Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa
File:                     d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa (raw, json)
Hash identifier:          l/pzTS249yzx5tvhm8Ty2lTiG2qjDYymNlPzvxFPLKY=
Subject key identifier:   43:8B:C7:98:5B:F5:C1:A0:93:61:E5:37:98:66:20:23:81:24:C6:14
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584C9EFC683AE09D55D85941FBAB
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa
Signing time:             Fri 23 Jan 2026 14:00:38 +0000
ROA not before:           Fri 23 Jan 2026 14:00:38 +0000
ROA not after:            Thu 23 Apr 2026 13:00:38 +0000
asID:                     1640
IP address blocks:        104.245.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9e:fc:68:3a:e0:9d:55:d8:59:41:fb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Jan 23 14:00:38 2026 GMT
            Not After : Apr 23 13:00:38 2026 GMT
        Subject: CN=28b06514-4b5f-41c4-bc06-6fb33463f6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:ea:59:20:8e:46:3f:82:e4:33:aa:54:e7:
                    cf:f8:36:95:e8:f7:ff:f7:3a:d1:05:ea:23:05:91:
                    71:21:76:76:55:84:ac:c1:85:2c:4b:72:73:6e:24:
                    c7:8a:d5:74:67:87:d6:f9:d8:a1:4c:09:3f:4b:5e:
                    61:98:7d:6c:66:e2:34:bb:2e:2d:8c:58:34:0c:a0:
                    bb:a8:c3:18:79:03:8d:c2:17:b4:03:29:26:5e:ad:
                    69:ea:ef:20:1e:21:37:c5:97:1a:1c:51:1f:7a:9c:
                    a9:d1:54:53:49:6d:7f:6f:36:be:0c:b2:cd:ef:ea:
                    12:c0:fd:42:43:05:64:3d:e4:3d:c8:8a:3a:07:92:
                    35:4b:b6:03:9a:cb:34:3f:c2:ff:3e:ef:f5:3c:a2:
                    5d:98:ab:60:53:0b:8e:1b:63:b7:63:34:05:86:ea:
                    73:07:66:05:81:1b:30:94:6e:f7:f5:43:79:eb:6e:
                    12:45:67:b9:f6:a1:c3:41:0c:4f:aa:7a:28:63:58:
                    c3:cd:6a:c8:72:66:88:57:df:f9:b9:84:6c:81:29:
                    bd:a6:93:32:1a:a4:a8:ab:90:d8:04:d6:4a:61:83:
                    e2:c7:56:7b:07:65:5b:c0:a0:66:84:d3:c3:df:3b:
                    db:f9:a4:78:f9:f7:5e:d0:82:61:78:1f:ea:9c:1f:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8B:C7:98:5B:F5:C1:A0:93:61:E5:37:98:66:20:23:81:24:C6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:07:f6:34:46:2c:60:f2:15:03:ce:27:72:0a:9b:b9:74:
         6b:53:68:de:b7:61:12:1c:da:10:cb:03:dc:5c:fe:dc:e2:bf:
         b9:0c:b4:d4:56:49:57:78:f8:44:f6:86:51:3a:3c:fe:b4:d9:
         b6:52:90:64:75:08:7a:de:79:0d:e7:9f:81:e6:e1:57:e2:63:
         7a:fd:2b:f9:56:37:88:28:44:8e:f7:67:24:ae:1b:ea:94:f5:
         52:51:53:f8:15:bb:86:b4:05:42:12:d1:b4:7b:e8:8e:00:bd:
         4c:e3:05:0a:7e:e9:38:52:55:35:09:04:16:90:0f:53:d2:c3:
         11:8a:00:85:fe:76:13:12:53:63:8e:2d:cd:fd:06:fc:a9:c3:
         14:0e:62:54:ff:1f:82:0b:2f:ea:8c:0e:91:e4:9d:39:ae:41:
         e5:cf:f8:b7:17:d0:b5:23:63:c9:8f:ba:01:e3:ed:14:a3:7f:
         a1:3f:5a:50:32:1e:d0:ef:64:59:97:bb:f2:87:21:db:fb:7d:
         c0:f9:78:3f:07:03:45:24:da:ad:22:29:10:93:3b:71:b6:4b:
         6c:c4:bc:6b:13:13:23:dd:45:bb:30:f2:c0:f1:08:2b:f2:30:
         02:a4:8f:9d:b2:82:4b:36:7d:ea:31:c0:90:43:d9:dc:56:bb:
         a4:81:b9:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/Gg64J1V2FlB+6swDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3
YjUzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk
MjhiMDY1MTQtNGI1Zi00MWM0LWJjMDYtNmZiMzM0NjNmNmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl7qWSCORj+C5DOqVOfP+DaV6Pf/9zrRBeoj
BZFxIXZ2VYSswYUsS3JzbiTHitV0Z4fW+dihTAk/S15hmH1sZuI0uy4tjFg0DKC7
qMMYeQONwhe0AykmXq1p6u8gHiE3xZcaHFEfepyp0VRTSW1/bza+DLLN7+oSwP1C
QwVkPeQ9yIo6B5I1S7YDmss0P8L/Pu/1PKJdmKtgUwuOG2O3YzQFhupzB2YFgRsw
lG739UN5624SRWe59qHDQQxPqnooY1jDzWrIcmaIV9/5uYRsgSm9ppMyGqSoq5DY
BNZKYYPix1Z7B2VbwKBmhNPD3zvb+aR4+fde0IJheB/qnB+V9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOLx5hb9cGgk2HlN5hmICOBJMYUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4
ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvZDlhMGQ5MWItZjY1MS0z
MmE4LTlkZjItM2ZjYmUyYTcwODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3
ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj
N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4
OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPWMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsWB/Y0Rixg8hUDzidyCpu5dGtTaN63YRIc2hDLA9xc/tziv7kMtNRW
SVd4+ET2hlE6PP602bZSkGR1CHreeQ3nn4Hm4VfiY3r9K/lWN4goRI73ZySuG+qU
9VJRU/gVu4a0BUIS0bR76I4AvUzjBQp+6ThSVTUJBBaQD1PSwxGKAIX+dhMSU2OO
Lc39BvypwxQOYlT/H4ILL+qMDpHknTmuQeXP+LcX0LUjY8mPugHj7RSjf6E/WlAy
HtDvZFmXu/KHIdv7fcD5eD8HA0Uk2q0iKRCTO3G2S2zEvGsTEyPdRbsw8sDxCCvy
MAKkj52ygks2feoxwJBD2dxWu6SBuUM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:50 2026 by rpki-client