Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/86bfa98b-d00d-3c32-a493-79e47b689306.roa
File:                     86bfa98b-d00d-3c32-a493-79e47b689306.roa (raw, json)
Hash identifier:          TX6OAPPnxZtYdPpR2ynBtklY0FABZ05V3/TLOtEUkZM=
Subject key identifier:   1F:D8:BB:CC:43:1E:26:10:E7:BE:C3:8A:0E:E1:82:E4:3D:4C:EA:9B
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584CD13CB4D879F9406379DC1840
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/86bfa98b-d00d-3c32-a493-79e47b689306.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     11290
IP address blocks:        205.151.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b4:d8:79:f9:40:63:79:dc:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=a50acd7b-c684-46af-b978-3345d2eb0e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:d8:96:c2:65:ca:1e:3a:fa:dc:b9:e6:de:
                    62:d1:17:f4:ba:4a:8e:2e:ff:ae:32:88:36:b2:79:
                    fc:02:88:9d:7a:5a:b2:ec:64:86:54:8d:58:6f:a6:
                    77:94:fd:05:8a:89:1a:7b:33:b5:e4:0f:a2:d4:d6:
                    20:92:11:dc:76:14:88:38:c5:8a:1e:72:39:c3:a0:
                    11:84:84:de:e4:82:1e:34:11:c0:59:34:09:71:ba:
                    e2:c0:01:c8:f6:e2:63:df:13:65:58:40:e6:0a:68:
                    de:ba:ae:2b:c2:71:39:4e:d3:ab:52:e0:04:93:35:
                    de:ed:a4:7f:c5:64:95:9c:5c:b8:11:5f:5f:7c:43:
                    59:e0:23:8a:fd:3d:a6:8a:6d:0e:8e:e2:c5:b1:13:
                    56:2c:20:0e:01:f9:70:f0:d1:c1:14:99:56:e8:1a:
                    95:4c:2a:f8:95:48:9c:58:2c:51:3a:8e:0b:82:66:
                    e9:a5:04:74:91:cd:d6:19:8c:a1:83:e3:42:77:fb:
                    d2:64:b0:c4:96:57:55:b8:5e:97:d0:fd:b1:aa:a5:
                    78:a9:72:c9:b2:4e:0d:8b:fd:8d:08:e6:1a:93:86:
                    2a:b0:e2:87:8d:f2:c4:cc:c4:8f:7e:df:92:7d:c9:
                    e2:85:5f:af:09:ae:a7:3f:30:4e:6a:f9:b2:d7:4c:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D8:BB:CC:43:1E:26:10:E7:BE:C3:8A:0E:E1:82:E4:3D:4C:EA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/86bfa98b-d00d-3c32-a493-79e47b689306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:40:dc:32:e3:7f:96:9e:e1:b7:61:02:4d:6d:cc:c2:ae:
         6b:ad:f4:a5:ce:0f:b2:3d:8e:6a:0d:5b:8f:4e:7e:20:54:c2:
         c8:0e:18:ea:23:54:13:2a:af:4f:3d:b0:80:67:46:12:2a:f2:
         4a:21:b7:98:8f:58:ee:cc:50:64:ad:95:60:48:a6:61:61:7b:
         a7:c7:ea:fc:3f:18:f1:73:cb:34:eb:96:a1:c5:e4:51:9d:a6:
         0e:91:c3:d3:e6:53:40:78:b2:ea:70:3c:38:d1:54:e1:50:54:
         6a:0f:48:0d:3f:85:24:ae:96:b5:3d:f1:2d:b4:27:21:f7:ce:
         7d:69:16:c7:b6:61:2e:54:aa:d2:62:36:e6:0c:eb:21:f7:3f:
         9f:35:c0:a8:6e:64:9c:ac:bb:d5:2a:7b:98:aa:32:06:8a:f1:
         08:9f:b6:a4:45:9f:0d:53:3e:d4:7b:4a:3f:82:ca:78:75:5f:
         aa:d2:b9:9f:94:15:69:2b:1c:7d:d2:bd:e9:eb:c5:b3:96:f1:
         1f:b1:4f:a7:8e:76:fe:5c:73:94:f6:4d:41:1d:8c:4e:f2:54:
         7d:1b:c9:30:76:a3:1e:89:74:5e:a3:52:47:e3:38:5f:48:42:
         a4:0f:cb:3f:e4:81:07:4a:6e:35:e4:92:5b:32:c6:02:a6:5e:
         04:2a:62:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPLTYeflAY3ncGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
YTUwYWNkN2ItYzY4NC00NmFmLWI5NzgtMzM0NWQyZWIwZThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGnYlsJlyh46+ty55t5i0Rf0ukqOLv+uMog2
snn8Aoidelqy7GSGVI1Yb6Z3lP0FiokaezO15A+i1NYgkhHcdhSIOMWKHnI5w6AR
hITe5IIeNBHAWTQJcbriwAHI9uJj3xNlWEDmCmjeuq4rwnE5TtOrUuAEkzXe7aR/
xWSVnFy4EV9ffENZ4COK/T2mim0OjuLFsRNWLCAOAflw8NHBFJlW6BqVTCr4lUic
WCxROo4LgmbppQR0kc3WGYyhg+NCd/vSZLDElldVuF6X0P2xqqV4qXLJsk4Ni/2N
COYak4YqsOKHjfLEzMSPft+SfcnihV+vCa6nPzBOavmy10zAYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/Yu8xDHiYQ577Dig7hguQ9TOqbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvODZiZmE5OGItZDAwZC0z
YzMyLWE0OTMtNzllNDdiNjg5MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHyQNwy43+WnuG3YQJNbczCrmut9KXOD7I9jmoNW49OfiBUwsgOGOoj
VBMqr089sIBnRhIq8koht5iPWO7MUGStlWBIpmFhe6fH6vw/GPFzyzTrlqHF5FGd
pg6Rw9PmU0B4supwPDjRVOFQVGoPSA0/hSSulrU98S20JyH3zn1pFse2YS5UqtJi
NuYM6yH3P581wKhuZJysu9Uqe5iqMgaK8QiftqRFnw1TPtR7Sj+Cynh1X6rSuZ+U
FWkrHH3SvenrxbOW8R+xT6eOdv5cc5T2TUEdjE7yVH0byTB2ox6JdF6jUkfjOF9I
QqQPyz/kgQdKbjXkklsyxgKmXgQqYjE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:10 2026 by rpki-client