Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa
File:                     a3abfaf3-64a7-328a-ad03-ba37201c413d.roa (raw, json)
Hash identifier:          jyTtwibDmbe8Z9kSR4ua/xAgMz8RG73TJ7PD+qx6rUc=
Subject key identifier:   EC:88:A0:DC:3D:EC:F8:FE:02:0F:3B:9C:19:74:83:B1:05:F9:6E:2A
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584CCA41E25A32C4E46EFF7F0DC0
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     803
IP address blocks:        64.110.192.0/18 maxlen: 18
                          64.201.192.0/19 maxlen: 19
                          67.225.0.0/17 maxlen: 17
                          68.69.192.0/19 maxlen: 19
                          69.11.0.0/17 maxlen: 17
                          71.17.0.0/16 maxlen: 16
                          74.113.12.0/22 maxlen: 22
                          2604:1e80::/32 maxlen: 32
                          2607:f4a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e2:5a:32:c4:e4:6e:ff:7f:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=f3186459-de5e-4c9c-b3c1-4d2e99f37f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:11:2b:75:31:e2:61:27:10:b3:7f:f5:6b:
                    e3:0d:c2:b1:ec:f1:6e:c4:01:24:0f:df:0e:35:e5:
                    f1:14:14:0b:8f:94:8f:42:ae:9d:3d:50:bc:15:b4:
                    22:d7:61:30:c4:eb:f1:71:42:05:6a:14:51:bf:49:
                    40:58:f1:1b:87:c7:a2:da:c8:79:0c:4f:d9:ff:5c:
                    74:02:11:33:2d:48:00:bf:d9:2e:58:58:df:77:34:
                    34:a6:ad:a6:a1:b2:ff:14:0d:83:c9:da:e8:d1:4c:
                    e1:f1:6e:3c:16:de:97:99:24:56:62:05:e0:70:d4:
                    5f:08:6e:5f:2c:67:78:3e:70:6b:3e:16:8e:e7:58:
                    66:44:65:fd:03:3a:37:ff:77:c9:ef:29:c8:b8:75:
                    c1:45:84:09:bd:d1:4b:c7:d2:0f:56:b5:67:07:9d:
                    73:42:bc:8d:cb:fd:c9:b7:01:3b:f4:82:f9:78:da:
                    0c:6a:b6:1c:a6:16:76:a0:1c:5b:10:8f:3c:c5:37:
                    59:65:e5:05:d6:cb:81:28:73:81:43:da:5d:87:4d:
                    02:13:77:bd:b3:11:79:55:27:d5:95:95:95:88:64:
                    ad:69:fe:e2:13:f4:25:2d:21:ca:1c:75:64:e5:06:
                    28:78:73:f0:1b:15:41:8d:a7:4e:7b:d7:09:24:6c:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:88:A0:DC:3D:EC:F8:FE:02:0F:3B:9C:19:74:83:B1:05:F9:6E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.192.0/18
                  64.201.192.0/19
                  67.225.0.0/17
                  68.69.192.0/19
                  69.11.0.0/17
                  71.17.0.0/16
                  74.113.12.0/22
                IPv6:
                  2604:1e80::/32
                  2607:f4a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:a6:12:2a:ea:29:91:26:26:d2:30:db:f3:b0:f5:54:23:
         4e:dd:33:dd:52:89:40:47:8c:cd:c8:f3:7d:b2:3c:b8:d7:61:
         9c:fe:19:2f:14:13:7c:8f:9e:27:4d:3e:dc:cc:33:6e:64:2b:
         99:01:5b:86:30:6f:d5:6e:98:b4:7b:03:61:bc:cb:af:ea:80:
         c8:3b:59:b3:21:25:67:81:49:63:0e:14:a8:00:4c:0d:ff:61:
         a0:ed:29:7d:72:ec:02:63:f6:df:6f:18:86:5c:d3:d2:33:c8:
         2c:a3:51:2d:fe:bb:2c:40:41:99:4f:37:ad:41:5c:18:80:81:
         e4:b9:58:ec:c9:3d:eb:dd:31:73:a7:16:b1:d4:1a:5d:21:c6:
         91:c3:84:30:88:60:b3:fd:38:f6:29:31:7b:b8:56:a3:85:de:
         47:69:29:9f:e8:26:47:75:cf:47:8c:f7:8f:89:1a:65:ab:8a:
         31:7a:c3:32:66:3a:08:c4:58:5d:2b:e2:ec:0f:57:cf:04:c8:
         7f:4d:f6:6e:d0:34:db:71:b5:f2:3a:9e:8c:e0:f5:7f:45:e8:
         11:16:e4:92:8a:d9:73:e6:29:9e:38:8a:16:41:77:75:ce:88:
         eb:ca:72:b3:81:43:77:7d:f0:bf:e6:58:40:3d:57:30:25:bb:
         06:8c:f9:38
-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEzKQeJaMsTkbv9/DcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5
NGExMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZjMxODY0NTktZGU1ZS00YzljLWIzYzEtNGQyZTk5ZjM3ZjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre0RK3Ux4mEnELN/9WvjDcKx7PFuxAEkD98O
NeXxFBQLj5SPQq6dPVC8FbQi12EwxOvxcUIFahRRv0lAWPEbh8ei2sh5DE/Z/1x0
AhEzLUgAv9kuWFjfdzQ0pq2mobL/FA2Dydro0Uzh8W48Ft6XmSRWYgXgcNRfCG5f
LGd4PnBrPhaO51hmRGX9Azo3/3fJ7ynIuHXBRYQJvdFLx9IPVrVnB51zQryNy/3J
twE79IL5eNoMarYcphZ2oBxbEI88xTdZZeUF1suBKHOBQ9pdh00CE3e9sxF5VSfV
lZWViGStaf7iE/QlLSHKHHVk5QYoeHPwGxVBjadOe9cJJGylMQIDAQABo4IDjjCC
A4owHQYDVR0OBBYEFOyIoNw97Pj+Ag87nBl0g7EF+W4qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy
YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvYTNhYmZhZjMtNjRhNy0z
MjhhLWFkMDMtYmEzNzIwMWM0MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5
N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh
OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw
YjZkYTk0YTEuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzAvBAIAATApAwQGQG7AAwQF
QMnAAwQHQ+EAAwQFREXAAwQHRQsAAwMARxEDBAJKcQwwFAQCAAIwDgMFACYEHoAD
BQAmB/SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBABSuphIq6imRJibSMNvzsPVUI07dM91SiUBHjM3I832y
PLjXYZz+GS8UE3yPnidNPtzMM25kK5kBW4Ywb9VumLR7A2G8y6/qgMg7WbMhJWeB
SWMOFKgATA3/YaDtKX1y7AJj9t9vGIZc09IzyCyjUS3+uyxAQZlPN61BXBiAgeS5
WOzJPevdMXOnFrHUGl0hxpHDhDCIYLP9OPYpMXu4VqOF3kdpKZ/oJkd1z0eM94+J
GmWrijF6wzJmOgjEWF0r4uwPV88EyH9N9m7QNNtxtfI6nozg9X9F6BEW5JKK2XPm
KZ44ihZBd3XOiOvKcrOBQ3d98L/mWEA9VzAluwaM+Tg=
-----END CERTIFICATE-----
Generated at Fri Feb 27 07:53:53 2026 by rpki-client