Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
File:                     f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa (raw, json)
Hash identifier:          n/jzvSFwxgDyVS0WD2C+0vuRdgS+kJ9WQ7j4kBUHXGQ=
Subject key identifier:   88:79:A3:B5:3D:5B:7E:27:65:17:54:56:7F:47:B1:B5:F3:CC:E6:AE
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584CE79218E8D9CCF4F7949A9382
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     210110
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:18:e8:d9:cc:f4:f7:94:9a:93:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=01243fea-10aa-4bfe-8291-944ad0f395ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:78:af:37:27:74:38:58:bc:e3:47:ed:f3:
                    24:61:5b:a0:fa:67:0f:d9:05:88:0c:70:b6:68:7e:
                    41:52:c0:39:6b:4f:6e:10:ab:07:4e:0b:b7:fe:c1:
                    24:f6:68:ff:c7:0b:14:d7:88:24:ef:f4:9b:ea:d6:
                    d5:e1:53:db:cf:f4:11:08:5f:03:06:96:6f:db:26:
                    de:b9:14:e4:d0:95:0f:bb:5e:82:c1:96:76:eb:60:
                    8a:20:06:18:2d:16:f5:c5:8e:33:e3:ff:71:e1:22:
                    59:a1:15:de:eb:44:8c:4a:4c:47:92:42:eb:08:39:
                    7c:e9:e2:c5:46:93:5b:e4:0f:0c:9f:35:ed:44:d1:
                    bc:49:01:c1:e2:b5:8e:ad:a3:0f:c9:3c:ff:2c:66:
                    b5:a0:6f:25:db:e2:ce:63:f5:2c:60:c0:16:a0:4d:
                    f1:f1:00:ba:fb:5c:66:9a:f9:97:2a:26:78:67:7c:
                    94:58:b6:a2:f5:cb:8c:c8:49:3c:96:3f:1e:cb:44:
                    bf:7e:64:ff:16:bd:0d:aa:1c:2f:3c:b0:98:11:15:
                    c2:fb:77:c9:ff:74:02:23:41:bd:f5:60:ed:0b:2b:
                    48:ac:3e:66:fb:23:52:dc:24:01:a9:ed:e4:5f:8f:
                    15:0d:85:49:50:37:ca:8b:8e:65:bf:62:1b:0b:07:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:A3:B5:3D:5B:7E:27:65:17:54:56:7F:47:B1:B5:F3:CC:E6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e6:8a:cd:b8:80:aa:55:f0:5c:56:79:eb:08:55:30:92:9b:
         bd:30:f6:63:d7:4b:24:32:95:52:d7:9e:67:90:b4:cd:d3:c3:
         78:61:13:a6:9f:29:11:ab:ee:21:46:48:b5:ee:89:ea:4b:ad:
         f2:04:d5:a4:25:9c:84:e2:8b:5c:a7:3e:59:88:a6:0d:e2:42:
         f6:48:09:ac:bb:2e:e8:4a:36:0a:64:64:a0:24:da:53:76:41:
         90:71:42:c4:10:0a:10:62:ec:15:6b:41:a3:ab:5c:55:d1:77:
         bd:8f:df:97:9e:31:d2:3e:c9:4c:3d:67:58:84:21:fc:16:d4:
         af:01:e9:13:66:8e:ee:dc:ad:82:95:b0:eb:79:f8:df:18:8a:
         82:58:6e:f8:7a:be:f9:38:79:0e:3b:49:bf:75:db:41:f4:60:
         fa:81:be:f2:38:e3:ed:39:8d:5d:a8:a4:f3:78:8e:a6:74:9a:
         18:64:84:a9:d5:f0:23:11:ee:a5:e5:d3:82:71:68:9a:29:e5:
         8d:83:f0:31:cc:9c:c2:91:b7:a3:b8:30:14:33:c8:5a:73:d3:
         e6:6f:fb:66:01:a9:a9:b2:ca:0c:86:79:19:b6:1f:c0:04:d0:
         25:f8:78:63:f6:29:a4:98:39:e9:49:14:44:52:1d:34:45:00:
         16:12:79:ce
-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEznkhjo2cz095Sak4IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1
ZTM5MB4XDTI2MDIxODE0MDA0MVoXDTI2MDUxOTEzMDA0MVowLzEtMCsGA1UEAxMk
MDEyNDNmZWEtMTBhYS00YmZlLTgyOTEtOTQ0YWQwZjM5NWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgt4rzcndDhYvONH7fMkYVug+mcP2QWIDHC2
aH5BUsA5a09uEKsHTgu3/sEk9mj/xwsU14gk7/Sb6tbV4VPbz/QRCF8DBpZv2ybe
uRTk0JUPu16CwZZ262CKIAYYLRb1xY4z4/9x4SJZoRXe60SMSkxHkkLrCDl86eLF
RpNb5A8MnzXtRNG8SQHB4rWOraMPyTz/LGa1oG8l2+LOY/UsYMAWoE3x8QC6+1xm
mvmXKiZ4Z3yUWLai9cuMyEk8lj8ey0S/fmT/Fr0NqhwvPLCYERXC+3fJ/3QCI0G9
9WDtCytIrD5m+yNS3CQBqe3kX48VDYVJUDfKi45lv2IbCwfl9wIDAQABo4IDvDCC
A7gwHQYDVR0OBBYEFIh5o7U9W34nZRdUVn9HsbXzzOauMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx
ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvZjYyZTFhZTItZmZmYi0z
M2JlLTllYmQtNzQ3M2I4MDY2ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi
YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1
NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky
OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME
BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME
BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME
AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQBB5orNuICqVfBcVnnrCFUwkpu9MPZj10skMpVS155nkLTN
08N4YROmnykRq+4hRki17onqS63yBNWkJZyE4otcpz5ZiKYN4kL2SAmsuy7oSjYK
ZGSgJNpTdkGQcULEEAoQYuwVa0Gjq1xV0Xe9j9+XnjHSPslMPWdYhCH8FtSvAekT
Zo7u3K2ClbDrefjfGIqCWG74er75OHkOO0m/ddtB9GD6gb7yOOPtOY1dqKTzeI6m
dJoYZISp1fAjEe6l5dOCcWiaKeWNg/AxzJzCkbejuDAUM8hac9Pmb/tmAampssoM
hnkZth/ABNAl+Hhj9imkmDnpSRREUh00RQAWEnnO
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:19:41 2026 by rpki-client