Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6d29df18-a550-3312-8987-3313f7e206ad.roa
File:                     6d29df18-a550-3312-8987-3313f7e206ad.roa (raw, json)
Hash identifier:          WhyrDwmaGOnXziRk45uh1DZSWgXQRaqD7jbRGWaiiCI=
Subject key identifier:   CB:CC:0B:6D:33:2C:99:8B:A6:A6:25:B6:F9:EA:40:D3:24:05:F1:E1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CEDB63A75FFE82F05A9B74D60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6d29df18-a550-3312-8987-3313f7e206ad.roa
Signing time:             Fri 20 Feb 2026 18:48:23 +0000
ROA not before:           Fri 20 Feb 2026 18:48:23 +0000
ROA not after:            Thu 21 May 2026 17:48:23 +0000
asID:                     834
IP address blocks:        209.137.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:b6:3a:75:ff:e8:2f:05:a9:b7:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 20 18:48:23 2026 GMT
            Not After : May 21 17:48:23 2026 GMT
        Subject: CN=25467993-896b-4e5c-a18f-d23ffef068f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:39:c5:3a:a0:7b:c1:b9:07:9e:04:5d:43:
                    e8:3f:14:04:f9:9f:9f:ef:5d:c8:c3:fa:d6:ec:c4:
                    a0:44:df:c4:49:b6:05:ec:0d:a3:2a:69:1b:89:c5:
                    3e:8a:45:f0:82:03:08:a3:5d:c4:e7:96:56:19:78:
                    8f:2f:e9:32:a6:47:d3:47:0c:b1:84:cd:ae:06:ba:
                    c6:58:9d:02:89:86:5c:88:ef:41:bb:ff:4e:3f:ce:
                    28:c1:b1:a7:5b:de:78:e8:e0:38:1d:f5:2d:92:b3:
                    af:b6:0f:11:04:30:ae:12:18:81:b2:a0:a6:ee:66:
                    93:7d:d4:bb:bc:db:3e:c2:d5:78:b6:9b:f0:76:b0:
                    d3:5d:b3:0c:61:b4:59:a1:ae:17:fd:a6:8a:ef:a9:
                    6c:f4:cf:05:93:51:e4:79:43:a7:16:e3:c4:32:24:
                    6b:b4:d0:4b:d8:42:19:6a:41:37:5d:45:72:3d:7d:
                    9f:d3:e0:f7:0e:2b:d0:3c:19:06:13:29:ea:45:3f:
                    d2:c2:b0:30:5e:4e:34:74:bd:b4:da:f2:56:af:86:
                    72:7c:a7:75:4e:7e:7e:ee:09:a0:28:58:bf:81:6e:
                    c2:c1:fb:10:d5:b8:6c:28:cc:75:64:00:25:4e:74:
                    89:e8:db:a7:6c:7f:d0:ea:d8:35:b3:20:15:fc:c8:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:0B:6D:33:2C:99:8B:A6:A6:25:B6:F9:EA:40:D3:24:05:F1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6d29df18-a550-3312-8987-3313f7e206ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.137.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:43:6b:42:3d:49:95:a6:cf:bb:9e:b5:24:fe:67:e7:76:
         9b:9d:af:5f:2e:23:1f:c0:b7:60:62:62:f4:35:9f:ed:9f:8f:
         39:23:66:28:8a:d0:7b:78:da:57:da:e3:29:81:5e:e0:db:3d:
         6c:d7:15:ea:5b:97:b2:a2:49:0d:f0:56:c7:f5:73:41:46:9e:
         24:06:9f:e1:89:8a:81:e2:77:69:c7:d2:fc:b1:f6:82:95:fa:
         28:12:06:ac:c9:cc:9d:94:e2:83:9f:d4:1e:e6:09:16:02:f4:
         6c:25:69:f9:e9:4a:68:bf:7b:20:2c:1c:4a:bf:88:1d:f6:b5:
         34:93:5a:f0:88:d2:ba:e2:c5:67:80:c8:b6:a6:ff:56:20:bb:
         12:0a:6b:07:28:7d:2f:26:3a:bc:a8:c5:c6:6b:85:10:b9:1a:
         c1:91:ef:14:4b:55:9f:17:c5:83:84:aa:7a:1c:94:71:8c:6f:
         bb:a7:53:8e:da:05:55:82:a1:95:0a:fe:9c:7b:c4:2c:c6:f8:
         fb:19:88:da:26:e2:78:f0:48:60:20:d5:ba:67:06:5e:45:a2:
         82:09:e6:52:88:7c:16:27:77:a4:40:dc:7a:bd:49:8e:c5:97:
         1c:e3:1b:c0:ae:9c:06:4a:00:cd:0f:55:20:de:a7:80:1a:24:
         db:66:44:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzttjp1/+gvBam3TWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDIyMDE4NDgyM1oXDTI2MDUyMTE3NDgyM1owLzEtMCsGA1UEAxMk
MjU0Njc5OTMtODk2Yi00ZTVjLWExOGYtZDIzZmZlZjA2OGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTg5xTqge8G5B54EXUPoPxQE+Z+f713Iw/rW
7MSgRN/ESbYF7A2jKmkbicU+ikXwggMIo13E55ZWGXiPL+kypkfTRwyxhM2uBrrG
WJ0CiYZciO9Bu/9OP84owbGnW9546OA4HfUtkrOvtg8RBDCuEhiBsqCm7maTfdS7
vNs+wtV4tpvwdrDTXbMMYbRZoa4X/aaK76ls9M8Fk1HkeUOnFuPEMiRrtNBL2EIZ
akE3XUVyPX2f0+D3DivQPBkGEynqRT/SwrAwXk40dL202vJWr4ZyfKd1Tn5+7gmg
KFi/gW7CwfsQ1bhsKMx1ZAAlTnSJ6NunbH/Q6tg1syAV/Mh71QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvMC20zLJmLpqYltvnqQNMkBfHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNmQyOWRmMTgtYTU1MC0z
MzEyLTg5ODctMzMxM2Y3ZTIwNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ym/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7DQ2tCPUmVps+7nrUk/mfndpudr18uIx/At2BiYvQ1n+2fjzkjZiiK
0Ht42lfa4ymBXuDbPWzXFepbl7KiSQ3wVsf1c0FGniQGn+GJioHid2nH0vyx9oKV
+igSBqzJzJ2U4oOf1B7mCRYC9GwlafnpSmi/eyAsHEq/iB32tTSTWvCI0rrixWeA
yLam/1YguxIKawcofS8mOryoxcZrhRC5GsGR7xRLVZ8XxYOEqnoclHGMb7unU47a
BVWCoZUK/px7xCzG+PsZiNom4njwSGAg1bpnBl5FooIJ5lKIfBYnd6RA3Hq9SY7F
lxzjG8CunAZKAM0PVSDep4AaJNtmRJw=
-----END CERTIFICATE-----
Generated at Fri Feb 20 23:33:54 2026 by rpki-client