Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa
File:                     71e4a434-dda3-31de-b234-78167e9e4c57.roa (raw, json)
Hash identifier:          sVMwDPU1eEEJ2mEtfoA7M8of+SYfmIlMHrrME5PhJfs=
Subject key identifier:   57:A1:BB:D4:CB:CA:77:81:CF:AE:29:B2:78:A3:74:FD:01:DA:87:C6
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584CF9B782A7AB2AEADA845EBBC0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     13536
IP address blocks:        216.107.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:82:a7:ab:2a:ea:da:84:5e:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=629171d1-0cd3-413f-a2ca-568251ab751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:0a:fa:d7:dd:8e:7f:d2:40:c4:c0:d8:eb:
                    58:4b:f9:ec:f1:aa:7a:0c:54:16:53:06:fe:03:e7:
                    c0:e1:cf:22:c8:11:d9:ae:89:83:f0:97:4e:99:5d:
                    13:a7:25:df:c8:5d:31:4f:0a:de:22:0d:f2:b8:92:
                    a2:a2:4e:9f:b5:e0:e6:71:ec:d1:8b:41:2c:f9:38:
                    cb:64:8b:57:0e:59:91:e7:d3:d2:10:b0:2a:0a:62:
                    6c:5c:b1:05:5a:56:e4:8d:79:cf:87:34:e2:44:c7:
                    0c:38:7c:b4:e2:c3:12:e3:0c:58:8d:79:b6:b9:7e:
                    9f:e3:f0:9d:9c:66:08:96:5b:9f:9b:ca:c4:20:a9:
                    66:1d:a5:a1:db:03:5d:59:aa:5e:1e:68:4e:e1:15:
                    b1:45:1f:81:0c:57:f9:6e:b2:48:27:b5:60:30:99:
                    e7:6d:43:1e:8b:31:91:70:be:f1:c6:23:76:86:1e:
                    e1:47:51:4c:7d:b8:24:67:a1:78:b7:87:0d:3d:49:
                    0a:54:9b:f5:b1:4b:91:dd:f0:43:c3:e3:fa:fc:3a:
                    02:48:21:b2:1a:db:20:cc:71:18:af:be:6f:75:ae:
                    f4:31:1a:c8:51:6d:01:c1:33:09:8b:bd:da:71:67:
                    1c:c7:fc:5f:5f:0b:33:1a:8f:a8:c3:ba:9f:e4:ee:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:BB:D4:CB:CA:77:81:CF:AE:29:B2:78:A3:74:FD:01:DA:87:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:35:39:52:46:06:15:d8:bc:29:a8:8f:40:1a:6c:9e:51:
         ee:17:64:4e:00:06:51:10:c1:41:59:af:23:da:66:1e:10:75:
         6b:56:f3:65:31:fa:94:3c:6b:59:15:76:9f:d3:54:66:50:aa:
         0d:04:cf:da:fb:23:77:a0:5a:9a:1b:ae:a2:98:0e:b8:09:a6:
         05:62:a1:e1:c6:fb:8a:fe:15:73:f0:be:6a:cf:de:73:e9:f9:
         54:b0:af:a7:4f:02:cf:a3:59:58:9b:72:79:57:88:da:89:40:
         b1:7f:c7:9c:30:b5:d6:be:08:cd:66:6e:94:79:fe:87:5d:bf:
         64:59:bc:23:95:99:14:93:6c:c4:2d:e0:95:ea:ab:29:c4:3a:
         c9:e8:05:d6:f1:8a:e7:35:2f:78:08:cc:45:cf:e9:ce:eb:ad:
         09:4f:86:d8:bb:87:c7:2a:c4:77:37:a1:78:94:db:ce:d4:5f:
         90:bd:dd:7b:9a:f7:44:54:43:b7:d0:9e:1b:c7:a9:aa:41:95:
         a2:29:b1:24:bb:06:1a:48:73:8c:7b:29:5f:2d:b8:b6:86:02:
         d2:fc:6a:8b:2e:fc:95:cd:0c:f9:19:78:1e:ad:73:b7:55:36:
         30:01:78:f7:c6:f1:59:84:3e:ff:66:ff:e1:6e:0b:55:04:01:
         60:51:e4:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4Knqyrq2oReu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk
NjI5MTcxZDEtMGNkMy00MTNmLWEyY2EtNTY4MjUxYWI3NTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IgK+tfdjn/SQMTA2OtYS/ns8ap6DFQWUwb+
A+fA4c8iyBHZromD8JdOmV0TpyXfyF0xTwreIg3yuJKiok6fteDmcezRi0Es+TjL
ZItXDlmR59PSELAqCmJsXLEFWlbkjXnPhzTiRMcMOHy04sMS4wxYjXm2uX6f4/Cd
nGYIllufm8rEIKlmHaWh2wNdWapeHmhO4RWxRR+BDFf5brJIJ7VgMJnnbUMeizGR
cL7xxiN2hh7hR1FMfbgkZ6F4t4cNPUkKVJv1sUuR3fBDw+P6/DoCSCGyGtsgzHEY
r75vda70MRrIUW0BwTMJi73acWccx/xfXwszGo+ow7qf5O4hMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFehu9TLyneBz64psnijdP0B2ofGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNzFlNGE0MzQtZGRhMy0z
MWRlLWIyMzQtNzgxNjdlOWU0YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GvoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD84NTlSRgYV2LwpqI9AGmyeUe4XZE4ABlEQwUFZryPaZh4QdWtW82Ux
+pQ8a1kVdp/TVGZQqg0Ez9r7I3egWpobrqKYDrgJpgVioeHG+4r+FXPwvmrP3nPp
+VSwr6dPAs+jWVibcnlXiNqJQLF/x5wwtda+CM1mbpR5/oddv2RZvCOVmRSTbMQt
4JXqqynEOsnoBdbxiuc1L3gIzEXP6c7rrQlPhti7h8cqxHc3oXiU287UX5C93Xua
90RUQ7fQnhvHqapBlaIpsSS7BhpIc4x7KV8tuLaGAtL8aosu/JXNDPkZeB6tc7dV
NjABePfG8VmEPv9m/+FuC1UEAWBR5H8=
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:01:23 2026 by rpki-client