Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
File:                     df502e9b-f90e-3a84-8ea6-9d557d426070.roa (raw, json)
Hash identifier:          nAjndbUWTFujCTA6WgqgtVbTD66xjj2q+b8ssNs+PRU=
Subject key identifier:   AE:70:A4:6F:73:7A:AE:55:04:B5:C4:12:C3:9F:74:B0:1E:63:46:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CCA4218A38209A1349473D480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     0
IP address blocks:        174.8.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:42:18:a3:82:09:a1:34:94:73:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=9e3f0555-a236-4f1c-9dbc-f2bdc1ea71d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:77:59:2f:4e:dc:b7:61:05:f5:11:96:d4:
                    bd:73:46:4b:26:67:ff:5c:0c:1a:2d:78:b0:3f:e2:
                    67:a3:9b:c2:d3:38:09:a9:1d:ce:47:5f:35:a2:4f:
                    8f:95:61:e8:4c:34:bd:80:42:01:5d:99:58:4b:d4:
                    7f:76:2f:16:f2:8f:71:6d:6c:62:44:b3:42:95:9f:
                    ce:24:12:81:d4:73:e7:4a:05:88:dc:b2:b4:2f:2e:
                    7a:c9:b6:32:2e:66:ce:8d:70:1d:8c:22:a7:a9:13:
                    ea:ad:c3:86:57:7b:f5:7e:be:e5:c0:4f:19:f1:5a:
                    ec:ee:01:15:1c:99:00:55:05:63:56:57:2f:c1:dc:
                    ed:c4:c3:06:1d:6f:5f:33:8a:69:61:cc:1a:da:91:
                    3a:74:43:b9:c5:7c:e5:d8:b5:7f:ef:3f:42:72:5f:
                    29:d0:34:a8:84:8e:7c:06:3c:66:2c:22:a0:3b:23:
                    8f:05:2a:87:3b:d0:e4:33:b3:6c:ad:0e:ea:a6:ad:
                    da:cf:2f:8e:12:7d:03:46:26:ed:56:63:b2:27:d4:
                    91:02:5f:f1:22:12:d3:9d:11:ce:c3:41:33:19:49:
                    47:fb:77:45:bd:34:48:e0:77:3f:9d:94:3f:9b:4c:
                    a4:1f:14:73:ab:1b:b4:77:fd:47:6b:14:4e:9d:28:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:A4:6F:73:7A:AE:55:04:B5:C4:12:C3:9F:74:B0:1E:63:46:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.8.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:d1:a9:31:c1:3a:0a:11:31:01:14:4a:7e:59:3b:90:c5:
         82:9a:7f:51:7a:76:3a:9f:ed:25:e2:62:40:7d:73:35:bc:f8:
         19:9c:9f:d2:9a:a3:24:2c:01:43:ab:41:79:c1:2b:db:51:49:
         9c:a4:44:8d:6e:1c:53:3c:84:78:89:9b:54:49:22:f3:ce:86:
         0c:11:bb:0c:8b:12:c6:42:13:51:70:d6:5f:75:f7:fa:cd:66:
         27:fe:01:f1:56:e6:46:af:f8:1f:e3:0d:6d:a2:df:f9:1e:54:
         b7:4e:8c:e8:f9:50:f9:c7:33:14:7d:97:cf:e2:06:75:27:ed:
         1c:d5:3e:c1:54:c9:aa:68:06:97:6f:96:8e:c0:ac:6c:08:98:
         16:71:5b:d4:11:1a:5d:e4:79:64:43:df:1d:64:dd:36:09:5d:
         bf:bb:c8:fb:f2:61:c0:96:86:a6:6b:c1:04:4a:69:55:3b:69:
         0e:da:7f:2f:d6:a8:12:42:36:0e:f7:63:01:f5:de:3a:22:d3:
         11:9b:ce:e5:06:e3:a8:f4:4b:e7:aa:3b:43:4b:dd:a3:7e:7d:
         af:58:5b:6b:29:d6:36:ec:7a:26:f7:0d:71:9e:fd:f7:46:68:
         ee:ef:45:62:3f:37:be:2e:ad:bb:4b:1d:a8:0b:8b:71:af:fa:
         9b:72:05:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzKQhijggmhNJRz1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
OWUzZjA1NTUtYTIzNi00ZjFjLTlkYmMtZjJiZGMxZWE3MWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK93WS9O3LdhBfURltS9c0ZLJmf/XAwaLXiw
P+Jno5vC0zgJqR3OR181ok+PlWHoTDS9gEIBXZlYS9R/di8W8o9xbWxiRLNClZ/O
JBKB1HPnSgWI3LK0Ly56ybYyLmbOjXAdjCKnqRPqrcOGV3v1fr7lwE8Z8Vrs7gEV
HJkAVQVjVlcvwdztxMMGHW9fM4ppYcwa2pE6dEO5xXzl2LV/7z9Ccl8p0DSohI58
BjxmLCKgOyOPBSqHO9DkM7NsrQ7qpq3azy+OEn0DRibtVmOyJ9SRAl/xIhLTnRHO
w0EzGUlH+3dFvTRI4Hc/nZQ/m0ykHxRzqxu0d/1HaxROnShDaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK5wpG9zeq5VBLXEEsOfdLAeY0YNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGY1MDJlOWItZjkwZS0z
YTg0LThlYTYtOWQ1NTdkNDI2MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDrggwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAT7HRqTHBOgoRMQEUSn5ZO5DFgpp/UXp2Op/tJeJiQH1zNbz4GZyf0pqj
JCwBQ6tBecEr21FJnKREjW4cUzyEeImbVEki886GDBG7DIsSxkITUXDWX3X3+s1m
J/4B8VbmRq/4H+MNbaLf+R5Ut06M6PlQ+cczFH2Xz+IGdSftHNU+wVTJqmgGl2+W
jsCsbAiYFnFb1BEaXeR5ZEPfHWTdNgldv7vI+/JhwJaGpmvBBEppVTtpDtp/L9ao
EkI2DvdjAfXeOiLTEZvO5QbjqPRL56o7Q0vdo359r1hbaynWNux6JvcNcZ7990Zo
7u9FYj83vi6tu0sdqAuLca/6m3IFSw==
-----END CERTIFICATE-----
Generated at Sat Feb 21 03:45:50 2026 by rpki-client