Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9875d124-6804-34b0-87b1-4ec91074ce74.roa
File:                     9875d124-6804-34b0-87b1-4ec91074ce74.roa (raw, json)
Hash identifier:          A/PJ0LlURXoWjGO6IreGt3l9MiXls5mwjqnVr1iqbV8=
Subject key identifier:   A0:EC:9B:F3:55:E6:D1:D6:27:D6:0E:55:75:3B:17:9C:31:E5:99:5F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CF587B1BFE4A2B2349C30F384
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9875d124-6804-34b0-87b1-4ec91074ce74.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     7018
IP address blocks:        142.111.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:b1:bf:e4:a2:b2:34:9c:30:f3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=d4623726-5e43-4f00-8b44-f2985f6f5f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:b8:fe:a6:85:ff:c2:8f:ed:df:14:56:60:
                    c9:6d:1a:52:23:17:45:75:77:7d:90:4c:a8:c8:e8:
                    f4:cf:7a:b3:3f:e9:89:ed:9c:ad:3b:7f:8d:4a:a5:
                    22:eb:b9:ff:d4:80:9c:15:66:f6:04:73:0e:62:15:
                    34:aa:f0:e8:60:82:4d:87:2c:85:82:e8:fd:cd:17:
                    36:2d:98:6f:de:dd:ef:46:d3:a5:81:db:53:5e:14:
                    bc:ef:15:5c:9d:34:a3:cc:7c:ed:75:12:b2:60:df:
                    64:84:1b:ea:65:47:a5:84:5f:e1:d2:e8:83:e7:6b:
                    fd:e1:d0:ad:7d:76:e4:3a:8d:16:52:2e:95:e1:de:
                    42:43:47:7c:5f:3d:76:75:08:64:80:e5:a8:5c:a3:
                    b5:23:fd:b9:33:61:a8:0e:a8:30:10:09:4e:a8:c7:
                    98:47:de:32:00:73:c3:cc:a3:0d:8b:49:8a:72:49:
                    40:73:a2:a7:9a:16:e5:8b:d7:c0:a3:3c:fc:09:9b:
                    88:79:d9:db:1c:93:7d:48:64:81:c7:44:45:59:75:
                    0b:7b:78:49:c4:04:2a:42:26:b5:da:14:03:f1:79:
                    56:37:b7:89:f3:80:2e:75:a7:b0:2f:e8:b7:c5:ab:
                    f1:af:37:11:e0:34:e0:0f:73:7e:99:46:99:88:57:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EC:9B:F3:55:E6:D1:D6:27:D6:0E:55:75:3B:17:9C:31:E5:99:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9875d124-6804-34b0-87b1-4ec91074ce74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:47:60:c2:ff:18:0b:96:cf:22:fa:f1:0d:cd:a2:f1:1b:7f:
         17:d7:7a:63:b7:af:6b:6a:ed:65:46:17:d4:0c:40:aa:c8:89:
         66:c1:c5:07:47:9a:27:cb:d5:3b:8b:95:59:be:51:0d:e6:23:
         93:58:2f:ab:b2:d0:6c:2b:2f:96:38:fe:37:6c:e8:40:e4:49:
         aa:ee:9a:86:83:6d:05:9a:e0:11:75:87:31:81:bd:d2:aa:cd:
         6d:b1:98:f7:e9:b8:92:30:83:3d:13:92:d1:95:9a:95:cf:8a:
         87:a6:a6:26:81:b7:02:f1:bd:d6:95:60:66:70:b3:14:73:24:
         91:6c:6c:85:68:53:28:2f:11:61:4c:e3:ab:1e:10:b1:4e:dd:
         61:7e:3d:6e:ec:bd:88:d2:43:c2:ec:b0:9a:8e:ac:10:f9:20:
         37:f1:99:eb:40:b2:17:54:19:2a:45:75:17:07:17:1c:95:79:
         07:85:05:38:3e:e4:e8:57:77:e1:24:77:ed:32:a5:a1:84:e5:
         29:1e:15:df:61:97:94:3b:08:2e:86:37:45:42:86:3d:78:70:
         28:9e:c3:b2:1e:f2:90:95:42:18:db:91:da:a8:30:19:36:7e:
         83:eb:3c:4f:a3:24:6d:b9:ae:47:41:01:b4:22:91:b0:8c:0c:
         1c:ab:25:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7G/5KKyNJww84QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
ZDQ2MjM3MjYtNWU0My00ZjAwLThiNDQtZjI5ODVmNmY1ZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL24/qaF/8KP7d8UVmDJbRpSIxdFdXd9kEyo
yOj0z3qzP+mJ7ZytO3+NSqUi67n/1ICcFWb2BHMOYhU0qvDoYIJNhyyFguj9zRc2
LZhv3t3vRtOlgdtTXhS87xVcnTSjzHztdRKyYN9khBvqZUelhF/h0uiD52v94dCt
fXbkOo0WUi6V4d5CQ0d8Xz12dQhkgOWoXKO1I/25M2GoDqgwEAlOqMeYR94yAHPD
zKMNi0mKcklAc6Knmhbli9fAozz8CZuIednbHJN9SGSBx0RFWXULe3hJxAQqQia1
2hQD8XlWN7eJ84AudaewL+i3xavxrzcR4DTgD3N+mUaZiFfc0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDsm/NV5tHWJ9YOVXU7F5wx5ZlfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTg3NWQxMjQtNjgwNC0z
NGIwLTg3YjEtNGVjOTEwNzRjZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJHYML/GAuWzyL68Q3NovEbfxfXemO3r2tq7WVGF9QMQKrIiWbBxQdH
mifL1TuLlVm+UQ3mI5NYL6uy0GwrL5Y4/jds6EDkSarumoaDbQWa4BF1hzGBvdKq
zW2xmPfpuJIwgz0TktGVmpXPioempiaBtwLxvdaVYGZwsxRzJJFsbIVoUygvEWFM
46seELFO3WF+PW7svYjSQ8LssJqOrBD5IDfxmetAshdUGSpFdRcHFxyVeQeFBTg+
5OhXd+Ekd+0ypaGE5SkeFd9hl5Q7CC6GN0VChj14cCiew7Ie8pCVQhjbkdqoMBk2
foPrPE+jJG25rkdBAbQikbCMDByrJYw=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:29:32 2026 by rpki-client