Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa
File:                     f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa (raw, json)
Hash identifier:          W0VYiP2M4D1ZzonSNCOBUqaSxFgm1Bapg4tTcEXIDxc=
Subject key identifier:   B4:A1:4B:97:8E:2A:E9:E5:E6:82:CA:90:BE:FC:E6:6A:80:8A:40:5A
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584CD6D2086910CF12BB21F127C0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     4540
IP address blocks:        74.126.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:08:69:10:cf:12:bb:21:f1:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=c6156047-f9b6-416d-b614-ea9a0dc4e69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:ec:dd:6d:16:c2:4c:6b:34:3e:c6:5e:92:
                    c5:3e:c7:d7:73:84:08:ff:bb:4e:ae:7c:5d:65:e0:
                    3f:8d:71:54:65:bf:d8:11:ef:49:b6:f9:b8:73:b4:
                    63:38:1a:ec:84:f7:00:8b:4f:6b:83:3a:7e:4b:d0:
                    e7:2f:43:e8:59:8a:75:65:96:ac:90:47:9c:52:ef:
                    91:65:70:66:9d:b1:45:2f:18:a7:94:f4:e0:d2:12:
                    b0:e6:1b:6d:2f:c0:c5:55:97:c7:a8:f2:08:2a:bb:
                    7e:c4:87:a2:de:0d:1b:1b:7a:ff:b4:96:d5:a4:6f:
                    c0:10:2d:2d:a7:7f:b0:94:58:92:be:64:cd:dc:9e:
                    e9:08:6b:3b:4a:89:88:f0:4b:ad:d9:0a:b2:2c:0d:
                    7d:32:d5:3b:c3:45:63:86:10:56:06:6a:8d:99:d8:
                    a8:0f:dc:b5:da:46:ff:a0:79:0f:a4:d3:22:91:b0:
                    7c:4d:d3:c5:a2:aa:95:a9:ef:dd:7c:91:81:d6:36:
                    d4:4d:86:06:49:90:ee:4b:14:d0:b1:14:c3:12:12:
                    71:e7:d8:f1:bd:f1:31:0e:a2:f1:32:f7:a3:43:7d:
                    e1:90:eb:a7:54:7e:c5:95:ec:bf:cd:e7:7a:19:4b:
                    8b:2c:88:35:e7:2b:0b:d8:0f:de:ff:fe:1e:fc:ea:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:4B:97:8E:2A:E9:E5:E6:82:CA:90:BE:FC:E6:6A:80:8A:40:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:e4:32:fa:f8:57:a8:ff:fe:c4:3a:f1:5a:fb:af:09:bc:
         b4:84:03:af:8f:78:5c:34:ee:fb:c2:1f:95:34:7b:ff:2a:dd:
         f5:75:65:8a:b5:98:e6:d4:6a:a7:75:21:be:4c:84:7c:fa:a8:
         de:19:9b:fb:a3:cd:3a:4b:9a:67:f7:c1:84:79:57:fe:05:1e:
         72:94:b0:9c:54:b0:49:f7:0d:94:87:f4:a1:a5:93:92:a3:13:
         f3:db:7d:9b:ad:8e:6b:d4:fd:52:39:cf:2c:21:0e:f3:a9:98:
         3a:3a:a2:90:3b:cb:e0:23:4f:c5:c6:40:2d:4c:d2:d4:3d:5d:
         4a:7a:ea:9d:f2:c2:4d:55:88:fe:c4:c7:da:ec:7b:17:b1:ec:
         1c:c7:51:a9:f4:46:08:e8:17:72:07:04:9f:13:4d:37:9f:8c:
         4f:e9:de:4a:95:30:03:58:45:de:2c:99:6e:41:3d:4b:83:be:
         3e:2a:99:2b:f9:f9:73:4c:c1:87:1c:dd:c6:03:0b:06:7c:d6:
         fa:cd:04:86:c3:fb:a1:a4:4d:fc:f8:09:39:ef:b9:10:23:aa:
         a2:57:c2:c9:8a:a1:20:38:1b:70:97:e8:7f:29:e3:19:a6:ae:
         c6:e8:2e:8c:41:7f:14:e6:fb:60:f4:5e:c1:5f:08:f1:26:6e:
         8d:1c:e5:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0ghpEM8SuyHxJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
YzYxNTYwNDctZjliNi00MTZkLWI2MTQtZWE5YTBkYzRlNjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Ts3W0WwkxrND7GXpLFPsfXc4QI/7tOrnxd
ZeA/jXFUZb/YEe9Jtvm4c7RjOBrshPcAi09rgzp+S9DnL0PoWYp1ZZaskEecUu+R
ZXBmnbFFLxinlPTg0hKw5httL8DFVZfHqPIIKrt+xIei3g0bG3r/tJbVpG/AEC0t
p3+wlFiSvmTN3J7pCGs7SomI8Eut2QqyLA19MtU7w0VjhhBWBmqNmdioD9y12kb/
oHkPpNMikbB8TdPFoqqVqe/dfJGB1jbUTYYGSZDuSxTQsRTDEhJx59jxvfExDqLx
MvejQ33hkOunVH7Fley/zed6GUuLLIg15ysL2A/e//4e/OqqcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLShS5eOKunl5oLKkL785mqAikBaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZjJmNWIzYzAtOTJjMS0z
MzMyLTlmYWYtMWE4YTllNzhkMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7I5DL6+Feo//7EOvFa+68JvLSEA6+PeFw07vvCH5U0e/8q3fV1ZYq1
mObUaqd1Ib5MhHz6qN4Zm/ujzTpLmmf3wYR5V/4FHnKUsJxUsEn3DZSH9KGlk5Kj
E/PbfZutjmvU/VI5zywhDvOpmDo6opA7y+AjT8XGQC1M0tQ9XUp66p3ywk1ViP7E
x9rsexex7BzHUan0RgjoF3IHBJ8TTTefjE/p3kqVMANYRd4smW5BPUuDvj4qmSv5
+XNMwYcc3cYDCwZ81vrNBIbD+6GkTfz4CTnvuRAjqqJXwsmKoSA4G3CX6H8p4xmm
rsboLoxBfxTm+2D0XsFfCPEmbo0c5VI=
-----END CERTIFICATE-----
Generated at Fri Feb 27 07:34:21 2026 by rpki-client