Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a/bebc8a1d-f56e-32ef-b068-c35cd7c5180d.roa
File:                     bebc8a1d-f56e-32ef-b068-c35cd7c5180d.roa (raw, json)
Hash identifier:          BtzKAoUK6KyvfaAf7HeTUD4r6ECRb45Im4uAwiE1tZU=
Subject key identifier:   FE:07:CD:85:56:51:DC:9B:A2:83:A2:B0:4A:95:32:2B:D2:13:0E:35
Certificate issuer:       /CN=7c836d9c-aec2-4d48-b8bb-d16145f4a34a
Certificate serial:       010D0C9F4328584CF6ECC2269E4A58F6FCB25940
Authority key identifier: 67:36:9F:6D:BA:E2:80:A5:1A:1A:52:53:54:D5:94:93:31:02:3C:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a/bebc8a1d-f56e-32ef-b068-c35cd7c5180d.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     399268
IP address blocks:        104.151.224.0/19 maxlen: 24
                          160.79.32.0/20 maxlen: 24
                          209.250.16.0/21 maxlen: 24
                          2606:2840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a/7c836d9c-aec2-4d48-b8bb-d16145f4a34a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a/7c836d9c-aec2-4d48-b8bb-d16145f4a34a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:c2:26:9e:4a:58:f6:fc:b2:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c836d9c-aec2-4d48-b8bb-d16145f4a34a
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=84d8f358-f2ad-4c09-8b5d-8332677e96d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:56:31:3e:71:6d:a8:9f:47:8a:d2:64:b2:
                    8a:d9:db:ac:f5:75:dc:40:b4:cc:7c:69:b1:69:b4:
                    8b:04:04:62:ed:0b:8b:a1:43:10:b3:ba:a9:36:42:
                    f3:1c:f6:97:ba:3a:4c:5a:25:ea:0c:ec:7e:94:c0:
                    01:90:e5:b8:51:50:0b:c9:d8:32:a4:04:02:98:ec:
                    5c:53:dc:0e:16:7a:f5:cc:2a:90:eb:e4:87:f6:36:
                    b5:b1:5b:e2:60:8f:ba:a1:29:f1:4e:77:23:ba:12:
                    93:2f:49:95:48:74:b8:8f:87:02:94:2c:16:67:0b:
                    5f:1c:25:30:0d:ef:5c:0d:25:3b:3a:35:ef:99:ae:
                    10:41:14:c6:d5:ed:cd:29:9b:b6:49:b1:5b:a9:a3:
                    02:af:52:54:80:58:41:38:fa:f1:49:d8:f8:2e:a8:
                    81:95:34:1f:0a:26:be:42:15:8d:31:67:f4:e9:41:
                    bc:85:b8:2e:88:64:3c:90:a4:55:d0:a3:3f:1f:69:
                    b0:e3:43:b3:57:29:18:f0:75:19:03:a3:34:ee:e3:
                    c7:b3:05:70:ec:d7:4e:d8:d7:b0:d3:c4:a8:e1:37:
                    70:9d:ca:43:c8:c8:2d:03:16:11:5b:5e:e4:42:46:
                    f1:9e:b7:39:93:c8:93:b8:68:ba:ab:43:dd:4c:dd:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:CD:85:56:51:DC:9B:A2:83:A2:B0:4A:95:32:2B:D2:13:0E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a/bebc8a1d-f56e-32ef-b068-c35cd7c5180d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a/7c836d9c-aec2-4d48-b8bb-d16145f4a34a.crl

            X509v3 Authority Key Identifier:
                keyid:67:36:9F:6D:BA:E2:80:A5:1A:1A:52:53:54:D5:94:93:31:02:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7c836d9c-aec2-4d48-b8bb-d16145f4a34a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.151.224.0/19
