Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/0c42e28c-591c-306f-b000-3c57491d2ec2.roa
File:                     0c42e28c-591c-306f-b000-3c57491d2ec2.roa (raw, json)
Hash identifier:          j2wy2s/nRGWvgo9B3474YX8Ge9gXRhSinKa6u19AHhQ=
Subject key identifier:   2D:25:D0:F0:AA:AB:F9:93:66:3E:92:60:F4:0A:0E:88:F3:57:08:48
Certificate issuer:       /CN=6b527806-37a2-4d56-8213-ee9130cd0038
Certificate serial:       010D0C9F4328584CE85A2C648296C41C3A7E382E
Authority key identifier: 07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/0c42e28c-591c-306f-b000-3c57491d2ec2.roa
Signing time:             Wed 18 Feb 2026 20:43:38 +0000
ROA not before:           Wed 18 Feb 2026 20:43:38 +0000
ROA not after:            Tue 19 May 2026 19:43:38 +0000
asID:                     400760
IP address blocks:        161.210.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:5a:2c:64:82:96:c4:1c:3a:7e:38:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b527806-37a2-4d56-8213-ee9130cd0038
        Validity
            Not Before: Feb 18 20:43:38 2026 GMT
            Not After : May 19 19:43:38 2026 GMT
        Subject: CN=96fc26eb-34d0-4973-85e8-b2411bb7302b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:07:19:fa:94:0c:64:74:66:36:85:3a:e8:
                    db:75:8c:c4:b7:a6:96:73:96:52:f1:1c:d3:46:f1:
                    f6:f9:3d:28:7c:84:2e:b3:25:a4:48:b3:39:19:2b:
                    1f:50:0a:83:e7:6a:d2:2b:a7:ed:b9:62:1f:9e:cc:
                    8d:12:8d:e3:00:0c:ff:dd:0f:e0:a3:40:c8:ff:ee:
                    3a:ef:4a:16:0b:e1:34:58:18:63:87:1b:0b:58:2a:
                    1f:25:33:e5:c6:2d:c2:cd:f5:5e:bd:0f:99:cb:c8:
                    b9:c3:ab:bf:ed:c9:46:b5:33:ab:bb:5d:83:ac:f8:
                    cf:c4:36:86:5f:6e:d8:74:b9:60:9f:87:b2:6e:fe:
                    ce:31:0b:df:24:99:da:bd:29:1a:bb:76:bf:ca:b3:
                    4b:c5:42:b6:0d:4a:5e:91:6f:f6:07:bf:c3:6b:88:
                    42:f0:d4:59:63:59:ba:55:10:37:ce:74:a6:7f:3a:
                    c6:3d:4c:17:f8:46:38:cc:67:40:7c:98:7a:b8:4c:
                    c2:0f:be:11:77:e1:04:60:07:56:61:c7:fc:28:1a:
                    83:5e:05:d5:e2:f1:ca:0f:cf:80:60:e3:09:9b:93:
                    82:60:b0:75:4d:b1:6c:8a:5b:f8:a2:31:09:d3:11:
                    6b:8a:e2:88:8c:37:41:ca:a7:fb:f6:09:b8:48:5a:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:25:D0:F0:AA:AB:F9:93:66:3E:92:60:F4:0A:0E:88:F3:57:08:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/0c42e28c-591c-306f-b000-3c57491d2ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl

            X509v3 Authority Key Identifier:
