Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f034c20b-8ab1-3e73-ac77-2c5cb11fecec.roa
File:                     f034c20b-8ab1-3e73-ac77-2c5cb11fecec.roa (raw, json)
Hash identifier:          Jl68sapcRRu4JSbwjbACsOf9ZlRhz7npWEAF17AE+9A=
Subject key identifier:   81:6B:60:DB:3F:D0:1D:DB:89:CE:71:DE:9B:5C:AB:0F:DC:5F:3F:D9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CD8047AA1FA67A75C6B95F700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f034c20b-8ab1-3e73-ac77-2c5cb11fecec.roa
Signing time:             Fri 13 Feb 2026 00:18:16 +0000
ROA not before:           Fri 13 Feb 2026 00:18:16 +0000
ROA not after:            Wed 13 May 2026 23:18:16 +0000
asID:                     401152
IP address blocks:        166.88.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:04:7a:a1:fa:67:a7:5c:6b:95:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 13 00:18:16 2026 GMT
            Not After : May 13 23:18:16 2026 GMT
        Subject: CN=c720118a-9eed-426b-80bc-8f3771583919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:ff:0e:d2:7f:a4:e5:ad:74:71:02:be:47:
                    c5:86:ed:a7:d2:96:f7:8f:93:96:03:08:49:3a:05:
                    cc:df:db:59:8c:f7:3e:95:39:3d:59:a0:c7:45:2a:
                    f8:0c:9e:44:ae:90:cd:81:08:c3:c4:e3:f2:53:58:
                    11:4a:25:1b:ed:c8:77:e0:b7:8f:9a:40:66:e8:43:
                    87:8b:d8:d5:d0:e4:d7:ce:a2:b4:f3:83:eb:d9:89:
                    fa:94:29:3b:96:9e:84:60:5c:83:02:90:70:e0:8c:
                    46:24:8c:09:c8:52:51:23:43:0a:3d:c4:eb:bf:e5:
                    bf:c0:b6:b2:2f:aa:f8:47:15:b8:a8:bb:0b:0f:3f:
                    da:fd:c9:ff:2f:8f:b4:83:d7:c4:ff:a9:f1:64:91:
                    0c:d2:97:e3:0e:ba:2c:41:71:21:29:89:3a:7d:27:
                    f8:ab:e1:f6:0c:7e:37:a4:3a:d6:a7:fa:37:d9:9c:
                    d9:82:0e:cd:dc:34:5f:05:c6:88:6a:42:33:50:1c:
                    29:7b:fc:f7:1c:83:1b:eb:e0:36:d4:4e:66:83:ff:
                    ac:26:73:ce:35:fe:e6:a3:fe:92:50:6c:62:9b:bd:
                    15:f4:75:0c:e3:a1:39:d0:e1:bc:35:8b:f3:18:2a:
                    14:9f:75:73:7e:f9:26:b7:d6:0d:0b:b3:53:c8:85:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6B:60:DB:3F:D0:1D:DB:89:CE:71:DE:9B:5C:AB:0F:DC:5F:3F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f034c20b-8ab1-3e73-ac77-2c5cb11fecec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:87:a3:8c:4f:29:c5:e6:42:65:03:58:30:90:11:4e:ec:
         1c:38:ae:12:97:84:85:42:88:6e:f7:a6:21:7b:43:fb:b1:91:
         9c:21:18:5c:07:a3:ba:bf:3f:b0:46:60:11:8b:7d:6f:72:20:
         85:d9:85:47:2d:c0:49:41:5d:32:6a:cc:fc:e2:ce:e0:01:f1:
         72:fb:c3:bd:2b:6d:c3:24:1e:e8:ee:5e:83:e2:47:4e:00:e8:
         60:4d:0f:ed:9a:a5:26:33:5e:a5:bd:0a:87:d3:57:a5:8e:23:
         47:f4:37:24:57:e0:d6:5a:25:fc:26:35:e9:7b:2c:c3:2c:f5:
         0e:b9:e0:05:8a:41:d1:c0:4e:be:2b:02:c9:6b:5f:42:10:45:
         79:ee:fb:e6:c5:7c:0c:50:63:87:9b:78:f2:37:d7:f2:26:20:
         e8:ee:3f:c4:50:c8:c7:62:db:11:44:54:73:f1:5f:7c:2c:62:
         37:5b:fd:94:d1:7b:45:90:76:c3:b7:40:6c:a2:14:c6:e9:1f:
         09:d6:c0:19:fd:a2:29:09:9a:10:68:a0:34:97:79:7f:47:0b:
         c6:8d:15:8e:27:75:f4:6d:7e:dc:b2:3f:50:a2:ae:2f:b8:b1:
         96:a7:34:37:7d:82:f0:46:25:9e:d9:c4:7e:ab:75:ef:96:5a:
         31:75:3e:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzYBHqh+menXGuV9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDIxMzAwMTgxNloXDTI2MDUxMzIzMTgxNlowLzEtMCsGA1UEAxMk
YzcyMDExOGEtOWVlZC00MjZiLTgwYmMtOGYzNzcxNTgzOTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvP/DtJ/pOWtdHECvkfFhu2n0pb3j5OWAwhJ
OgXM39tZjPc+lTk9WaDHRSr4DJ5ErpDNgQjDxOPyU1gRSiUb7ch34LePmkBm6EOH
i9jV0OTXzqK084Pr2Yn6lCk7lp6EYFyDApBw4IxGJIwJyFJRI0MKPcTrv+W/wLay
L6r4RxW4qLsLDz/a/cn/L4+0g9fE/6nxZJEM0pfjDrosQXEhKYk6fSf4q+H2DH43
pDrWp/o32ZzZgg7N3DRfBcaIakIzUBwpe/z3HIMb6+A21E5mg/+sJnPONf7mo/6S
UGxim70V9HUM46E50OG8NYvzGCoUn3Vzfvkmt9YNC7NTyIWHzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFrYNs/0B3bic5x3ptcqw/cXz/ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjAzNGMyMGItOGFiMS0z
ZTczLWFjNzctMmM1Y2IxMWZlY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJdh6OMTynF5kJlA1gwkBFO7Bw4rhKXhIVCiG73piF7Q/uxkZwhGFwH
o7q/P7BGYBGLfW9yIIXZhUctwElBXTJqzPzizuAB8XL7w70rbcMkHujuXoPiR04A
6GBND+2apSYzXqW9CofTV6WOI0f0NyRX4NZaJfwmNel7LMMs9Q654AWKQdHATr4r
AslrX0IQRXnu++bFfAxQY4ebePI31/ImIOjuP8RQyMdi2xFEVHPxX3wsYjdb/ZTR
e0WQdsO3QGyiFMbpHwnWwBn9oikJmhBooDSXeX9HC8aNFY4ndfRtftyyP1Ciri+4
sZanNDd9gvBGJZ7ZxH6rde+WWjF1PrI=
-----END CERTIFICATE-----
Generated at Tue Feb 17 09:27:45 2026 by rpki-client