Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa
File:                     7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa (raw, json)
Hash identifier:          +fFmeoDCvJD/5s5hRSSaogDhLH5dIQESFEAOTfhb7Ts=
Subject key identifier:   EA:EB:0B:FA:3A:51:95:AA:D4:DE:96:ED:11:A6:1F:ED:47:DD:69:48
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CDF3242F7EFA2711B97A254C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     26421
IP address blocks:        209.150.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:42:f7:ef:a2:71:1b:97:a2:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=e54a4023-1943-473a-8dac-f9337e9cf067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:fb:4e:1c:cb:92:35:25:54:dc:17:37:b3:
                    64:2a:9e:85:46:ac:58:89:b5:3b:b3:a1:70:0d:48:
                    d6:b7:e9:44:db:e9:3a:c5:01:f0:25:96:e7:92:6e:
                    72:37:78:b8:04:c6:96:61:df:9b:95:1b:3a:2b:5b:
                    6b:59:5b:d9:fe:05:17:0b:b4:d2:65:06:2a:35:f7:
                    87:53:ec:75:c8:a3:f3:3f:df:6f:a3:06:ad:b7:1e:
                    32:39:8b:4b:ca:9b:ee:ae:7f:f9:c9:dd:8e:cf:32:
                    0c:50:5d:c0:bc:8c:7a:7b:03:79:38:da:bd:c9:5b:
                    01:31:0a:20:9c:f2:46:a7:71:a3:84:95:6b:af:0b:
                    4e:a2:6a:c1:ef:ee:89:58:4a:70:2c:df:0b:ed:88:
                    38:d7:42:d6:96:b6:cf:7c:32:89:0b:72:5a:1f:b6:
                    0b:f7:59:66:21:b5:6b:d8:9d:81:ee:c6:95:9c:6f:
                    c7:7a:c0:3d:8f:c9:65:56:4d:87:ee:2a:7b:dd:81:
                    63:b5:42:ec:27:27:9f:aa:b2:a8:0f:54:c7:f6:32:
                    71:84:81:7a:89:a0:d4:c4:c2:aa:da:f8:ab:1c:78:
                    5e:f3:2d:40:5a:66:7c:05:8b:5c:05:43:99:5c:f1:
                    b2:fd:37:10:e3:2d:dd:58:58:e4:7f:be:cd:ae:36:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:0B:FA:3A:51:95:AA:D4:DE:96:ED:11:A6:1F:ED:47:DD:69:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.150.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:13:f5:90:18:ec:95:dc:d1:65:e4:32:4a:70:f5:b8:01:7b:
         97:af:f8:66:a5:ef:a5:d3:fb:3e:e6:df:dd:a9:a2:ba:5e:f6:
         2e:11:1a:aa:47:d8:37:31:35:fa:7e:4a:ed:e3:b5:e0:ce:b5:
         5f:d2:ef:40:73:ff:8b:01:a0:d8:4d:ba:27:1e:49:5c:82:69:
         c3:7d:55:2e:74:33:01:b0:94:85:96:cb:91:7b:e6:58:28:83:
         27:90:62:be:f7:89:c7:9e:35:f8:3d:62:53:81:c9:43:a1:df:
         0a:26:08:d4:96:6d:97:89:04:a2:af:cc:d8:71:61:fc:8f:d9:
         81:9d:c2:e9:7e:24:7a:db:bf:87:87:7b:e2:be:09:da:13:94:
         f9:70:37:13:e4:11:01:51:19:b9:54:68:35:ba:f1:23:85:7c:
         b1:fe:80:a8:65:37:1a:cd:b5:6e:3a:0f:97:4f:34:fe:30:a5:
         5b:ce:da:46:fe:17:fa:d8:51:60:c5:cd:b5:3d:2c:7b:9b:df:
         37:31:a9:68:ad:37:b5:c2:c1:b7:42:3a:b6:75:40:c2:ec:3b:
         3d:59:3b:ca:1b:86:fd:f7:ae:f9:cf:0c:12:43:35:c5:3e:f3:
         38:7f:08:7f:8c:74:a1:cc:b6:06:6a:2b:4e:e0:bc:07:6a:38:
         a8:a0:69:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMkL376JxG5eiVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
ZTU0YTQwMjMtMTk0My00NzNhLThkYWMtZjkzMzdlOWNmMDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHD7ThzLkjUlVNwXN7NkKp6FRqxYibU7s6Fw
DUjWt+lE2+k6xQHwJZbnkm5yN3i4BMaWYd+blRs6K1trWVvZ/gUXC7TSZQYqNfeH
U+x1yKPzP99vowattx4yOYtLypvurn/5yd2OzzIMUF3AvIx6ewN5ONq9yVsBMQog
nPJGp3GjhJVrrwtOomrB7+6JWEpwLN8L7Yg410LWlrbPfDKJC3JaH7YL91lmIbVr
2J2B7saVnG/HesA9j8llVk2H7ip73YFjtULsJyefqrKoD1TH9jJxhIF6iaDUxMKq
2virHHhe8y1AWmZ8BYtcBUOZXPGy/TcQ4y3dWFjkf77NrjbUgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrrC/o6UZWq1N6W7RGmH+1H3WlIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2IzODU0YzktZjg2MS0z
OWIzLWJmMTEtZTQ5OGQyZjA0Y2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZZNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0T9ZAY7JXc0WXkMkpw9bgBe5ev+Gal76XT+z7m392porpe9i4RGqpH
2DcxNfp+Su3jteDOtV/S70Bz/4sBoNhNuiceSVyCacN9VS50MwGwlIWWy5F75lgo
gyeQYr73iceeNfg9YlOByUOh3womCNSWbZeJBKKvzNhxYfyP2YGdwul+JHrbv4eH
e+K+CdoTlPlwNxPkEQFRGblUaDW68SOFfLH+gKhlNxrNtW46D5dPNP4wpVvO2kb+
F/rYUWDFzbU9LHub3zcxqWitN7XCwbdCOrZ1QMLsOz1ZO8obhv33rvnPDBJDNcU+
8zh/CH+MdKHMtgZqK07gvAdqOKigaaw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:47 2026 by rpki-client