                  160.79.32.0/20
                  209.250.16.0/21
                IPv6:
                  2606:2840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:07:2a:c2:e6:5a:9c:69:b3:f0:75:bd:05:28:8a:76:34:
         47:4c:dc:e5:63:5f:4e:7e:a1:5e:5e:f9:42:97:95:55:ab:69:
         5a:ee:ba:95:8b:07:51:b7:da:82:c9:44:ed:f4:3d:cf:cc:61:
         a3:77:29:5a:af:72:84:29:8b:4d:af:1f:50:c8:e4:1c:3b:bd:
         cc:f0:42:2a:31:91:ce:74:24:93:87:24:09:c5:df:55:d4:f8:
         dd:93:8b:04:7c:16:4f:54:4d:d5:76:8e:b7:00:0b:1b:4b:dd:
         cf:c1:0d:ff:2d:94:22:a1:48:d2:fa:4c:0c:e7:13:f2:73:f5:
         f0:89:6e:51:0d:c9:67:33:e4:3e:c9:6b:6d:9d:26:18:e0:b7:
         53:55:f6:a4:59:0b:4a:69:48:0e:ad:31:e1:25:6b:2e:fd:2a:
         50:f1:a7:87:4b:7f:56:9d:f6:0b:5f:6c:63:a9:80:9d:7f:f1:
         1e:14:74:11:90:7e:14:7f:9e:d8:a0:64:20:8c:2d:a2:31:b1:
         98:17:6e:97:7b:a5:dc:da:34:cf:32:fe:63:e1:c7:fe:62:b3:
         a6:6a:b6:a3:a1:ae:1c:bb:f1:c6:39:55:ce:2a:64:41:fb:ca:
         19:fa:c4:22:9e:47:20:ac:33:6e:6b:96:87:8c:3a:87:86:03:
         6e:69:0e:37
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEz27MImnkpY9vyyWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M4MzZkOWMtYWVjMi00ZDQ4LWI4YmItZDE2MTQ1ZjRh
MzRhMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ODRkOGYzNTgtZjJhZC00YzA5LThiNWQtODMzMjY3N2U5NmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiExWMT5xbaifR4rSZLKK2dus9XXcQLTMfGmx
abSLBARi7QuLoUMQs7qpNkLzHPaXujpMWiXqDOx+lMABkOW4UVALydgypAQCmOxc
U9wOFnr1zCqQ6+SH9ja1sVviYI+6oSnxTncjuhKTL0mVSHS4j4cClCwWZwtfHCUw
De9cDSU7OjXvma4QQRTG1e3NKZu2SbFbqaMCr1JUgFhBOPrxSdj4LqiBlTQfCia+
QhWNMWf06UG8hbguiGQ8kKRV0KM/H2mw40OzVykY8HUZA6M07uPHswVw7NdO2New
08So4TdwncpDyMgtAxYRW17kQkbxnrc5k8iTuGi6q0PdTN02RQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFP4HzYVWUdybooOisEqVMivSEw41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83Yzgz
NmQ5Yy1hZWMyLTRkNDgtYjhiYi1kMTYxNDVmNGEzNGEvYmViYzhhMWQtZjU2ZS0z
MmVmLWIwNjgtYzM1Y2Q3YzUxODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2M4MzZkOWMtYWVjMi00ZDQ4LWI4
YmItZDE2MTQ1ZjRhMzRhLzdjODM2ZDljLWFlYzItNGQ0OC1iOGJiLWQxNjE0NWY0
YTM0YS5jcmwwHwYDVR0jBBgwFoAUZzafbbrigKUaGlJTVNWUkzECPGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83YzgzNmQ5Yy1hZWMyLTRkNDgtYjhiYi1kMTYx
NDVmNGEzNGEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFaJfgAwQE
oE8gAwQD0foQMA0EAgACMAcDBQAmBihAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHvsByrC5lqcabPwdb0F
KIp2NEdM3OVjX05+oV5e+UKXlVWraVruupWLB1G32oLJRO30Pc/MYaN3KVqvcoQp
i02vH1DI5Bw7vczwQioxkc50JJOHJAnF31XU+N2TiwR8Fk9UTdV2jrcACxtL3c/B
Df8tlCKhSNL6TAznE/Jz9fCJblENyWcz5D7Ja22dJhjgt1NV9qRZC0ppSA6tMeEl
ay79KlDxp4dLf1ad9gtfbGOpgJ1/8R4UdBGQfhR/ntigZCCMLaIxsZgXbpd7pdza
NM8y/mPhx/5is6ZqtqOhrhy78cY5Vc4qZEH7yhn6xCKeRyCsM25rloeMOoeGA25p
Djc=
-----END CERTIFICATE-----
Generated at Thu Feb 26 22:50:58 2026 by rpki-client