Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
File:                     0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa (raw, json)
Hash identifier:          4qri8IcCG7B5e/n8gwld6Pd0GqIkaDFAHFGQnMrkvXY=
Subject key identifier:   FF:F2:AA:81:77:5A:28:A5:D3:06:82:DF:23:9A:84:15:2D:27:FA:1F
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584CED277DFFEC5983E73DA79100
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     36103
IP address blocks:        97.75.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:7d:ff:ec:59:83:e7:3d:a7:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=68345917-4ea4-471f-982b-d10398bf1125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:ae:46:31:39:9a:cb:eb:53:a9:92:6a:0c:
                    42:66:b7:fe:ee:7b:e3:6a:a4:55:84:2b:b8:6d:be:
                    0f:6a:8e:be:13:16:8e:1f:d1:27:4f:4f:40:59:42:
                    d6:e3:e7:43:46:6a:4d:6e:39:75:f7:e7:02:85:91:
                    42:ab:2c:6f:64:1a:aa:b8:7f:dd:ac:88:47:6a:9a:
                    bc:b5:b5:32:d0:3a:6f:3f:0b:6a:70:36:88:a5:95:
                    fd:a7:75:76:7e:a0:ca:f0:c1:20:77:77:98:f8:e8:
                    4d:40:46:89:63:d2:5e:11:33:f2:fd:b8:40:b5:26:
                    92:fc:20:87:c1:27:3a:2d:30:3d:02:53:41:f5:fb:
                    20:c8:82:a9:40:7f:49:61:46:d4:09:eb:6c:65:4b:
                    15:6e:d2:8a:d5:90:f6:aa:1e:08:bc:cf:df:1f:31:
                    cd:76:d2:41:8e:2c:cb:b1:11:fb:45:f8:ad:fd:44:
                    55:82:14:60:d2:38:71:10:77:16:b9:54:41:11:b3:
                    16:26:ce:24:80:e0:6b:40:4c:ae:c2:ef:4d:f9:ee:
                    b5:ed:ea:dd:c2:1c:c0:54:b9:75:e7:d5:e5:af:64:
                    f0:2e:90:b6:9d:e1:8b:44:3a:95:83:4c:19:27:2e:
                    f1:9e:49:71:9e:23:0f:90:d2:b1:d7:9b:88:a9:03:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:AA:81:77:5A:28:A5:D3:06:82:DF:23:9A:84:15:2D:27:FA:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:28:21:81:39:5e:cf:07:e9:f0:cc:b9:82:7b:52:6c:e5:
         88:2c:8a:3e:f2:68:45:61:33:98:23:d5:86:84:a4:59:b6:8f:
         f3:2b:20:ea:24:d3:e0:86:77:fe:d2:c3:16:50:59:50:24:a6:
         02:08:d7:7c:84:d2:e9:2b:0f:ab:33:81:d3:7c:cc:ad:c6:ad:
         0f:54:f3:43:5d:8a:e9:71:4f:2f:6a:77:f5:2c:60:ca:05:11:
         ef:29:7a:0a:af:e5:4f:e6:69:4f:96:0e:c3:f1:ac:00:52:9e:
         e0:e8:34:64:9d:40:b6:0c:54:ec:16:67:7e:79:43:28:28:f5:
         85:7d:51:61:43:5e:dd:a3:0e:d4:1f:f8:84:0a:3f:66:08:8a:
         e3:c3:8e:c9:1a:47:b7:62:fa:85:dd:2b:9e:23:81:20:25:a2:
         ba:06:ed:37:c8:53:10:92:56:2c:c8:6c:d9:c4:d0:ba:03:29:
         bf:92:38:5b:72:a4:88:41:4b:ee:db:b8:52:7b:c7:7e:30:b0:
         a4:c7:f2:7a:6e:33:f6:1a:3f:db:51:ed:ac:09:ef:80:18:95:
         f6:42:46:16:ad:d8:0c:5b:a9:d4:d3:6f:71:52:04:b2:df:e9:
         da:08:ce:07:e8:13:a6:0a:ea:c0:1f:3a:fe:b0:35:34:09:27:
         3d:ef:9a:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ33/7FmD5z2nkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
NjgzNDU5MTctNGVhNC00NzFmLTk4MmItZDEwMzk4YmYxMTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFGuRjE5msvrU6mSagxCZrf+7nvjaqRVhCu4
bb4Pao6+ExaOH9EnT09AWULW4+dDRmpNbjl19+cChZFCqyxvZBqquH/drIhHapq8
tbUy0DpvPwtqcDaIpZX9p3V2fqDK8MEgd3eY+OhNQEaJY9JeETPy/bhAtSaS/CCH
wSc6LTA9AlNB9fsgyIKpQH9JYUbUCetsZUsVbtKK1ZD2qh4IvM/fHzHNdtJBjizL
sRH7Rfit/URVghRg0jhxEHcWuVRBEbMWJs4kgOBrQEyuwu9N+e617erdwhzAVLl1
59Xlr2TwLpC2neGLRDqVg0wZJy7xnklxniMPkNKx15uIqQOw4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/yqoF3Wiil0waC3yOahBUtJ/ofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvMGE5YmU5ZWEtYjdmZC0z
Y2VlLWFlYjktOTRjMmM2ODYwZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYUvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHK7KCGBOV7PB+nwzLmCe1Js5Ygsij7yaEVhM5gj1YaEpFm2j/MrIOok
0+CGd/7SwxZQWVAkpgII13yE0ukrD6szgdN8zK3GrQ9U80NdiulxTy9qd/UsYMoF
Ee8pegqv5U/maU+WDsPxrABSnuDoNGSdQLYMVOwWZ355Qygo9YV9UWFDXt2jDtQf
+IQKP2YIiuPDjskaR7di+oXdK54jgSAloroG7TfIUxCSVizIbNnE0LoDKb+SOFty
pIhBS+7buFJ7x34wsKTH8npuM/YaP9tR7awJ74AYlfZCRhat2AxbqdTTb3FSBLLf
6doIzgfoE6YK6sAfOv6wNTQJJz3vmpE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:03 2026 by rpki-client