Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/dc8de600-5727-3add-9d95-4f3d4cae5940.roa
File:                     dc8de600-5727-3add-9d95-4f3d4cae5940.roa (raw, json)
Hash identifier:          zYXU3WdOtOVjqsZSO/kKallGOKRSSKPsL3QjAoxpjuA=
Subject key identifier:   8F:9F:D8:F1:C2:AE:B0:F6:58:C9:4C:0D:1E:B4:98:A9:F7:08:14:78
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F4328584CE1FCCA490208562F3F4F0100
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/dc8de600-5727-3add-9d95-4f3d4cae5940.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        207.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:ca:49:02:08:56:2f:3f:4f:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=804f3f7d-bb9b-4ec5-a77d-3503f547e318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:68:8a:bb:85:a0:1b:51:e2:58:1b:d2:29:
                    b8:6b:37:94:c7:ad:11:44:15:ce:4c:1c:6b:d7:1a:
                    6a:1f:04:61:4f:5e:0f:c1:c6:29:ff:d5:77:7a:82:
                    c7:eb:8d:05:7d:9f:e7:97:ab:a2:91:8e:8e:0c:df:
                    0c:c8:59:ba:b7:a3:dc:0a:44:cf:4e:38:b1:94:25:
                    98:e8:05:82:9a:64:27:93:a1:fc:c7:43:b5:cc:3e:
                    2e:90:d4:17:59:53:56:39:be:a3:ca:58:34:bc:27:
                    86:0b:ef:11:40:47:31:33:84:17:f0:47:77:a2:34:
                    95:05:8e:62:5e:b4:34:b4:1a:5b:61:30:e6:d6:4e:
                    a5:ca:e9:63:f6:a8:83:10:c1:8e:33:65:ce:e5:87:
                    a0:f8:e2:ed:08:82:84:54:c6:43:bd:2c:67:f6:24:
                    04:0e:dc:81:46:9c:76:d2:18:3a:00:56:c4:8d:d4:
                    a2:94:3e:90:4f:12:ba:7f:c6:2a:a1:d1:db:ed:6b:
                    c7:30:d6:6a:9c:a2:a5:d8:be:06:ea:4c:85:20:d4:
                    73:92:84:03:d1:44:4b:55:cc:f2:2b:fa:7c:59:f6:
                    84:35:b3:5c:2d:e5:ee:6c:90:f9:59:79:e4:06:6f:
                    01:85:17:ac:71:67:c9:82:81:15:df:aa:f5:3b:11:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9F:D8:F1:C2:AE:B0:F6:58:C9:4C:0D:1E:B4:98:A9:F7:08:14:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/dc8de600-5727-3add-9d95-4f3d4cae5940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:39:ac:83:0e:ff:ba:cb:c6:13:83:6d:d5:29:0c:45:d7:24:
         23:b1:d4:2e:43:78:8c:aa:8b:ae:eb:0d:61:47:b4:46:98:13:
         40:8f:9e:33:16:8b:ee:36:55:da:e7:8f:30:f1:a4:e8:96:e5:
         ee:76:85:0f:a9:38:b8:39:16:7d:a4:5b:01:3e:f5:bb:7f:be:
         65:11:d4:37:08:eb:42:c9:bf:dc:aa:e4:db:39:7e:e8:df:72:
         ee:ad:2b:b0:2e:15:2b:32:76:b9:12:90:86:5b:fe:2b:c3:00:
         70:99:ff:c3:0f:10:d1:58:e9:bb:ed:da:16:96:0d:66:29:26:
         99:75:b4:51:a3:53:97:ce:09:79:d3:c5:4a:ba:9f:7c:76:d3:
         96:2e:f5:2d:5e:eb:64:c4:6a:e5:78:89:50:f9:db:ae:4f:de:
         b2:c6:64:01:0c:ea:b4:4c:a7:50:b0:ed:27:9b:fe:25:7e:13:
         96:b0:4e:22:1c:74:6f:80:86:71:0f:23:8d:e1:63:e9:7c:dd:
         ee:7d:51:73:e2:0e:b1:47:8d:c9:2a:1d:76:c8:4b:89:a4:11:
         e3:03:15:4c:bf:dd:c4:c8:9c:e2:f9:df:0f:84:f3:8b:6c:25:
         af:7a:df:97:fe:60:f5:62:2f:10:71:85:73:34:3a:e4:70:66:
         50:9c:7d:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/MpJAghWLz9PAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNjODgwZmQtMTdkNi00YjM3LTk1MzctNDU2ZWU2MzY5
ZWQ0MB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk
ODA0ZjNmN2QtYmI5Yi00ZWM1LWE3N2QtMzUwM2Y1NDdlMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOVoiruFoBtR4lgb0im4azeUx60RRBXOTBxr
1xpqHwRhT14PwcYp/9V3eoLH640FfZ/nl6uikY6ODN8MyFm6t6PcCkTPTjixlCWY
6AWCmmQnk6H8x0O1zD4ukNQXWVNWOb6jylg0vCeGC+8RQEcxM4QX8Ed3ojSVBY5i
XrQ0tBpbYTDm1k6lyulj9qiDEMGOM2XO5Yeg+OLtCIKEVMZDvSxn9iQEDtyBRpx2
0hg6AFbEjdSilD6QTxK6f8YqodHb7WvHMNZqnKKl2L4G6kyFINRzkoQD0URLVczy
K/p8WfaENbNcLeXubJD5WXnkBm8BhRescWfJgoEV36r1OxGGeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+f2PHCrrD2WMlMDR60mKn3CBR4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2M4
ODBmZC0xN2Q2LTRiMzctOTUzNy00NTZlZTYzNjllZDQvZGM4ZGU2MDAtNTcyNy0z
YWRkLTlkOTUtNGYzZDRjYWU1OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNjODgwZmQtMTdkNi00YjM3LTk1
MzctNDU2ZWU2MzY5ZWQ0L2QzYzg4MGZkLTE3ZDYtNGIzNy05NTM3LTQ1NmVlNjM2
OWVkNC5jcmwwHwYDVR0jBBgwFoAUYvCQUJVtCdjqk9lfUIr65R55EwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2M4ODBmZC0xN2Q2LTRiMzctOTUzNy00NTZl
ZTYzNjllZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJU5rIMO/7rLxhODbdUpDEXXJCOx1C5DeIyqi67rDWFHtEaYE0CPnjMW
i+42VdrnjzDxpOiW5e52hQ+pOLg5Fn2kWwE+9bt/vmUR1DcI60LJv9yq5Ns5fujf
cu6tK7AuFSsydrkSkIZb/ivDAHCZ/8MPENFY6bvt2haWDWYpJpl1tFGjU5fOCXnT
xUq6n3x205Yu9S1e62TEauV4iVD5265P3rLGZAEM6rRMp1Cw7Seb/iV+E5awTiIc
dG+AhnEPI43hY+l83e59UXPiDrFHjckqHXbIS4mkEeMDFUy/3cTInOL53w+E84ts
Ja9635f+YPViLxBxhXM0OuRwZlCcfZo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:41 2026 by rpki-client