Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
File:                     281d3ea3-8d51-391f-af59-84facbecc7a0.roa (raw, json)
Hash identifier:          /V7AXixxs6Wo1wUWw6FyKmyhveBmjnaHQEJneUCyV/M=
Subject key identifier:   00:D7:9F:DB:F4:51:F0:F7:8E:44:59:38:21:46:C6:D3:CF:EE:C4:0F
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D0217BB011ABFDC300F7B7200
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     5769
IP address blocks:        207.253.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bb:01:1a:bf:dc:30:0f:7b:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=3c5957ab-76fe-405b-a092-3ca1134fab44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:1d:a0:69:d7:a1:4c:19:dd:f8:3b:82:75:
                    c6:f7:10:41:9f:05:e1:2b:04:7d:91:a4:23:3b:e8:
                    fa:ae:d0:f9:eb:2f:16:05:2f:bb:a0:45:59:a5:d8:
                    60:4c:4b:cc:28:70:f3:46:72:33:70:89:5a:9e:7e:
                    ab:29:12:6c:e1:ea:ae:ce:0a:51:28:4f:1c:dc:cb:
                    62:8a:9f:fe:64:9f:a0:69:5b:25:fe:84:85:e4:01:
                    af:cb:0e:83:4d:f1:e9:b8:f1:cf:bf:c9:6b:9c:27:
                    88:08:d4:16:42:31:90:62:9d:3b:0f:18:d4:0f:c1:
                    0b:ec:cd:81:2e:3d:ff:fd:f7:25:f1:e4:5b:df:c2:
                    7d:f7:6a:f0:ff:64:9f:66:ac:08:83:4e:ae:a9:dd:
                    e3:f9:a1:44:d6:85:17:81:eb:1c:30:e7:04:07:02:
                    05:0a:27:f1:dc:84:d6:09:17:10:9f:b7:59:8e:ce:
                    78:57:6b:ae:fd:c3:4c:2c:50:08:25:3d:cc:b6:df:
                    f9:57:00:40:3d:ff:e2:76:2a:be:f1:93:f9:0d:ee:
                    53:80:ef:02:19:01:79:67:03:eb:ca:b2:0e:b0:11:
                    a8:c9:4e:48:1b:51:ed:72:5b:a0:2f:83:a7:94:38:
                    70:3f:6c:08:75:28:f0:d8:5c:10:4a:fa:c9:20:7a:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:9F:DB:F4:51:F0:F7:8E:44:59:38:21:46:C6:D3:CF:EE:C4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:77:fc:36:d0:b6:29:b9:65:ca:46:b7:f2:18:a9:e1:15:e5:
         af:c1:f1:9a:9f:20:de:ab:c5:6e:22:bd:92:d0:d5:5f:59:8e:
         67:e8:4d:6e:64:39:b1:e7:31:c0:7a:54:4a:33:ab:0c:d8:c7:
         19:58:77:7b:c3:fd:bc:ad:5b:bb:f1:a9:77:19:f6:de:b4:fe:
         ce:4d:16:b7:be:a4:71:d2:2c:f8:2a:cb:75:1c:ea:48:f7:c5:
         a0:f0:86:0c:0b:ea:6e:44:90:a0:b0:68:c2:01:e4:f1:f8:be:
         7c:62:0c:49:f0:82:46:42:04:3b:cb:d8:db:f6:5a:e0:4d:11:
         5f:fe:60:5d:83:00:15:89:64:97:62:3c:3d:e2:4a:ab:9c:dd:
         19:59:88:37:b4:df:a5:b3:24:e2:b5:27:5b:62:62:d9:5b:76:
         65:00:f4:02:7d:a8:2a:17:f5:ba:ac:20:6f:c6:4a:ab:79:d9:
         f4:b6:bb:0d:92:cd:cd:eb:ca:c4:86:dc:53:66:ab:1e:f2:f9:
         dc:85:f4:07:87:56:b0:9f:e6:77:81:79:73:e1:e2:6a:cb:c7:
         dc:72:6f:52:8a:d0:30:a9:84:67:e4:0b:fc:11:02:92:04:ad:
         08:bc:38:b0:83:98:51:f4:f7:5a:55:7a:f6:e9:d1:09:f2:e5:
         e6:3d:eb:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF7sBGr/cMA97cgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2M1OTU3YWItNzZmZS00MDViLWEwOTItM2NhMTEzNGZhYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVYdoGnXoUwZ3fg7gnXG9xBBnwXhKwR9kaQj
O+j6rtD56y8WBS+7oEVZpdhgTEvMKHDzRnIzcIlann6rKRJs4equzgpRKE8c3Mti
ip/+ZJ+gaVsl/oSF5AGvyw6DTfHpuPHPv8lrnCeICNQWQjGQYp07DxjUD8EL7M2B
Lj3//fcl8eRb38J992rw/2SfZqwIg06uqd3j+aFE1oUXgescMOcEBwIFCifx3ITW
CRcQn7dZjs54V2uu/cNMLFAIJT3Mtt/5VwBAPf/idiq+8ZP5De5TgO8CGQF5ZwPr
yrIOsBGoyU5IG1HtclugL4OnlDhwP2wIdSjw2FwQSvrJIHqBMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADXn9v0UfD3jkRZOCFGxtPP7sQPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMjgxZDNlYTMtOGQ1MS0z
OTFmLWFmNTktODRmYWNiZWNjN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJ3/DbQtim5ZcpGt/IYqeEV5a/B8ZqfIN6rxW4ivZLQ1V9ZjmfoTW5k
ObHnMcB6VEozqwzYxxlYd3vD/bytW7vxqXcZ9t60/s5NFre+pHHSLPgqy3Uc6kj3
xaDwhgwL6m5EkKCwaMIB5PH4vnxiDEnwgkZCBDvL2Nv2WuBNEV/+YF2DABWJZJdi
PD3iSquc3RlZiDe036WzJOK1J1tiYtlbdmUA9AJ9qCoX9bqsIG/GSqt52fS2uw2S
zc3rysSG3FNmqx7y+dyF9AeHVrCf5neBeXPh4mrLx9xyb1KK0DCphGfkC/wRApIE
rQi8OLCDmFH091pVevbp0Qny5eY96y0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:55 2026 by rpki-client