Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa
File:                     626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa (raw, json)
Hash identifier:          ZklK1C3B0bZfQ5wevS22MQFSssd50GlGH6HXI2ZIhhw=
Subject key identifier:   F8:A7:AC:F3:AC:9D:D0:E3:9D:0E:39:9A:35:A4:9B:1B:47:F6:3F:80
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584CFC823A56DC30C13232874200
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     398210
IP address blocks:        207.211.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:3a:56:dc:30:c1:32:32:87:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=b815033f-a2ee-4a05-8a38-84a6ea30a830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:ca:49:b7:3f:c1:63:42:a2:22:8e:8a:cc:
                    9a:ad:a9:23:69:b0:1c:f3:37:45:06:93:d1:2f:c9:
                    e2:a1:f2:3d:2f:9d:2b:2e:32:da:bf:28:36:e0:89:
                    51:f1:5d:e4:30:1f:fe:23:08:d4:3d:30:7c:7c:78:
                    26:6d:cc:8e:2b:03:40:77:27:cb:e0:1c:3a:d3:2f:
                    37:76:d2:83:99:c9:4f:85:de:5d:c7:fd:2e:a0:e7:
                    de:fa:50:90:7b:be:2d:3c:15:89:34:07:78:36:fa:
                    6a:e9:9e:52:6d:83:cf:15:bc:4d:3c:2c:bd:27:0e:
                    15:75:47:87:9c:40:6a:b9:6a:7b:2a:a5:8d:52:13:
                    18:1c:d8:89:fc:f5:a3:81:b8:1e:a5:8b:16:44:cb:
                    e0:50:bc:0e:64:f7:b0:32:aa:8f:7a:67:9f:84:c5:
                    19:8e:98:c7:12:ce:c3:f9:d6:f8:f1:f1:ad:0c:a7:
                    fb:5e:0f:b2:fb:52:d1:4c:18:79:ef:df:49:c5:b7:
                    a2:a6:ce:2e:30:cc:63:e4:19:19:e4:ad:51:b0:14:
                    29:d8:37:6e:62:3a:37:7f:75:fc:d6:c1:d1:25:03:
                    c5:03:9a:82:c3:02:74:e4:90:b5:4a:aa:51:c7:5c:
                    f5:d3:60:dd:6b:50:3c:08:5a:f6:04:b9:b1:29:d4:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:AC:F3:AC:9D:D0:E3:9D:0E:39:9A:35:A4:9B:1B:47:F6:3F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:16:45:ef:d5:96:c9:06:54:cd:e9:ff:1c:02:42:aa:ca:ef:
         b7:f4:e3:ba:18:1d:a7:f3:63:ca:dd:b9:2a:f5:67:3f:68:70:
         99:e0:22:27:01:14:43:1b:7f:ab:ce:0c:c9:36:3e:41:43:46:
         cb:69:1b:15:4d:b1:37:fd:92:74:c4:cb:e5:26:69:56:7d:12:
         6e:f8:dd:f1:c6:10:21:70:da:ba:fa:a6:fb:3c:c5:6c:46:bc:
         68:e6:f6:3b:f2:69:f6:5f:32:8c:ca:43:c3:85:2c:30:b8:2c:
         37:89:68:fd:0f:1b:ee:6c:f4:28:f9:cc:54:ae:12:39:6d:87:
         fb:28:a5:81:b3:38:ff:ff:85:ef:fa:14:67:0e:05:4b:fe:72:
         c6:69:e8:51:c0:25:f8:71:7a:d9:df:d1:1f:b1:9f:fa:ca:12:
         b4:73:b0:99:39:6d:0d:8c:0f:33:65:fd:1b:41:63:58:21:2e:
         68:49:ba:c5:44:0b:60:76:9b:c9:92:7d:ff:1e:c0:ba:08:41:
         6f:a8:81:fa:f7:e3:3a:d5:bb:97:5d:f2:c3:53:0f:83:99:ba:
         d1:c0:1f:40:5b:e1:73:a5:06:da:10:c9:8c:22:ca:dc:54:81:
         43:46:f5:84:5b:e2:54:02:d9:3c:f7:67:40:be:7a:f0:82:53:
         d3:79:d6:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjpW3DDBMjKHQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw
ZmFhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk
YjgxNTAzM2YtYTJlZS00YTA1LThhMzgtODRhNmVhMzBhODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd/KSbc/wWNCoiKOisyarakjabAc8zdFBpPR
L8niofI9L50rLjLavyg24IlR8V3kMB/+IwjUPTB8fHgmbcyOKwNAdyfL4Bw60y83
dtKDmclPhd5dx/0uoOfe+lCQe74tPBWJNAd4Nvpq6Z5SbYPPFbxNPCy9Jw4VdUeH
nEBquWp7KqWNUhMYHNiJ/PWjgbgepYsWRMvgULwOZPewMqqPemefhMUZjpjHEs7D
+db48fGtDKf7Xg+y+1LRTBh5799Jxbeips4uMMxj5BkZ5K1RsBQp2DduYjo3f3X8
1sHRJQPFA5qCwwJ05JC1SqpRx1z102Dda1A8CFr2BLmxKdSKQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPinrPOsndDjnQ45mjWkmxtH9j+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4
YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNjI2ZjllMzEtNmE3Zi0z
OTJkLWJiNDYtMTljNmI5ZWM5YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj
ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw
MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2
YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYWRe/VlskGVM3p/xwCQqrK77f047oYHafzY8rduSr1Zz9ocJngIicB
FEMbf6vODMk2PkFDRstpGxVNsTf9knTEy+UmaVZ9Em743fHGECFw2rr6pvs8xWxG
vGjm9jvyafZfMozKQ8OFLDC4LDeJaP0PG+5s9Cj5zFSuEjlth/sopYGzOP//he/6
FGcOBUv+csZp6FHAJfhxetnf0R+xn/rKErRzsJk5bQ2MDzNl/RtBY1ghLmhJusVE
C2B2m8mSff8ewLoIQW+ogfr34zrVu5dd8sNTD4OZutHAH0Bb4XOlBtoQyYwiytxU
gUNG9YRb4lQC2Tz3Z0C+evCCU9N51ik=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:24 2026 by rpki-client