Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
File:                     88f16770-79cb-31a3-a635-4b9256702cdb.roa (raw, json)
Hash identifier:          ddpRxP0qc7SamLzitE0BnYE5CO+Ku+xDa3UROAswu1k=
Subject key identifier:   AF:CB:D0:C6:1F:9B:60:CD:1F:27:F7:2B:E4:69:ED:D5:61:16:A3:ED
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037D0222FACDC26B759EF200
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.162.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:02:22:fa:cd:c2:6b:75:9e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=03c2f67d-c4e9-46ce-8f1e-0d389bc3a07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:79:8b:0e:d5:99:cb:30:cd:7b:e8:9a:31:
                    5d:85:f1:b1:ca:92:c2:77:2c:ce:97:4b:16:d4:fd:
                    18:6f:cd:1d:f0:c6:44:2d:8a:6d:1d:17:21:9f:01:
                    45:2f:6b:eb:fe:c3:37:9f:52:1a:cd:fb:49:18:1b:
                    9e:ae:dc:61:5b:1c:41:88:30:f3:d1:12:9e:ca:92:
                    3b:75:4b:51:1a:60:cf:74:82:11:87:f5:47:1c:e7:
                    6b:b8:0d:2b:25:a9:5a:c9:60:71:0d:cf:d3:aa:85:
                    28:1d:22:f4:5b:f1:54:52:dd:03:90:8f:c3:cf:24:
                    dc:7b:c3:92:0b:aa:6a:a9:23:71:db:cd:fa:87:22:
                    57:08:1f:00:16:5f:a1:f5:b4:59:ed:1b:20:a7:07:
                    c7:b6:2b:a7:3d:17:b5:c7:20:8d:f5:df:f0:f6:3c:
                    02:6f:fb:be:c7:8d:af:54:1e:ac:ed:28:14:f5:3a:
                    ea:ad:6d:b7:4d:00:22:00:33:78:80:25:52:c5:72:
                    21:6d:20:ff:cd:bc:53:da:ab:48:55:ce:33:af:c6:
                    71:eb:3d:96:c2:0a:6c:c9:98:cc:49:c4:1b:d3:f1:
                    eb:65:60:a7:4e:04:08:33:83:d2:f1:59:a3:65:18:
                    a7:aa:5d:40:7e:2b:0c:c3:d8:38:49:40:94:63:4c:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:D0:C6:1F:9B:60:CD:1F:27:F7:2B:E4:69:ED:D5:61:16:A3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:58:e8:60:65:64:f2:89:5a:07:fb:2e:a8:a6:f2:62:c3:
         90:1b:a1:15:f4:b9:c3:9f:8c:28:35:18:d7:e6:a9:70:ce:52:
         e9:c2:47:97:f8:c8:17:0c:02:29:86:4d:5b:04:47:fb:24:d5:
         d4:cc:97:83:ea:a5:c3:82:64:09:f0:6c:21:d2:24:51:3c:32:
         9b:51:3e:30:1e:96:d2:12:ad:81:7e:73:f3:a8:b3:cc:4b:38:
         e0:6c:de:03:36:e2:bd:f8:50:da:e0:2f:75:4f:9d:ae:d4:d5:
         09:04:7d:18:8a:ad:62:ea:a5:3b:b3:41:b6:7f:6b:cf:c8:2b:
         47:9d:c9:e6:45:fa:43:fa:45:66:d0:3d:4b:04:a1:23:54:00:
         36:be:f2:0d:2c:e1:30:f7:ab:08:f9:96:95:35:52:1e:0d:5a:
         d3:71:c5:0d:d2:f8:a2:0c:af:ce:4e:3b:e9:5a:c0:d2:2c:0f:
         f4:7a:ac:28:39:6d:c9:71:e5:ea:a4:0c:65:f0:d8:08:eb:f8:
         92:e1:d9:ff:3d:e6:dc:ed:f6:ba:d2:ef:d7:a4:9c:f9:3c:be:
         35:d1:0f:e8:cc:3f:2e:f0:c9:8a:f3:65:bc:09:ee:a1:81:73:
         d4:05:72:51:c0:1d:d5:4f:fd:cb:8d:25:1f:51:62:fa:b6:3a:
         10:e4:ef:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQIi+s3Ca3We8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MDNjMmY2N2QtYzRlOS00NmNlLThmMWUtMGQzODliYzNhMDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL15iw7VmcswzXvomjFdhfGxypLCdyzOl0sW
1P0Yb80d8MZELYptHRchnwFFL2vr/sM3n1IazftJGBuertxhWxxBiDDz0RKeypI7
dUtRGmDPdIIRh/VHHOdruA0rJalayWBxDc/TqoUoHSL0W/FUUt0DkI/DzyTce8OS
C6pqqSNx2836hyJXCB8AFl+h9bRZ7RsgpwfHtiunPRe1xyCN9d/w9jwCb/u+x42v
VB6s7SgU9TrqrW23TQAiADN4gCVSxXIhbSD/zbxT2qtIVc4zr8Zx6z2WwgpsyZjM
ScQb0/HrZWCnTgQIM4PS8VmjZRinql1AfisMw9g4SUCUY0zW6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/L0MYfm2DNHyf3K+Rp7dVhFqPtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvODhmMTY3NzAtNzljYi0z
MWEzLWE2MzUtNGI5MjU2NzAyY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0RWOhgZWTyiVoH+y6opvJiw5AboRX0ucOfjCg1GNfmqXDOUunCR5f4
yBcMAimGTVsER/sk1dTMl4PqpcOCZAnwbCHSJFE8MptRPjAeltISrYF+c/Oos8xL
OOBs3gM24r34UNrgL3VPna7U1QkEfRiKrWLqpTuzQbZ/a8/IK0edyeZF+kP6RWbQ
PUsEoSNUADa+8g0s4TD3qwj5lpU1Uh4NWtNxxQ3S+KIMr85OO+lawNIsD/R6rCg5
bclx5eqkDGXw2Ajr+JLh2f895tzt9rrS79eknPk8vjXRD+jMPy7wyYrzZbwJ7qGB
c9QFclHAHdVP/cuNJR9RYvq2OhDk75c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:06 2026 by rpki-client