Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/cc83aa8e-e626-37fa-bf12-55a339f11697.roa
File:                     cc83aa8e-e626-37fa-bf12-55a339f11697.roa (raw, json)
Hash identifier:          387xGF/ZsMZUy4uCDZ/vjiGuaIQCNjIx3isLc1qph58=
Subject key identifier:   11:2E:27:D7:AA:42:4E:BF:89:B9:3C:EC:AC:44:C9:5C:5F:D3:84:63
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F4328584CF6ECC74707F8A7F5466C28C0
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/cc83aa8e-e626-37fa-bf12-55a339f11697.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        208.70.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:c7:47:07:f8:a7:f5:46:6c:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=c6009a81-5d63-470a-875e-336f90c53e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:ca:7d:46:84:1a:96:87:27:65:1f:48:c2:
                    22:9d:45:53:dd:70:bf:0c:88:1c:71:1a:55:ba:5f:
                    c0:25:73:ff:7f:07:93:b8:76:a9:54:54:e7:e2:94:
                    cb:ba:24:6b:b8:db:5f:50:64:a2:32:70:6e:a1:f1:
                    a6:07:27:54:84:d1:9c:9d:f8:d5:76:19:bd:36:26:
                    fd:49:25:07:67:83:a4:50:76:91:7b:1e:ed:0f:f3:
                    77:e8:0f:6a:35:b4:b6:99:2c:0a:e0:ad:90:24:d1:
                    31:c0:6f:6b:7d:35:01:d4:80:f4:f3:43:15:63:07:
                    b4:f9:f5:b5:17:01:a3:81:bc:d0:8b:21:75:20:3c:
                    9f:dc:87:03:74:28:38:b2:c9:6f:39:62:b4:b9:d4:
                    68:b4:f2:4c:a7:98:f2:e0:d7:eb:30:6b:3a:b9:f0:
                    aa:9a:41:c0:57:9d:14:a7:97:2c:76:d7:5c:8a:45:
                    e3:7d:49:75:8e:65:9c:9c:98:6a:ca:74:e7:3c:df:
                    ed:21:6e:f4:f4:42:4f:28:ca:98:1e:99:d5:54:24:
                    ef:86:5b:a8:84:d7:75:c4:74:99:72:86:42:f8:55:
                    03:1a:a4:f6:e4:6c:82:b9:87:2a:43:3d:4d:68:3e:
                    eb:7e:88:65:02:32:6e:40:94:02:c5:94:d4:44:f5:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2E:27:D7:AA:42:4E:BF:89:B9:3C:EC:AC:44:C9:5C:5F:D3:84:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/cc83aa8e-e626-37fa-bf12-55a339f11697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:e6:db:85:2f:d0:f4:82:27:c6:14:9c:09:80:93:a2:bc:
         9f:7e:67:99:2f:0e:b9:23:d2:c4:92:f9:79:07:b7:a4:7b:f7:
         ad:6b:37:0e:07:50:68:1a:58:55:d3:fd:b9:78:91:7d:d1:ad:
         f4:1b:01:ba:2d:0b:67:84:2a:b5:d9:b4:a3:e8:86:a2:d4:15:
         d4:31:d4:32:cd:3d:e0:a1:e7:ae:0c:78:88:33:b8:97:ac:c5:
         53:30:93:c1:ea:19:ad:fe:ce:cf:4a:16:a7:25:24:84:10:47:
         c8:f4:03:fd:5c:76:31:a7:47:8a:65:3b:6f:d9:c5:22:e4:ca:
         6e:33:e9:06:f3:56:a9:17:e4:3e:b2:f5:62:61:9b:30:c7:fe:
         67:b3:33:22:2d:0e:ee:f3:b0:53:43:ed:5c:73:cc:22:4d:38:
         89:4e:c2:b9:d8:d6:56:15:3e:b1:c7:49:3e:6b:98:cd:dd:5d:
         44:3f:b3:5a:5d:1a:7b:7c:04:69:c4:1e:27:b5:bd:fe:ce:36:
         ce:1e:c0:2a:ba:0a:c9:df:6d:d7:df:f4:08:4d:1c:a0:af:c6:
         84:82:d0:bf:56:c9:7e:6c:9f:84:de:cb:59:5c:ba:74:45:24:
         2b:37:eb:a0:5b:c8:c2:6b:45:32:cc:64:85:30:e6:d7:3d:8e:
         e7:0b:0c:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27MdHB/in9UZsKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm
ZDFjMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YzYwMDlhODEtNWQ2My00NzBhLTg3NWUtMzM2ZjkwYzUzZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbHKfUaEGpaHJ2UfSMIinUVT3XC/DIgccRpV
ul/AJXP/fweTuHapVFTn4pTLuiRruNtfUGSiMnBuofGmBydUhNGcnfjVdhm9Nib9
SSUHZ4OkUHaRex7tD/N36A9qNbS2mSwK4K2QJNExwG9rfTUB1ID080MVYwe0+fW1
FwGjgbzQiyF1IDyf3IcDdCg4sslvOWK0udRotPJMp5jy4NfrMGs6ufCqmkHAV50U
p5csdtdcikXjfUl1jmWcnJhqynTnPN/tIW709EJPKMqYHpnVVCTvhluohNd1xHSZ
coZC+FUDGqT25GyCuYcqQz1NaD7rfohlAjJuQJQCxZTURPX1AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEuJ9eqQk6/ibk87KxEyVxf04RjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi
YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvY2M4M2FhOGUtZTYyNi0z
N2ZhLWJmMTItNTVhMzM5ZjExNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0
YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh
ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm
MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8G5tuFL9D0gifGFJwJgJOivJ9+Z5kvDrkj0sSS+XkHt6R7961rNw4H
UGgaWFXT/bl4kX3RrfQbAbotC2eEKrXZtKPohqLUFdQx1DLNPeCh564MeIgzuJes
xVMwk8HqGa3+zs9KFqclJIQQR8j0A/1cdjGnR4plO2/ZxSLkym4z6QbzVqkX5D6y
9WJhmzDH/mezMyItDu7zsFND7VxzzCJNOIlOwrnY1lYVPrHHST5rmM3dXUQ/s1pd
Gnt8BGnEHie1vf7ONs4ewCq6Csnfbdff9AhNHKCvxoSC0L9WyX5sn4Tey1lcunRF
JCs366BbyMJrRTLMZIUw5tc9jucLDNQ=
-----END CERTIFICATE-----
Generated at Fri Feb 27 00:43:42 2026 by rpki-client