Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ecdb9c2-558b-366d-9b92-a6dc9192e94d.roa
File:                     1ecdb9c2-558b-366d-9b92-a6dc9192e94d.roa (raw, json)
Hash identifier:          hnUcOkc8PzULpU25Dv9D0WN3yh98q4kcJNvqU2sIXdA=
Subject key identifier:   CE:AA:27:22:4A:21:48:C1:E4:5D:6D:B1:5D:49:35:75:CC:20:5E:3B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF4F373D9D07639460FD28740
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ecdb9c2-558b-366d-9b92-a6dc9192e94d.roa
Signing time:             Mon 23 Feb 2026 09:02:24 +0000
ROA not before:           Mon 23 Feb 2026 09:02:24 +0000
ROA not after:            Sun 24 May 2026 08:02:24 +0000
asID:                     53397
IP address blocks:        64.51.236.0/22 maxlen: 22
                          66.93.100.0/22 maxlen: 22
                          66.93.104.0/22 maxlen: 22
                          66.93.196.0/22 maxlen: 22
                          66.93.200.0/22 maxlen: 22
                          66.93.216.0/22 maxlen: 22
                          66.227.32.0/21 maxlen: 21
                          216.132.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:f3:73:d9:d0:76:39:46:0f:d2:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 23 09:02:24 2026 GMT
            Not After : May 24 08:02:24 2026 GMT
        Subject: CN=144d4a92-38c6-4087-964f-a4e2146e3f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:c5:47:29:71:af:6f:03:f6:25:e3:ed:b1:
                    33:af:b5:25:16:bd:13:c1:d5:15:66:a2:6b:e2:cd:
                    78:a2:4d:0c:57:74:be:f7:cf:85:2d:5a:4e:9d:93:
                    90:35:94:6b:2c:6a:62:d1:7e:94:e8:74:c5:c9:a2:
                    c4:ba:79:98:c0:28:14:96:ae:0e:fc:8b:ad:ca:ab:
                    b7:16:0d:ea:66:ff:7a:7b:20:c9:d8:d1:60:a8:73:
                    a1:66:33:81:7c:ca:47:79:c6:56:0b:9b:3b:1f:64:
                    7c:21:d8:f2:eb:ed:4b:a5:29:a8:ca:73:39:04:3d:
                    f3:e6:d3:83:02:b6:bf:0b:fe:dd:d1:f2:d7:bf:fd:
                    bc:36:f5:17:c7:8f:0c:46:a9:93:2a:cd:6c:6e:13:
                    83:ed:af:00:d8:83:04:f6:f7:c9:af:09:1d:7d:6a:
                    17:31:8f:27:13:83:b4:09:0d:9e:be:91:17:f7:ba:
                    c5:6e:8d:81:b0:7c:1f:64:1b:56:24:ac:ed:76:bc:
                    7a:55:25:13:84:2d:ed:06:5f:40:a7:8f:dc:ab:ee:
                    06:2a:6d:4f:68:ed:de:ea:63:1b:39:98:b3:1c:51:
                    6e:6f:bb:1d:00:ae:46:4b:0a:8c:1a:75:73:ae:a7:
                    d3:7f:5b:4c:dd:31:f4:e8:e6:2d:f2:20:a8:66:7f:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:27:22:4A:21:48:C1:E4:5D:6D:B1:5D:49:35:75:CC:20:5E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ecdb9c2-558b-366d-9b92-a6dc9192e94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.51.236.0/22
