Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/81bbead5-f9ea-3709-9a2b-3a8040330b0c.roa
File:                     81bbead5-f9ea-3709-9a2b-3a8040330b0c.roa (raw, json)
Hash identifier:          5xQ9S4Y9G4ZfNhav1ZQnHBsxFBvXjj8QizkPt2ZUi8Y=
Subject key identifier:   3D:46:E2:CE:A5:94:72:B0:DE:5D:92:58:C3:41:B1:A8:1D:6F:B4:62
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CD3E2FF9EDBB9592F588CEE00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/81bbead5-f9ea-3709-9a2b-3a8040330b0c.roa
Signing time:             Wed 11 Feb 2026 12:47:34 +0000
ROA not before:           Wed 11 Feb 2026 12:47:34 +0000
ROA not after:            Tue 12 May 2026 11:47:34 +0000
asID:                     20473
IP address blocks:        64.204.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d3:e2:ff:9e:db:b9:59:2f:58:8c:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 11 12:47:34 2026 GMT
            Not After : May 12 11:47:34 2026 GMT
        Subject: CN=1276410e-9e3a-4420-8613-5b64865e56a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:f5:09:b1:6c:14:d1:cf:8a:50:35:04:c4:
                    25:c8:56:ed:34:1d:50:b2:52:57:b4:7c:86:97:13:
                    e1:8a:da:21:b1:24:65:19:ab:ef:ea:61:2b:eb:61:
                    65:cd:46:80:12:3e:17:6e:a9:2e:98:4b:14:c3:e4:
                    f9:d2:80:cf:2a:a9:45:28:ed:d1:92:0e:0c:df:12:
                    2d:3b:f5:0f:10:52:09:51:d0:01:71:3d:3a:9a:89:
                    de:32:25:09:ba:95:9d:04:e2:53:1a:b6:2b:ea:0b:
                    e0:f2:ae:3c:84:48:a2:2a:34:e1:1c:cf:8d:93:3e:
                    e7:1f:d4:cf:9d:fd:e1:0e:a6:af:89:4b:f1:53:c7:
                    2f:29:a3:d7:f4:9c:1b:01:3c:71:fe:e9:87:e0:4c:
                    40:60:09:cb:59:fe:95:77:0f:93:f9:46:ec:d0:fb:
                    6b:1f:51:bd:71:55:44:e0:75:bd:29:e7:5b:cc:c6:
                    ed:17:4c:9b:ff:80:d1:c8:e9:02:ab:ac:52:1c:c4:
                    7f:4e:74:e5:b0:22:7a:b8:d1:39:d2:89:ab:de:ab:
                    80:6f:eb:38:fe:18:94:65:47:25:7c:fe:73:29:5e:
                    31:72:e0:c8:3a:a6:09:28:ec:97:bd:6f:24:f9:67:
                    b2:37:19:58:de:a6:d5:a3:b4:64:7c:ef:68:ed:6c:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:E2:CE:A5:94:72:B0:DE:5D:92:58:C3:41:B1:A8:1D:6F:B4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/81bbead5-f9ea-3709-9a2b-3a8040330b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:61:1b:6f:ec:e8:15:14:a2:15:36:38:23:42:bb:70:27:65:
         77:9c:4c:70:07:44:a5:98:f3:30:ac:7b:11:c4:de:47:3a:bd:
         d1:9a:4e:78:cb:a3:03:f3:e7:c0:e0:c2:34:40:6a:51:9c:e9:
         45:9a:4f:bb:95:ac:b5:11:70:02:cb:45:75:6b:12:74:18:34:
         46:0f:c9:4d:59:38:07:74:02:0e:5c:92:5f:d0:ec:44:b9:fb:
         ef:e5:48:02:f6:eb:49:36:18:3e:d7:0d:42:6d:d1:f7:bc:eb:
         6c:5d:f5:82:6e:aa:8c:c9:2b:87:d8:a1:c1:6f:38:88:4e:a4:
         a0:b8:bc:03:d4:11:34:e4:18:94:ac:eb:a9:60:af:c7:1d:c8:
         d1:d3:68:4a:78:d5:09:4d:6a:f0:bb:5c:c1:79:fa:f5:07:17:
         91:52:55:54:10:d4:1a:17:b1:60:62:22:89:d5:1a:15:6c:16:
         b8:65:73:5a:55:f5:90:48:32:0e:3f:b7:d4:44:77:e4:e7:9d:
         96:b1:3c:ee:f5:52:a0:01:aa:b8:61:7b:cf:86:ab:67:99:d0:
         8f:4d:44:56:4c:00:5b:89:d1:75:0e:f9:1b:d2:91:de:5f:11:
         ce:c7:9c:a6:d9:d4:e5:83:95:74:4d:ed:13:eb:2a:87:46:eb:
         31:6d:c1:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzT4v+e27lZL1iM7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIxMTEyNDczNFoXDTI2MDUxMjExNDczNFowLzEtMCsGA1UEAxMk
MTI3NjQxMGUtOWUzYS00NDIwLTg2MTMtNWI2NDg2NWU1NmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij31CbFsFNHPilA1BMQlyFbtNB1QslJXtHyG
lxPhitohsSRlGavv6mEr62FlzUaAEj4XbqkumEsUw+T50oDPKqlFKO3Rkg4M3xIt
O/UPEFIJUdABcT06moneMiUJupWdBOJTGrYr6gvg8q48hEiiKjThHM+Nkz7nH9TP
nf3hDqaviUvxU8cvKaPX9JwbATxx/umH4ExAYAnLWf6Vdw+T+Ubs0PtrH1G9cVVE
4HW9KedbzMbtF0yb/4DRyOkCq6xSHMR/TnTlsCJ6uNE50omr3quAb+s4/hiUZUcl
fP5zKV4xcuDIOqYJKOyXvW8k+WeyNxlY3qbVo7RkfO9o7Wz6FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1G4s6llHKw3l2SWMNBsagdb7RiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODFiYmVhZDUtZjllYS0z
NzA5LTlhMmItM2E4MDQwMzMwYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBhG2/s6BUUohU2OCNCu3AnZXecTHAHRKWY8zCsexHE3kc6vdGaTnjL
owPz58DgwjRAalGc6UWaT7uVrLURcALLRXVrEnQYNEYPyU1ZOAd0Ag5ckl/Q7ES5
++/lSAL260k2GD7XDUJt0fe862xd9YJuqozJK4fYocFvOIhOpKC4vAPUETTkGJSs
66lgr8cdyNHTaEp41QlNavC7XMF5+vUHF5FSVVQQ1BoXsWBiIonVGhVsFrhlc1pV
9ZBIMg4/t9REd+TnnZaxPO71UqABqrhhe8+Gq2eZ0I9NRFZMAFuJ0XUO+RvSkd5f
Ec7HnKbZ1OWDlXRN7RPrKodG6zFtwa8=
-----END CERTIFICATE-----
Generated at Mon Feb 23 22:28:42 2026 by rpki-client