Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
File:                     9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa (raw, json)
Hash identifier:          3L1XX5rVQuYZfzlEUZbPVUJw2QrTI1f6NvVU3gKlqDY=
Subject key identifier:   D8:5B:9F:12:64:5F:2F:B9:0F:5C:0C:B6:73:BB:78:F9:D4:74:4B:B5
Certificate issuer:       /CN=3905609c-39ed-4063-a3a8-68871c079747
Certificate serial:       010D0C9F4328584CCBA7556F58AE3F54F28F5C00
Authority key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        216.245.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:55:6f:58:ae:3f:54:f2:8f:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905609c-39ed-4063-a3a8-68871c079747
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=a708ec5a-380c-45bc-8619-0bf6870ae304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:02:0b:82:21:c1:be:4d:ce:f7:78:20:29:
                    5b:23:9c:28:95:c2:99:f2:27:c1:d8:0e:42:99:66:
                    75:17:79:2a:eb:7a:40:71:36:c0:54:85:19:4d:be:
                    47:c7:34:00:af:80:0e:1f:15:5f:68:44:f8:14:b6:
                    ce:2c:ae:70:cf:36:89:f1:fc:a3:51:04:5f:81:c2:
                    cb:19:47:ca:3f:fe:76:47:b8:6e:6c:92:61:06:ed:
                    d4:10:e6:9f:52:a2:48:72:ae:77:ab:ba:83:be:4c:
                    ab:b0:68:f7:93:04:9f:a2:b5:45:0b:64:3f:c0:77:
                    57:7c:5b:a2:9f:7c:34:f5:3a:7b:7b:8e:30:69:2c:
                    f1:4d:87:c7:10:7b:d2:95:a1:f9:75:ca:ab:ed:3c:
                    35:8b:bd:1c:a3:09:f4:1c:9f:67:c6:c2:04:49:db:
                    e8:96:70:fa:75:49:0b:e6:b5:26:16:cc:9c:31:62:
                    33:35:7d:ca:51:99:f9:31:5a:90:2f:6e:b9:dc:fe:
                    1e:0e:14:2b:4d:b0:ed:2c:32:b6:42:cb:64:9e:a2:
                    c1:2e:11:29:9b:64:6a:8d:c7:24:0c:3d:e1:4a:40:
                    17:86:3f:53:a1:e2:0e:48:0e:a9:73:c3:84:eb:e8:
                    0c:16:22:d7:50:65:0e:b2:3c:f9:fa:41:a6:59:ae:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5B:9F:12:64:5F:2F:B9:0F:5C:0C:B6:73:BB:78:F9:D4:74:4B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl

            X509v3 Authority Key Identifier:
                keyid:BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:70:37:41:84:73:9f:ee:09:c7:c8:7f:51:a2:e3:21:bf:
         73:0d:06:dd:50:c0:51:b1:93:6a:aa:d2:c2:7b:5c:9e:61:e6:
         e8:90:e4:5f:93:ad:b0:0d:2b:1b:ce:1e:1c:1c:7d:fd:7c:4d:
         ec:30:45:ec:46:5b:ba:5e:4d:7c:c6:db:9a:fc:0a:ee:25:51:
         91:6e:87:d2:01:32:65:ef:65:13:95:de:9a:d5:0e:a4:0f:06:
         14:14:be:ef:5c:76:77:88:94:ac:48:8c:b9:c4:8e:e5:2d:e3:
         91:0a:22:f1:51:2b:15:e4:19:2d:19:65:01:cf:e8:13:28:0f:
         a5:78:02:58:7f:0e:b3:27:67:92:58:06:21:04:4f:0f:17:5f:
         b8:1b:7e:41:ba:94:30:d6:e6:a8:c0:b8:7b:3f:9a:0d:4d:2b:
         dc:7e:0c:91:2f:3c:76:48:e7:9e:48:24:9e:22:3a:25:a7:42:
         59:2c:b9:6b:95:de:13:5d:d1:df:58:ba:bd:f6:97:74:76:87:
         89:a0:f5:1d:d1:f1:2e:53:16:bb:72:03:eb:69:77:d2:81:0c:
         70:b5:71:1c:65:a3:05:a9:54:d7:6b:4b:c6:5d:f8:0b:ae:fd:
         bd:99:cc:08:de:c2:47:7d:a9:e5:6f:d1:0a:69:86:ec:f7:5e:
         7d:25:f2:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1VvWK4/VPKPXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwNTYwOWMtMzllZC00MDYzLWEzYTgtNjg4NzFjMDc5
NzQ3MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
YTcwOGVjNWEtMzgwYy00NWJjLTg2MTktMGJmNjg3MGFlMzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq4CC4Ihwb5Nzvd4IClbI5wolcKZ8ifB2A5C
mWZ1F3kq63pAcTbAVIUZTb5HxzQAr4AOHxVfaET4FLbOLK5wzzaJ8fyjUQRfgcLL
GUfKP/52R7hubJJhBu3UEOafUqJIcq53q7qDvkyrsGj3kwSforVFC2Q/wHdXfFui
n3w09Tp7e44waSzxTYfHEHvSlaH5dcqr7Tw1i70cown0HJ9nxsIESdvolnD6dUkL
5rUmFsycMWIzNX3KUZn5MVqQL2653P4eDhQrTbDtLDK2QstknqLBLhEpm2Rqjcck
DD3hSkAXhj9ToeIOSA6pc8OE6+gMFiLXUGUOsjz5+kGmWa7clwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhbnxJkXy+5D1wMtnO7ePnUdEu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTA1
NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMwNzk3NDcvOWUxMzhmM2EtNjI2OS0z
OTg1LWJhOTEtMWVmM2U2YTdlNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzkwNTYwOWMtMzllZC00MDYzLWEz
YTgtNjg4NzFjMDc5NzQ3LzM5MDU2MDljLTM5ZWQtNDA2My1hM2E4LTY4ODcxYzA3
OTc0Ny5jcmwwHwYDVR0jBBgwFoAUurzxCk+lqgiH4f4d4fQk8z6GNdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3
MWMwNzk3NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5zcDdBhHOf7gnHyH9RouMhv3MNBt1QwFGxk2qq0sJ7XJ5h5uiQ5F+T
rbANKxvOHhwcff18TewwRexGW7peTXzG25r8Cu4lUZFuh9IBMmXvZROV3prVDqQP
BhQUvu9cdneIlKxIjLnEjuUt45EKIvFRKxXkGS0ZZQHP6BMoD6V4Alh/DrMnZ5JY
BiEETw8XX7gbfkG6lDDW5qjAuHs/mg1NK9x+DJEvPHZI555IJJ4iOiWnQlksuWuV
3hNd0d9Yur32l3R2h4mg9R3R8S5TFrtyA+tpd9KBDHC1cRxlowWpVNdrS8Zd+Auu
/b2ZzAjewkd9qeVv0Qpphuz3Xn0l8sM=
-----END CERTIFICATE-----
Generated at Sat Feb 21 07:29:44 2026 by rpki-client