Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa
File:                     fb331c26-4b64-3e7c-99a6-74c206aa3828.roa (raw, json)
Hash identifier:          ZHn7/8qy/rCZnioryMTE9MqVLkzbLRq0YR9GGK67pOs=
Subject key identifier:   C2:1C:9C:69:E3:AB:73:35:78:A1:10:B7:86:AE:E0:50:24:ED:82:C5
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584C602BF028A624D3048B253E40
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     211440
IP address blocks:        65.110.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:f0:28:a6:24:d3:04:8b:25:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=b8e6797e-f2c0-4452-8dc9-27f26ee6030b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:72:6c:b3:50:32:f7:00:08:66:62:30:0c:
                    1d:59:4d:b7:7f:90:86:5b:37:dc:e8:0a:d6:e1:68:
                    25:53:57:c1:53:72:72:a4:cc:a3:58:fa:f0:a3:da:
                    74:bf:bd:38:d9:4e:9b:ab:55:d3:e4:77:a2:de:5f:
                    fc:8b:9e:12:d4:7f:9f:22:c2:3c:45:05:fa:a4:94:
                    c8:c9:c3:4a:de:b9:ac:6d:3e:32:9e:eb:e2:94:68:
                    7b:1d:42:fa:0f:19:5c:e7:68:aa:33:b6:fb:c8:2a:
                    fd:63:a4:b3:13:a8:11:24:c7:11:03:59:b7:b6:1f:
                    7b:cd:02:37:43:0b:77:9b:6c:c4:c4:2e:e0:c0:41:
                    7f:24:fa:8f:dd:71:73:17:f1:34:de:19:54:00:86:
                    c8:f7:0e:5b:90:41:99:3b:37:59:f0:da:d6:18:22:
                    2f:01:b1:de:ca:4e:12:e0:47:b5:5b:e7:a4:c1:49:
                    83:d0:a6:fc:85:fd:17:20:6e:9a:df:5d:8d:23:d0:
                    f8:7d:e4:4f:1f:d9:1d:be:7b:61:0a:79:08:05:ea:
                    62:fa:3e:1d:38:22:4b:e3:7a:cb:35:c4:47:75:ea:
                    ca:6e:c6:ca:d3:cf:a9:56:71:24:91:4e:44:05:40:
                    65:dd:62:5c:5a:44:2a:db:e8:5a:7b:93:21:4f:ed:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:9C:69:E3:AB:73:35:78:A1:10:B7:86:AE:E0:50:24:ED:82:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:5a:e7:f2:bd:a0:79:85:d3:87:d3:cb:37:ce:e5:5a:81:
         6f:61:60:6c:94:13:95:d2:00:6d:6b:ca:ad:95:b2:94:d3:ad:
         06:4a:7b:40:67:c2:d2:f2:3a:e0:4a:ab:f0:70:30:d4:dd:6c:
         81:d5:89:61:cf:32:b5:7e:34:37:5d:1f:ab:a3:e5:d6:4a:b7:
         74:ea:a8:27:8f:ff:c1:e4:fc:80:47:4d:5a:59:90:cf:aa:44:
         3b:96:48:ec:38:1a:90:e9:33:5e:9a:10:d5:82:2d:02:44:17:
         88:c5:0d:30:e9:12:03:e5:71:12:af:3c:2e:ae:6c:f5:46:f0:
         30:bf:ea:61:20:c4:84:1b:90:64:62:22:d1:22:5c:05:b2:8e:
         a5:1f:98:97:33:4f:a8:5e:e1:1d:b5:4d:51:44:0d:36:fa:a4:
         ed:df:58:df:f2:01:8a:1f:11:22:20:ee:77:24:9c:a2:54:09:
         63:bc:47:8d:c7:be:44:bd:71:a3:56:03:26:ea:e3:7d:95:5e:
         62:af:6f:b9:54:c2:74:3e:5a:05:08:e3:15:08:9d:3a:1c:e3:
         aa:f6:07:89:de:50:fc:d8:0a:a4:ad:95:14:2e:f8:b8:6e:c0:
         22:2f:4a:ee:e9:7e:21:fa:09:8b:8a:62:bf:49:77:97:50:91:
         c0:fc:02:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExgK/AopiTTBIslPkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDEwMTAyMDAzMVoXDTI2MDQwMTAxMDAzMVowLzEtMCsGA1UEAxMk
YjhlNjc5N2UtZjJjMC00NDUyLThkYzktMjdmMjZlZTYwMzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BBybLNQMvcACGZiMAwdWU23f5CGWzfc6ArW
4WglU1fBU3JypMyjWPrwo9p0v7042U6bq1XT5Hei3l/8i54S1H+fIsI8RQX6pJTI
ycNK3rmsbT4ynuvilGh7HUL6Dxlc52iqM7b7yCr9Y6SzE6gRJMcRA1m3th97zQI3
Qwt3m2zExC7gwEF/JPqP3XFzF/E03hlUAIbI9w5bkEGZOzdZ8NrWGCIvAbHeyk4S
4Ee1W+ekwUmD0Kb8hf0XIG6a312NI9D4feRPH9kdvnthCnkIBepi+j4dOCJL43rL
NcRHderKbsbK08+pVnEkkU5EBUBl3WJcWkQq2+hae5MhT+0VNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIcnGnjq3M1eKEQt4au4FAk7YLFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvZmIzMzFjMjYtNGI2NC0z
ZTdjLTk5YTYtNzRjMjA2YWEzODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLCWufyvaB5hdOH08s3zuVagW9hYGyUE5XSAG1ryq2VspTTrQZKe0Bn
wtLyOuBKq/BwMNTdbIHViWHPMrV+NDddH6uj5dZKt3TqqCeP/8Hk/IBHTVpZkM+q
RDuWSOw4GpDpM16aENWCLQJEF4jFDTDpEgPlcRKvPC6ubPVG8DC/6mEgxIQbkGRi
ItEiXAWyjqUfmJczT6he4R21TVFEDTb6pO3fWN/yAYofESIg7ncknKJUCWO8R43H
vkS9caNWAybq432VXmKvb7lUwnQ+WgUI4xUInToc46r2B4neUPzYCqStlRQu+Lhu
wCIvSu7pfiH6CYuKYr9Jd5dQkcD8AiE=
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:27:39 2026 by rpki-client