                  66.93.100.0-66.93.107.255
                  66.93.196.0-66.93.203.255
                  66.93.216.0/22
                  66.227.32.0/21
                  216.132.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:88:aa:d3:5f:8a:9d:3e:69:6f:39:63:ed:f0:45:56:85:98:
         3e:25:42:5b:23:fb:b5:41:bf:79:01:41:5b:b0:24:f9:6a:de:
         e5:ca:90:d9:e5:ab:b8:b0:fb:91:d4:68:55:cb:e4:9f:83:df:
         ef:28:47:34:5c:9a:65:8f:47:78:2b:07:47:3f:65:2c:2e:de:
         c8:30:c9:aa:c2:35:5b:42:11:f5:53:16:d6:c7:56:8c:f1:b4:
         58:ac:c6:f0:d6:81:c0:f8:b2:94:e7:64:d4:0b:73:79:3b:04:
         9a:86:c6:b4:f4:f4:bc:0b:da:ab:cd:73:69:ed:4d:9c:ad:2b:
         35:11:66:11:b8:39:67:27:de:6c:8b:39:bc:27:d2:29:bf:6d:
         2f:70:46:f9:15:ba:a4:8d:02:63:40:57:89:c2:83:0d:d0:cd:
         9e:6e:04:f5:af:80:e2:45:2c:d5:4a:25:a1:46:82:9e:bc:26:
         b3:e2:12:c5:88:c5:7a:46:db:ae:19:1b:2a:2c:4e:d6:31:cc:
         1e:fe:9f:45:b2:5e:60:4b:90:bc:80:1b:e2:be:ab:a7:07:13:
         4d:de:fa:2d:20:07:ef:6f:56:2f:78:56:b3:3c:96:66:98:b5:
         02:1c:b5:7f:6e:ce:4f:aa:af:d7:7e:0c:a8:5b:70:b7:aa:b6:
         fd:1b:ea:df
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEz083PZ0HY5Rg/Sh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIyMzA5MDIyNFoXDTI2MDUyNDA4MDIyNFowLzEtMCsGA1UEAxMk
MTQ0ZDRhOTItMzhjNi00MDg3LTk2NGYtYTRlMjE0NmUzZjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TFRylxr28D9iXj7bEzr7UlFr0TwdUVZqJr
4s14ok0MV3S+98+FLVpOnZOQNZRrLGpi0X6U6HTFyaLEunmYwCgUlq4O/Iutyqu3
Fg3qZv96eyDJ2NFgqHOhZjOBfMpHecZWC5s7H2R8Idjy6+1LpSmoynM5BD3z5tOD
Ara/C/7d0fLXv/28NvUXx48MRqmTKs1sbhOD7a8A2IME9vfJrwkdfWoXMY8nE4O0
CQ2evpEX97rFbo2BsHwfZBtWJKztdrx6VSUThC3tBl9Ap4/cq+4GKm1PaO3e6mMb
OZizHFFub7sdAK5GSwqMGnVzrqfTf1tM3TH06OYt8iCoZn/ZiwIDAQABo4IDgzCC
A38wHQYDVR0OBBYEFM6qJyJKIUjB5F1tsV1JNXXMIF47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWVjZGI5YzItNTU4Yi0z
NjZkLTliOTItYTZkYzkxOTJlOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCQDPsMAwD
BAJCXWQDBAJCXWgwDAMEAkJdxAMEAkJdyAMEAkJd2AMEA0LjIAMEAtiE3DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQAliKrTX4qdPmlvOWPt8EVWhZg+JUJbI/u1Qb95AUFbsCT5at7lypDZ5au4
sPuR1GhVy+Sfg9/vKEc0XJplj0d4KwdHP2UsLt7IMMmqwjVbQhH1UxbWx1aM8bRY
rMbw1oHA+LKU52TUC3N5OwSahsa09PS8C9qrzXNp7U2crSs1EWYRuDlnJ95sizm8
J9Ipv20vcEb5FbqkjQJjQFeJwoMN0M2ebgT1r4DiRSzVSiWhRoKevCaz4hLFiMV6
RtuuGRsqLE7WMcwe/p9Fsl5gS5C8gBvivqunBxNN3votIAfvb1YveFazPJZmmLUC
HLV/bs5Pqq/XfgyoW3C3qrb9G+rf
-----END CERTIFICATE-----
Generated at Mon Feb 23 22:26:34 2026 by rpki-client