Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8640ebc9-cb0b-3ebe-a39f-f3ad76040052.roa
File:                     8640ebc9-cb0b-3ebe-a39f-f3ad76040052.roa (raw, json)
Hash identifier:          Bs6mdkBXvvixxnhQYrYmQ+yB53YcXSVgbZd/+QNMVn8=
Subject key identifier:   8A:C6:FB:27:4B:75:99:B0:EA:DE:F5:71:4D:FA:C2:95:8B:A8:6C:79
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CF2BD0B0FA1E468A41199FC00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8640ebc9-cb0b-3ebe-a39f-f3ad76040052.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     135377
IP address blocks:        206.54.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0b:0f:a1:e4:68:a4:11:99:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=bef9c966-c75d-40d3-b065-8117117d5d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:cb:0e:80:15:38:a0:9a:35:f9:b9:b6:71:
                    0a:4f:ec:82:02:60:5f:48:dc:c9:53:28:86:9c:1d:
                    3f:36:e3:ed:05:3e:88:df:c8:e6:83:0d:5e:60:54:
                    60:0b:fa:be:c1:30:b9:01:d1:ad:66:fe:44:13:a0:
                    ac:3c:67:27:75:54:f4:73:92:24:69:fe:11:5a:df:
                    d8:06:98:8f:95:49:0f:ca:a7:8b:48:99:13:74:cf:
                    1a:41:63:2a:36:bf:74:e8:94:bc:ff:0e:28:3e:ad:
                    1c:35:e3:c7:a4:ec:3c:bc:08:ca:1d:fe:10:3e:49:
                    3b:c9:10:b5:0a:4f:cf:97:70:74:ef:b1:ee:e8:73:
                    44:e3:93:5f:59:f8:ae:df:cc:1e:96:53:01:81:6d:
                    03:e7:e2:4d:81:b3:de:80:e6:fe:da:aa:5d:70:b2:
                    3a:87:2b:07:4f:7e:c4:62:00:af:b3:4c:31:63:49:
                    27:11:51:40:97:21:8d:80:bf:05:79:72:2d:2a:1d:
                    ec:d2:d7:8f:9c:97:82:fd:26:4a:0b:21:01:98:73:
                    94:b1:fe:62:2e:24:07:5d:88:b0:18:9e:8e:41:ce:
                    07:67:b5:d9:46:d0:db:0f:ca:68:bc:16:63:f2:ca:
                    2d:34:0a:32:10:29:26:6c:09:ee:16:ef:cb:b2:47:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C6:FB:27:4B:75:99:B0:EA:DE:F5:71:4D:FA:C2:95:8B:A8:6C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8640ebc9-cb0b-3ebe-a39f-f3ad76040052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:db:6d:c0:97:46:b7:b8:98:28:5e:0a:0b:05:c3:3b:e5:44:
         5f:c1:0a:d1:cd:ab:e4:f9:b5:16:a7:56:d3:cd:3e:a2:71:97:
         db:a5:80:4e:56:83:65:c3:16:2f:b4:15:2d:26:c2:2f:ab:2b:
         d5:34:ce:dc:81:fb:e5:5e:04:b4:14:1e:ef:9e:ee:10:47:71:
         ff:a9:43:7a:e9:0a:ce:d3:6a:50:e7:fe:ec:c1:72:a7:72:80:
         a6:3c:f0:61:9e:54:dd:2c:62:bc:cd:00:57:41:3e:61:f1:ab:
         f4:e9:c3:97:c5:f0:ab:29:d9:a1:bc:e3:b7:75:69:e8:a8:43:
         68:e0:96:38:f7:c8:e9:b8:ac:34:e7:bb:fd:c5:31:41:ec:8a:
         2b:f0:49:0d:e9:36:58:08:8a:67:a2:02:dd:de:a8:0a:e3:32:
         2d:22:7b:9d:88:e5:77:68:59:e4:b8:04:95:5b:9b:d9:ae:ea:
         01:45:3f:bd:cb:25:a1:1d:d2:b5:30:5a:20:94:03:a1:9b:62:
         4e:b5:f7:44:e1:84:55:3f:8a:61:eb:af:ed:61:f9:85:a7:14:
         4e:0e:1a:e7:c5:3b:62:02:d1:9a:6e:29:92:9c:cc:1c:9c:d8:
         e3:f8:de:07:e9:1a:c7:27:88:ec:8c:3b:56:44:54:4d:b5:cc:
         fe:79:8e:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQsPoeRopBGZ/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
YmVmOWM5NjYtYzc1ZC00MGQzLWIwNjUtODExNzExN2Q1ZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqzLDoAVOKCaNfm5tnEKT+yCAmBfSNzJUyiG
nB0/NuPtBT6I38jmgw1eYFRgC/q+wTC5AdGtZv5EE6CsPGcndVT0c5Ikaf4RWt/Y
BpiPlUkPyqeLSJkTdM8aQWMqNr906JS8/w4oPq0cNePHpOw8vAjKHf4QPkk7yRC1
Ck/Pl3B077Hu6HNE45NfWfiu38wellMBgW0D5+JNgbPegOb+2qpdcLI6hysHT37E
YgCvs0wxY0knEVFAlyGNgL8FeXItKh3s0tePnJeC/SZKCyEBmHOUsf5iLiQHXYiw
GJ6OQc4HZ7XZRtDbD8povBZj8sotNAoyECkmbAnuFu/LskebYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrG+ydLdZmw6t71cU36wpWLqGx5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY0MGViYzktY2IwYi0z
ZWJlLWEzOWYtZjNhZDc2MDQwMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjYFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALvbbcCXRre4mCheCgsFwzvlRF/BCtHNq+T5tRanVtPNPqJxl9ulgE5W
g2XDFi+0FS0mwi+rK9U0ztyB++VeBLQUHu+e7hBHcf+pQ3rpCs7TalDn/uzBcqdy
gKY88GGeVN0sYrzNAFdBPmHxq/Tpw5fF8Ksp2aG847d1aeioQ2jgljj3yOm4rDTn
u/3FMUHsiivwSQ3pNlgIimeiAt3eqArjMi0ie52I5XdoWeS4BJVbm9mu6gFFP73L
JaEd0rUwWiCUA6GbYk6190ThhFU/imHrr+1h+YWnFE4OGufFO2IC0ZpuKZKczByc
2OP43gfpGscniOyMO1ZEVE21zP55jt0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:45 2026 by rpki-client