Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
File:                     afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa (raw, json)
Hash identifier:          DXHGvfekQmuOB8tgv/g5ueeNxl6QrV6IWvCcHXgOJ08=
Subject key identifier:   72:59:22:BD:40:BA:B7:35:88:C1:EC:64:E4:B7:09:50:9D:A5:49:F1
Certificate issuer:       /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial:       010D0C9F4328584CD99CC19AC150E6D18B94E33C
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     14870
IP address blocks:        162.244.220.0/22 maxlen: 24
                          2620:122:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c1:9a:c1:50:e6:d1:8b:94:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=be78a6db-bf5f-47f3-ac48-2591b818f93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:7f:e4:68:6f:19:6c:06:a3:dc:4a:c5:21:
                    a4:e3:12:f6:68:c3:e8:55:70:26:c1:e8:c8:25:9a:
                    98:5b:bd:71:eb:d2:b3:d7:0f:98:ee:2b:99:96:81:
                    62:d4:6a:15:66:65:7b:8c:94:90:7b:6c:68:93:40:
                    6e:f2:60:4e:c3:b8:ea:2f:30:41:bd:bd:f1:34:d6:
                    70:3d:b6:3f:8c:89:ec:88:bd:c4:ea:5e:5e:dc:ee:
                    17:ea:40:ac:3e:20:e8:1d:69:12:09:6d:d3:bb:59:
                    a5:d0:81:a2:e8:13:08:c3:42:cb:25:f7:aa:05:c8:
                    5f:0f:5a:97:5c:33:bc:59:15:ca:14:7a:77:ea:17:
                    2e:87:a4:3e:be:97:3b:5d:89:08:91:e0:32:a1:d7:
                    6e:8e:1d:b9:19:c6:9d:5d:f2:38:6b:d8:d2:d2:58:
                    7e:a9:94:38:1a:9a:6f:7e:4b:88:44:ef:7a:06:85:
                    8e:ef:47:eb:db:a8:82:28:0e:f6:5c:d0:13:2e:f9:
                    65:8c:20:6f:44:6b:8f:c4:42:d5:e6:c8:f9:5e:29:
                    0c:78:80:9f:8e:57:e2:88:fb:68:66:74:89:7c:76:
                    a7:6f:33:17:5b:05:27:ae:aa:4e:f0:81:d2:3d:f8:
                    b2:14:1f:1c:8a:4d:8a:2c:71:bd:68:81:95:93:3e:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:22:BD:40:BA:B7:35:88:C1:EC:64:E4:B7:09:50:9D:A5:49:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.220.0/22
                IPv6:
                  2620:122:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:70:7c:76:c2:7a:9a:e8:5b:22:7b:a8:b2:0c:2c:72:2e:06:
         26:7c:8d:66:df:27:75:80:84:08:f0:6b:8c:0b:fb:74:52:59:
         88:e6:b9:e9:47:a2:79:dc:a7:2a:86:86:ce:5f:bb:b9:3b:73:
         db:ab:40:8a:a4:c2:50:c9:0e:21:c0:32:61:55:b4:ad:21:71:
         bc:a8:69:83:69:ca:6b:35:d7:c6:d4:f8:96:a8:d6:86:a2:2d:
         75:28:ce:08:c4:f9:7d:36:b4:18:80:93:0d:b1:9c:0b:e2:66:
         7e:ce:a7:7e:aa:91:44:dd:68:cd:c1:ce:de:59:39:ec:30:de:
         7c:d6:6d:b5:03:e2:c7:96:81:4a:e9:41:0e:2c:ab:08:e7:4d:
         d3:ff:27:26:72:3b:29:4d:2d:ed:ee:1c:be:b3:80:61:69:f8:
         0f:2d:be:a3:cc:da:3e:36:51:57:9c:57:c1:48:19:e5:a5:29:
         95:4f:45:e2:7d:dc:74:09:59:7b:09:12:d1:1b:3c:21:46:ca:
         98:35:5e:77:b0:0c:0d:93:64:ca:c9:33:5b:f1:35:6c:0b:de:
         33:6d:ad:f4:e1:c7:b5:a3:ff:66:2c:6a:5d:b0:06:fe:79:64:
         85:eb:c3:6c:b3:cf:c4:4b:19:56:e4:18:a7:a1:4a:7f:c9:33:
         27:03:e0:d0
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEzZnMGawVDm0YuU4zwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzY2QwODEtZjZlNS00ZTcxLTg2OGQtYTFjMTE5MjEz
MjFkMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
YmU3OGE2ZGItYmY1Zi00N2YzLWFjNDgtMjU5MWI4MThmOTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/Z/5GhvGWwGo9xKxSGk4xL2aMPoVXAmwejI
JZqYW71x69Kz1w+Y7iuZloFi1GoVZmV7jJSQe2xok0Bu8mBOw7jqLzBBvb3xNNZw
PbY/jInsiL3E6l5e3O4X6kCsPiDoHWkSCW3Tu1ml0IGi6BMIw0LLJfeqBchfD1qX
XDO8WRXKFHp36hcuh6Q+vpc7XYkIkeAyoddujh25GcadXfI4a9jS0lh+qZQ4Gppv
fkuIRO96BoWO70fr26iCKA72XNATLvlljCBvRGuPxELV5sj5XikMeICfjlfiiPto
ZnSJfHanbzMXWwUnrqpO8IHSPfiyFB8cik2KLHG9aIGVkz5//wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHJZIr1Aurc1iMHsZOS3CVCdpUnxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNj
ZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMxMTkyMTMyMWQvYWZiOTZkOTEtMWZkNS0z
ZWQ3LWFlOGEtY2Y0ODA5MDVmNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTUzY2QwODEtZjZlNS00ZTcxLTg2
OGQtYTFjMTE5MjEzMjFkL2E1M2NkMDgxLWY2ZTUtNGU3MS04NjhkLWExYzExOTIx
MzIxZC5jcmwwHwYDVR0jBBgwFoAU+c47QoJ3T6uNXqPojUlPKYGHe/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNjZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMx
MTkyMTMyMWQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCovTcMA8E
AgACMAkDBwQmIAEi8AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsXB8dsJ6muhbInuosgwsci4GJnyNZt8n
dYCECPBrjAv7dFJZiOa56UeiedynKoaGzl+7uTtz26tAiqTCUMkOIcAyYVW0rSFx
vKhpg2nKazXXxtT4lqjWhqItdSjOCMT5fTa0GICTDbGcC+Jmfs6nfqqRRN1ozcHO
3lk57DDefNZttQPix5aBSulBDiyrCOdN0/8nJnI7KU0t7e4cvrOAYWn4Dy2+o8za
PjZRV5xXwUgZ5aUplU9F4n3cdAlZewkS0Rs8IUbKmDVed7AMDZNkyskzW/E1bAve
M22t9OHHtaP/ZixqXbAG/nlkhevDbLPPxEsZVuQYp6FKf8kzJwPg0A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:21 2026 by rpki-client