Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/7506543d-1ee0-37ed-8919-e21e6d76d916.roa
File:                     7506543d-1ee0-37ed-8919-e21e6d76d916.roa (raw, json)
Hash identifier:          OKCgA9qmZRFj59i46kuhrTv2dSsIbSbCiR5ZAuKeggI=
Subject key identifier:   27:C9:97:E2:FB:CB:08:15:5C:44:8D:9F:DF:5B:54:57:0A:9A:E7:C6
Certificate issuer:       /CN=db34d8ad-c64f-4fe0-a095-112a8e656514
Certificate serial:       010D0C9F4328584CD8373F25FE299D7C8356EA00
Authority key identifier: 2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/7506543d-1ee0-37ed-8919-e21e6d76d916.roa
Signing time:             Fri 13 Feb 2026 02:00:31 +0000
ROA not before:           Fri 13 Feb 2026 02:00:31 +0000
ROA not after:            Thu 14 May 2026 01:00:31 +0000
asID:                     41625
IP address blocks:        204.225.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:37:3f:25:fe:29:9d:7c:83:56:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db34d8ad-c64f-4fe0-a095-112a8e656514
        Validity
            Not Before: Feb 13 02:00:31 2026 GMT
            Not After : May 14 01:00:31 2026 GMT
        Subject: CN=7dd72dff-0996-4282-a607-f3c05f4bcd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:14:e2:dc:e9:c4:bd:bb:e7:d5:7e:67:12:
                    2e:3f:6c:21:45:14:d1:81:fd:65:60:81:7f:7a:89:
                    b5:c0:58:34:2f:74:41:16:b4:39:16:50:8c:e8:c6:
                    86:f3:2c:38:e8:b7:47:41:9a:c4:cd:4b:d0:a7:a5:
                    66:35:a4:bf:02:cc:be:a5:a9:79:39:ca:7a:91:8c:
                    63:11:49:fa:51:df:ad:db:f5:b2:de:f5:d6:6f:12:
                    a1:bd:d6:46:53:4e:c2:7d:25:0d:7e:7f:8e:e8:e0:
                    87:04:b8:b2:73:ce:8f:c9:a0:ad:b8:24:60:62:08:
                    fc:18:9b:49:c0:70:bf:76:d6:f3:9f:04:1f:cb:98:
                    50:d5:0f:8a:a5:f8:60:de:ad:ae:c8:6a:4c:9f:94:
                    46:29:8b:ed:d3:47:fd:16:c9:78:8a:a7:17:fc:95:
                    87:70:71:8d:ae:5a:c7:ee:69:4f:2b:b5:01:a6:26:
                    20:5b:eb:3e:9a:4a:42:41:8b:a6:7f:cb:1e:88:6b:
                    a1:0d:30:27:43:13:8d:98:2f:51:bb:be:dc:d4:cd:
                    95:94:5f:15:0d:36:0d:11:49:4c:86:47:b4:7a:fa:
                    8d:05:e9:8d:44:6e:46:33:26:e2:fd:21:7f:fb:b8:
                    cf:98:e0:e6:74:c8:b1:31:c6:dc:d8:31:35:f7:49:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C9:97:E2:FB:CB:08:15:5C:44:8D:9F:DF:5B:54:57:0A:9A:E7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/7506543d-1ee0-37ed-8919-e21e6d76d916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.crl

            X509v3 Authority Key Identifier:
