Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d3c0ad5-9b8a-35ec-8096-f65b1e8289da.roa
File:                     5d3c0ad5-9b8a-35ec-8096-f65b1e8289da.roa (raw, json)
Hash identifier:          vqyaQxWCk0C9ZjNc68ETBgsxbi8LHenO19beO42JgFY=
Subject key identifier:   FA:79:E1:C5:CF:C4:3A:9F:35:A3:83:CC:BC:30:A3:A3:BD:58:4A:2C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CDDCCFB3D386F274C4C750EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d3c0ad5-9b8a-35ec-8096-f65b1e8289da.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     201106
IP address blocks:        143.109.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:fb:3d:38:6f:27:4c:4c:75:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=6e38ed90-596a-4f55-9df6-5c98f0d0c89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:1b:8b:76:b1:78:7b:90:be:47:59:40:ab:
                    94:ad:da:86:09:98:b6:d6:23:bd:7b:7c:70:b0:e7:
                    f1:d9:14:4c:7c:13:a1:07:bd:05:e6:70:79:33:28:
                    08:93:c5:9d:ee:9a:dd:32:c9:fd:62:3a:cc:af:71:
                    97:f4:50:2a:8b:49:ee:aa:59:68:4a:d1:a9:57:da:
                    59:a6:bb:50:18:d5:97:0e:5f:d5:7e:e1:e0:b8:15:
                    32:e5:db:40:7e:b0:81:62:3e:78:ad:80:d9:ed:9b:
                    94:11:d1:d9:e5:e5:03:a9:7b:6a:22:d3:fd:a5:ea:
                    d0:4a:44:ff:d7:7e:d4:18:e1:f2:fe:07:5e:94:f9:
                    49:d2:82:16:cc:76:ae:cc:da:61:7e:44:d7:f0:a7:
                    50:25:3d:eb:d4:c8:95:3e:cd:64:17:b4:71:1e:bf:
                    0f:52:a9:37:52:b4:0f:13:30:f8:b3:a5:ba:40:5c:
                    d4:6c:1a:d5:5b:8b:50:b2:c0:39:79:f7:08:9f:77:
                    f4:76:d5:8a:4c:87:f9:c4:69:de:44:f1:3f:02:d1:
                    73:b3:46:e8:83:d4:99:4c:ba:6d:c2:26:a0:da:8d:
                    7c:b6:f2:06:af:c9:2d:50:df:69:74:e2:5f:00:6c:
                    f1:ad:cd:12:4f:32:5c:63:1c:06:c0:98:04:dc:b1:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:E1:C5:CF:C4:3A:9F:35:A3:83:CC:BC:30:A3:A3:BD:58:4A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d3c0ad5-9b8a-35ec-8096-f65b1e8289da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:fd:d7:cd:8c:bb:b6:79:98:1d:fd:45:01:99:4a:f9:80:
         87:93:7c:4c:c8:45:66:c0:db:cc:a7:9b:dc:14:45:e7:1b:32:
         42:d3:e3:b3:58:ff:31:1f:6f:74:dd:5e:c4:9a:78:bf:dd:9d:
         ae:bf:dc:38:c3:f0:ce:58:12:b5:2a:cc:3f:ce:5e:11:5a:4a:
         56:ea:08:07:0a:b3:3f:b4:b5:5c:45:0d:26:e7:65:26:de:19:
         09:e5:c4:3a:da:45:1a:49:7f:47:86:d0:94:51:85:1a:a0:63:
         37:d6:a0:0e:f1:1f:a5:65:52:ec:08:55:a5:8f:1d:b0:a3:35:
         c8:7b:41:db:f8:f4:62:ea:9a:06:07:c6:b0:83:c5:75:13:57:
         5a:c1:6e:e6:b7:cc:d0:75:5a:c9:e4:40:8e:2f:68:ff:5d:c3:
         61:e3:f5:a5:da:85:dc:ac:05:ba:e9:17:4a:83:52:ae:86:1c:
         b1:ec:51:7e:9e:30:04:92:cb:33:2a:bd:3c:22:d6:de:72:b9:
         e4:db:83:73:e6:2f:56:5f:11:b2:af:27:3e:92:5c:59:b1:82:
         18:d9:4b:17:99:f1:9d:28:10:0f:44:09:b0:da:4b:68:b6:c8:
         ca:8a:66:57:20:1d:c8:64:8b:e6:e1:97:8e:4c:0e:d8:7a:7a:
         f7:b6:1a:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzPs9OG8nTEx1DsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
NmUzOGVkOTAtNTk2YS00ZjU1LTlkZjYtNWM5OGYwZDBjODlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUUbi3axeHuQvkdZQKuUrdqGCZi21iO9e3xw
sOfx2RRMfBOhB70F5nB5MygIk8Wd7prdMsn9YjrMr3GX9FAqi0nuqlloStGpV9pZ
prtQGNWXDl/VfuHguBUy5dtAfrCBYj54rYDZ7ZuUEdHZ5eUDqXtqItP9perQSkT/
137UGOHy/gdelPlJ0oIWzHauzNphfkTX8KdQJT3r1MiVPs1kF7RxHr8PUqk3UrQP
EzD4s6W6QFzUbBrVW4tQssA5efcIn3f0dtWKTIf5xGneRPE/AtFzs0bog9SZTLpt
wiag2o18tvIGr8ktUN9pdOJfAGzxrc0STzJcYxwGwJgE3LGG9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPp54cXPxDqfNaODzLwwo6O9WEosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWQzYzBhZDUtOWI4YS0z
NWVjLTgwOTYtZjY1YjFlODI4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj20oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtK/dfNjLu2eZgd/UUBmUr5gIeTfEzIRWbA28ynm9wURecbMkLT47NY
/zEfb3TdXsSaeL/dna6/3DjD8M5YErUqzD/OXhFaSlbqCAcKsz+0tVxFDSbnZSbe
GQnlxDraRRpJf0eG0JRRhRqgYzfWoA7xH6VlUuwIVaWPHbCjNch7Qdv49GLqmgYH
xrCDxXUTV1rBbua3zNB1WsnkQI4vaP9dw2Hj9aXahdysBbrpF0qDUq6GHLHsUX6e
MASSyzMqvTwi1t5yueTbg3PmL1ZfEbKvJz6SXFmxghjZSxeZ8Z0oEA9ECbDaS2i2
yMqKZlcgHchki+bhl45MDth6eve2Gqg=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:18 2026 by rpki-client