                keyid:07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.210.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:da:d2:29:f5:59:30:ba:74:9c:e9:9b:e2:65:f1:49:ad:
         50:a7:b4:de:7b:1d:26:19:08:82:63:7f:20:5f:a6:e0:1f:3a:
         56:df:3d:d7:74:1a:30:ee:2b:f0:21:3e:63:ba:15:1f:d0:0e:
         49:10:aa:78:e3:d1:d7:09:8b:c5:bf:36:f9:c0:88:ef:9e:d3:
         a4:57:f2:e7:ea:d3:1d:2a:c3:93:65:a9:89:d3:e6:9b:3b:3c:
         48:74:d9:f4:33:51:98:5f:70:b3:f7:97:b7:bf:70:d9:a4:5d:
         ef:d8:4b:e3:e1:46:06:4a:f9:3d:bc:5b:84:75:b6:e1:e1:04:
         0d:e6:7e:91:71:a5:ad:64:d3:a5:9c:f6:3d:21:a3:90:3f:c0:
         8e:50:8a:0e:c0:72:9f:26:29:41:c8:e7:61:89:7b:49:ed:18:
         d3:a4:c8:64:44:8f:2d:75:f3:2d:16:b1:eb:2a:68:4c:3a:59:
         6a:a1:43:d9:e3:43:ec:83:6e:7a:b8:66:18:a8:44:9d:12:7a:
         f8:55:16:e5:a5:b5:58:1e:c0:cd:d8:f0:6e:71:2c:5b:62:b6:
         5e:6c:06:30:39:d8:e3:82:a9:10:fd:3c:cf:5c:a8:55:95:9b:
         5a:ba:bf:4d:33:74:ac:b8:89:83:a7:c6:b0:ed:9b:a4:32:97:
         0a:9e:f7:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzoWixkgpbEHDp+OC4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI1Mjc4MDYtMzdhMi00ZDU2LTgyMTMtZWU5MTMwY2Qw
MDM4MB4XDTI2MDIxODIwNDMzOFoXDTI2MDUxOTE5NDMzOFowLzEtMCsGA1UEAxMk
OTZmYzI2ZWItMzRkMC00OTczLTg1ZTgtYjI0MTFiYjczMDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WQHGfqUDGR0ZjaFOujbdYzEt6aWc5ZS8RzT
RvH2+T0ofIQusyWkSLM5GSsfUAqD52rSK6ftuWIfnsyNEo3jAAz/3Q/go0DI/+46
70oWC+E0WBhjhxsLWCofJTPlxi3CzfVevQ+Zy8i5w6u/7clGtTOru12DrPjPxDaG
X27YdLlgn4eybv7OMQvfJJnavSkau3a/yrNLxUK2DUpekW/2B7/Da4hC8NRZY1m6
VRA3znSmfzrGPUwX+EY4zGdAfJh6uEzCD74Rd+EEYAdWYcf8KBqDXgXV4vHKD8+A
YOMJm5OCYLB1TbFsilv4ojEJ0xFriuKIjDdByqf79gm4SFrsNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0l0PCqq/mTZj6SYPQKDojzVwhIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjUy
NzgwNi0zN2EyLTRkNTYtODIxMy1lZTkxMzBjZDAwMzgvMGM0MmUyOGMtNTkxYy0z
MDZmLWIwMDAtM2M1NzQ5MWQyZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmI1Mjc4MDYtMzdhMi00ZDU2LTgy
MTMtZWU5MTMwY2QwMDM4LzZiNTI3ODA2LTM3YTItNGQ1Ni04MjEzLWVlOTEzMGNk
MDAzOC5jcmwwHwYDVR0jBBgwFoAUB8JkSF2n78lzUie/IosG73FBFrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjUyNzgwNi0zN2EyLTRkNTYtODIxMy1lZTkx
MzBjZDAwMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAodJaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuy2tIp9VkwunSc6ZviZfFJrVCntN57HSYZCIJjfyBfpuAfOlbfPdd0
GjDuK/AhPmO6FR/QDkkQqnjj0dcJi8W/NvnAiO+e06RX8ufq0x0qw5NlqYnT5ps7
PEh02fQzUZhfcLP3l7e/cNmkXe/YS+PhRgZK+T28W4R1tuHhBA3mfpFxpa1k06Wc
9j0ho5A/wI5Qig7Acp8mKUHI52GJe0ntGNOkyGREjy118y0WsesqaEw6WWqhQ9nj
Q+yDbnq4ZhioRJ0SevhVFuWltVgewM3Y8G5xLFtitl5sBjA52OOCqRD9PM9cqFWV
m1q6v00zdKy4iYOnxrDtm6Qylwqe9w4=
-----END CERTIFICATE-----
Generated at Thu Feb 26 22:49:25 2026 by rpki-client