                keyid:2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:97:e8:95:80:67:56:ea:aa:c9:64:9e:25:4f:1e:b5:c2:13:
         ac:95:6c:19:42:e2:bb:e7:3c:aa:ef:9b:67:db:44:88:cf:0a:
         f1:c3:c4:19:8a:75:ae:60:5a:d7:e0:1e:ee:99:52:21:d8:9f:
         ff:68:01:a3:0a:e8:04:8f:cf:d3:3f:c1:f8:72:73:c2:06:6d:
         9f:24:a6:78:c4:7f:b4:6b:cf:b9:6d:17:46:b7:ca:a8:83:9a:
         68:9f:52:cf:ba:ee:64:45:23:a0:8a:00:7b:ba:6d:bd:18:d5:
         34:42:9a:d8:0a:82:da:93:9f:27:c1:67:1c:18:46:06:47:cd:
         0c:10:d8:f6:fc:45:3d:18:e6:2c:cf:50:b8:8a:ae:38:c0:ee:
         e5:00:03:ba:dc:88:ab:22:47:e8:f6:0c:83:78:09:43:16:e3:
         2d:69:4f:ce:db:19:c7:9d:23:fc:bc:61:cb:dd:fc:a0:81:4b:
         20:d7:f7:ae:4e:c2:a2:02:e4:77:63:c6:57:8d:34:86:c2:4e:
         4a:bd:0b:fe:e5:cc:41:7f:62:c8:54:21:82:cb:87:5e:86:2d:
         f4:70:f9:b1:ae:e7:08:36:05:73:77:8e:7a:88:b1:95:76:c7:
         e5:32:f4:4d:75:1f:bb:86:09:55:4a:be:9f:0c:58:11:ac:08:
         87:1c:e3:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzYNz8l/imdfINW6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIzNGQ4YWQtYzY0Zi00ZmUwLWEwOTUtMTEyYThlNjU2
NTE0MB4XDTI2MDIxMzAyMDAzMVoXDTI2MDUxNDAxMDAzMVowLzEtMCsGA1UEAxMk
N2RkNzJkZmYtMDk5Ni00MjgyLWE2MDctZjNjMDVmNGJjZDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWgU4tzpxL2759V+ZxIuP2whRRTRgf1lYIF/
eom1wFg0L3RBFrQ5FlCM6MaG8yw46LdHQZrEzUvQp6VmNaS/Asy+pal5Ocp6kYxj
EUn6Ud+t2/Wy3vXWbxKhvdZGU07CfSUNfn+O6OCHBLiyc86PyaCtuCRgYgj8GJtJ
wHC/dtbznwQfy5hQ1Q+Kpfhg3q2uyGpMn5RGKYvt00f9Fsl4iqcX/JWHcHGNrlrH
7mlPK7UBpiYgW+s+mkpCQYumf8seiGuhDTAnQxONmC9Ru77c1M2VlF8VDTYNEUlM
hke0evqNBemNRG5GMybi/SF/+7jPmODmdMixMcbc2DE190kdNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfJl+L7ywgVXESNn99bVFcKmufGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM0
ZDhhZC1jNjRmLTRmZTAtYTA5NS0xMTJhOGU2NTY1MTQvNzUwNjU0M2QtMWVlMC0z
N2VkLTg5MTktZTIxZTZkNzZkOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGIzNGQ4YWQtYzY0Zi00ZmUwLWEw
OTUtMTEyYThlNjU2NTE0L2RiMzRkOGFkLWM2NGYtNGZlMC1hMDk1LTExMmE4ZTY1
NjUxNC5jcmwwHwYDVR0jBBgwFoAUL5SPH21MEJAz612r3/GUTng//1MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM0ZDhhZC1jNjRmLTRmZTAtYTA5NS0xMTJh
OGU2NTY1MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOHfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGX6JWAZ1bqqslkniVPHrXCE6yVbBlC4rvnPKrvm2fbRIjPCvHDxBmK
da5gWtfgHu6ZUiHYn/9oAaMK6ASPz9M/wfhyc8IGbZ8kpnjEf7Rrz7ltF0a3yqiD
mmifUs+67mRFI6CKAHu6bb0Y1TRCmtgKgtqTnyfBZxwYRgZHzQwQ2Pb8RT0Y5izP
ULiKrjjA7uUAA7rciKsiR+j2DIN4CUMW4y1pT87bGcedI/y8Ycvd/KCBSyDX965O
wqIC5HdjxleNNIbCTkq9C/7lzEF/YshUIYLLh16GLfRw+bGu5wg2BXN3jnqIsZV2
x+Uy9E11H7uGCVVKvp8MWBGsCIcc49Q=
-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:26 2026 by rpki-client