Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5698170-3114-349c-b475-ad5c5af31961.roa
File:                     a5698170-3114-349c-b475-ad5c5af31961.roa (raw, json)
Hash identifier:          k/mQnjzbZ228MLaGwLdmAwHOUqHCjN9Ikn5VVzoJArg=
Subject key identifier:   06:58:8D:7B:CB:BA:5F:3A:24:12:E8:41:8D:03:19:AF:A0:52:B4:62
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CD3E3E2C6904E168421E0E300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5698170-3114-349c-b475-ad5c5af31961.roa
Signing time:             Wed 11 Feb 2026 12:49:22 +0000
ROA not before:           Wed 11 Feb 2026 12:49:22 +0000
ROA not after:            Tue 12 May 2026 11:49:22 +0000
asID:                     20473
IP address blocks:        64.204.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d3:e3:e2:c6:90:4e:16:84:21:e0:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 11 12:49:22 2026 GMT
            Not After : May 12 11:49:22 2026 GMT
        Subject: CN=56ea6f45-7730-4e32-9d52-a98c3dedcaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:c4:59:b0:da:6e:e3:25:9c:a1:d4:1f:7b:
                    2f:6a:69:cc:91:dd:6c:9b:53:ad:19:85:a2:58:27:
                    7a:e2:eb:cf:be:fe:11:ff:c2:63:9d:1a:80:1f:d6:
                    c6:d5:cb:22:83:09:8b:1d:80:6c:0f:51:1c:19:0d:
                    09:10:b8:7d:03:3c:bf:bb:0f:fc:bf:c7:99:19:a9:
                    f1:40:fb:de:0d:42:0f:bf:8c:76:2e:ec:e5:f7:b7:
                    9c:f6:25:1d:85:ee:c9:62:41:2e:63:5f:4a:8e:34:
                    29:24:f3:cf:8a:f9:74:83:71:71:c7:ed:3f:06:2b:
                    af:64:69:1a:58:fe:2c:86:4a:a7:2a:d8:d7:24:3f:
                    ad:c3:81:94:71:31:e6:10:c1:26:da:f8:1f:a9:bd:
                    6e:5e:96:d5:a7:cb:2b:05:d7:90:e0:7a:b7:7e:8e:
                    f6:1f:cd:27:1d:8b:5b:62:57:ea:21:28:9a:b5:24:
                    c5:c7:b8:5c:99:e2:ab:ef:67:e1:6b:4e:07:95:a3:
                    f8:dc:a3:d1:31:e2:9b:db:9e:8f:d5:82:56:ea:8b:
                    35:c8:5a:6d:aa:02:a4:7c:8c:21:23:99:44:e3:f1:
                    03:ba:25:e4:f8:b7:17:0c:18:90:b6:d7:37:6c:de:
                    50:25:25:4f:fa:11:25:44:fc:d3:63:36:c6:fd:8e:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:58:8D:7B:CB:BA:5F:3A:24:12:E8:41:8D:03:19:AF:A0:52:B4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5698170-3114-349c-b475-ad5c5af31961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:96:50:4d:09:90:cd:87:2c:30:5f:7c:e4:81:fd:84:3b:98:
         85:94:95:0f:d9:cb:2c:b3:4f:88:ae:7d:bf:a1:ea:04:20:82:
         14:b7:52:7e:7d:54:59:64:dd:fe:6b:85:9d:6c:fa:41:a1:95:
         ae:91:2e:92:fc:4b:fb:4e:20:08:80:78:79:e7:50:59:1f:14:
         e6:d3:bc:b3:a5:af:2d:5f:19:4e:a5:00:55:d3:b8:13:71:52:
         1e:e6:93:99:b5:f4:0c:a1:e3:7c:9a:65:ee:ac:2c:36:2f:2d:
         0b:53:c8:59:a3:79:dd:bb:d4:dc:95:73:19:9c:87:10:84:ed:
         e6:fb:9b:e9:66:e1:22:27:f1:18:27:ea:30:0b:ab:0f:39:57:
         75:64:74:e2:99:90:75:99:a0:99:40:14:47:d9:88:8b:04:ac:
         e1:63:f4:d8:f1:48:64:e1:26:06:e3:f3:69:d0:ea:be:e6:73:
         7e:67:67:18:ab:3c:85:17:f1:de:7b:c4:7a:ea:7e:52:19:6a:
         fe:68:d1:0b:48:93:60:da:03:ef:d9:c1:5e:45:9f:38:a2:bc:
         c2:be:03:1e:0a:d2:bb:92:f5:ad:1a:f9:f6:87:32:b9:d1:d9:
         76:76:08:b7:5a:7f:ad:84:9a:57:fe:55:60:d7:88:62:d8:ed:
         28:de:2b:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzT4+LGkE4WhCHg4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIxMTEyNDkyMloXDTI2MDUxMjExNDkyMlowLzEtMCsGA1UEAxMk
NTZlYTZmNDUtNzczMC00ZTMyLTlkNTItYTk4YzNkZWRjYWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRbEWbDabuMlnKHUH3svamnMkd1sm1OtGYWi
WCd64uvPvv4R/8JjnRqAH9bG1csigwmLHYBsD1EcGQ0JELh9Azy/uw/8v8eZGanx
QPveDUIPv4x2Luzl97ec9iUdhe7JYkEuY19KjjQpJPPPivl0g3Fxx+0/BiuvZGka
WP4shkqnKtjXJD+tw4GUcTHmEMEm2vgfqb1uXpbVp8srBdeQ4Hq3fo72H80nHYtb
YlfqISiatSTFx7hcmeKr72fha04HlaP43KPRMeKb256P1YJW6os1yFptqgKkfIwh
I5lE4/EDuiXk+LcXDBiQttc3bN5QJSVP+hElRPzTYzbG/Y5DRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZYjXvLul86JBLoQY0DGa+gUrRiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTU2OTgxNzAtMzExNC0z
NDljLWI0NzUtYWQ1YzVhZjMxOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeWUE0JkM2HLDBffOSB/YQ7mIWUlQ/ZyyyzT4iufb+h6gQgghS3Un59
VFlk3f5rhZ1s+kGhla6RLpL8S/tOIAiAeHnnUFkfFObTvLOlry1fGU6lAFXTuBNx
Uh7mk5m19Ayh43yaZe6sLDYvLQtTyFmjed271NyVcxmchxCE7eb7m+lm4SIn8Rgn
6jALqw85V3VkdOKZkHWZoJlAFEfZiIsErOFj9NjxSGThJgbj82nQ6r7mc35nZxir
PIUX8d57xHrqflIZav5o0QtIk2DaA+/ZwV5FnziivMK+Ax4K0ruS9a0a+faHMrnR
2XZ2CLdaf62Emlf+VWDXiGLY7SjeK18=
-----END CERTIFICATE-----
Generated at Mon Feb 23 22:29:11 2026 by rpki-client