:67:90:70:e6:
         a4:7a:ac:ce:12:74:56:e2:c9:f0:23:28:af:c7:28:55:b8:c5:
         7b:7c:97:5b:7c:d7:6b:a5:e2:7b:0f:b8:9e:13:e4:07:e8:9a:
         38:5d:6e:e2:19:a5:35:ad:f8:83:44:3b:79:ee:07:af:5c:c7:
         e3:b3:85:02:68:12:3c:d9:0c:41:4b:54:e4:58:ed:04:d3:0b:
         59:d2:56:12:d0:9b:a5:aa:29:09:c9:bb:7a:ab:d2:1a:1c:ad:
         53:a3:ed:fd:ff:43:41:00:7e:49:c3:03:95:33:e4:23:40:69:
         83:fd:04:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUXGhubnsT+03kiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDIxMTE2NTIxMloXDTI2MDUxMjE1NTIxMlowLzEtMCsGA1UEAxMk
MmRmNDI5OGQtMWY4NS00NTIyLWJkZTctNGUyYWYzZjVlZjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmWv1ef+y5H3veA97C51Zf1slpEyHuh4Krjm
NDO58EwuXe9XMsLgnAVEsf2l/tS5S6dYAacOzSyIs/Aw29xgBTSAEqN3gYDKJhMe
p7H6bRkL0dI3XsTPI7072tURK3WPTsvoFZ7vQf3z8q/UKKwOa7w96x8HHWyUxWCm
hkFd7kU7wBpz7GFcFCogigNt5AlR/9gB6w3GCdPsSmSfzesrLf1oT3IRHMHo8zmD
fyrby0EPxGIj0q0UNNBT3d71l7FByIUB5wd/sZbgAFZ3f0/5N63C2tTs4C1nDA5p
Lg+w9M8D3T0x8R661j/TyrVb3TLWurCoz0CI0RXgG9LSH8eT+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNs2Pgkl0gUghpSU/ohJBFUTlBeuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjI4ZGI0MjUtMDIwZi0z
MGEwLTljMGItMzkwYjcxNGIzYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKmv3YzJjRlYM51Rj7SoCXdRcLN01ZN+FiQx6i2geEDaQ8Pa22B90ouo
UGZaSmV6K1mQeo1rUIDwzm5ztpOSZUapoe8EJIqs+0sybiSIdhpwzNEEgFNJjUy7
k5aW+ZcmKZCXYAqQqJIzbsD5d3c6rOZdgNCDn3DTJO6+ryl2b9mHdfocS/Go8LYy
9UUwZ5Bw5qR6rM4SdFbiyfAjKK/HKFW4xXt8l1t812ul4nsPuJ4T5AfomjhdbuIZ
pTWt+INEO3nuB69cx+OzhQJoEjzZDEFLVORY7QTTC1nSVhLQm6WqKQnJu3qr0hoc
rVOj7f3/Q0EAfknDA5Uz5CNAaYP9BKE=
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:35:05 2026 by rpki-client