Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa
File:                     533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa (raw, json)
Hash identifier:          drmuplYb65mC+BVkSBwha6nTlA93DggRr66/i+Fc+P4=
Subject key identifier:   C7:0F:F9:68:F9:B2:9D:EC:23:93:C6:32:2F:59:4D:9B:CE:51:6E:7D
Certificate issuer:       /CN=78308f5f-20d8-4869-b8d0-cced78ce51b7
Certificate serial:       010D0C9F4328584CF4223371115642BAD244F6A0
Authority key identifier: CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        140.235.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:33:71:11:56:42:ba:d2:44:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78308f5f-20d8-4869-b8d0-cced78ce51b7
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=bd9aef33-8010-49b9-8540-602311ed3eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:d2:c8:28:01:97:7c:ae:7b:fb:ea:d5:76:
                    54:61:cb:5c:c2:d3:d2:14:48:53:aa:59:33:94:ac:
                    28:40:73:39:47:89:ea:74:fd:7b:23:49:ae:6b:8a:
                    e0:2b:f0:a5:88:7d:93:bb:a0:b0:d8:14:89:46:9a:
                    03:e0:92:b9:c6:7f:af:ab:4d:4b:70:5d:51:60:7e:
                    81:82:79:86:06:e9:69:c4:0f:c2:f8:1f:51:f0:80:
                    a2:b6:cd:a9:0c:6b:62:52:b4:85:27:38:9a:7f:cd:
                    65:f0:d2:41:36:5d:ab:e6:58:5f:5a:62:0f:78:42:
                    38:a2:65:38:9c:d4:66:fe:79:82:d7:e3:79:2c:25:
                    93:43:9a:13:47:a3:a1:05:a1:9a:78:4c:a8:92:79:
                    9f:a9:5e:69:ad:68:a1:df:2d:de:a6:ef:43:a0:20:
                    7b:6a:d1:02:3e:75:46:ce:47:26:13:6d:20:63:c1:
                    d0:7e:92:13:9c:89:9e:5f:98:2d:e1:98:23:0c:67:
                    4d:a4:d6:c3:54:7e:d6:57:67:eb:95:40:1a:0f:aa:
                    de:aa:6e:53:a4:b4:66:7d:5c:71:85:d7:66:19:34:
                    f2:80:6d:8e:7c:1b:0f:95:54:45:6d:4d:00:9e:10:
                    57:4f:0b:93:15:5a:75:9f:81:42:91:bf:10:e9:12:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:F9:68:F9:B2:9D:EC:23:93:C6:32:2F:59:4D:9B:CE:51:6E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl

            X509v3 Authority Key Identifier:
                keyid:CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d4:68:54:4d:eb:b2:bc:ad:32:30:08:23:c0:24:05:56:66:
         cc:89:65:33:a3:6c:39:97:a9:37:cf:7c:c7:f1:3c:f1:a5:6e:
         1e:c3:ac:bc:fb:82:de:1c:28:5d:36:78:b6:46:55:7b:98:f9:
         8d:6d:fb:a7:ef:36:af:86:12:90:b5:d4:22:ea:12:85:db:a7:
         08:91:00:c8:c1:ca:a7:c3:d1:b3:3e:7c:04:de:11:32:d0:45:
         b3:69:b2:73:14:59:ce:bc:f5:bc:26:fe:c1:25:9b:b6:2a:1b:
         d4:29:70:00:96:04:c4:58:67:67:ff:7b:0b:ed:cf:7a:00:ad:
         bf:ae:1e:35:f0:ed:be:9d:54:e9:e1:72:c1:3e:2c:83:c4:8a:
         18:f8:88:6e:68:89:37:6f:4b:22:57:54:ef:b8:50:79:7c:f3:
         af:66:7d:42:cb:19:82:21:0b:de:59:c6:1e:33:06:2b:93:d1:
         95:de:37:72:85:ac:53:1c:a5:f8:13:f8:20:a0:1b:6e:40:94:
         7b:01:59:4a:11:69:16:7f:fd:08:b2:eb:fc:b8:f8:4d:f5:4c:
         50:49:fb:4b:d5:39:1b:a0:ab:26:36:54:5f:60:fc:19:57:33:
         2b:a9:e0:c8:89:21:24:08:1b:2d:ed:33:2e:1a:aa:ed:bf:06:
         49:18:74:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IjNxEVZCutJE9qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzMDhmNWYtMjBkOC00ODY5LWI4ZDAtY2NlZDc4Y2U1
MWI3MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
YmQ5YWVmMzMtODAxMC00OWI5LTg1NDAtNjAyMzExZWQzZWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlfSyCgBl3yue/vq1XZUYctcwtPSFEhTqlkz
lKwoQHM5R4nqdP17I0mua4rgK/CliH2Tu6Cw2BSJRpoD4JK5xn+vq01LcF1RYH6B
gnmGBulpxA/C+B9R8ICits2pDGtiUrSFJziaf81l8NJBNl2r5lhfWmIPeEI4omU4
nNRm/nmC1+N5LCWTQ5oTR6OhBaGaeEyoknmfqV5prWih3y3epu9DoCB7atECPnVG
zkcmE20gY8HQfpITnImeX5gt4ZgjDGdNpNbDVH7WV2frlUAaD6reqm5TpLRmfVxx
hddmGTTygG2OfBsPlVRFbU0AnhBXTwuTFVp1n4FCkb8Q6RLXmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcP+Wj5sp3sI5PGMi9ZTZvOUW59MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ODMw
OGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2VkNzhjZTUxYjcvNTMzYzEwMTAtODZjMS0z
YjEzLWFkMmItNjM0N2E1YjhiZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzgzMDhmNWYtMjBkOC00ODY5LWI4
ZDAtY2NlZDc4Y2U1MWI3Lzc4MzA4ZjVmLTIwZDgtNDg2OS1iOGQwLWNjZWQ3OGNl
NTFiNy5jcmwwHwYDVR0jBBgwFoAUzxjvBs0QwE4RrUmNI7dooS39h/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ODMwOGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2Vk
NzhjZTUxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOv4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfUaFRN67K8rTIwCCPAJAVWZsyJZTOjbDmXqTfPfMfxPPGlbh7DrLz7
gt4cKF02eLZGVXuY+Y1t+6fvNq+GEpC11CLqEoXbpwiRAMjByqfD0bM+fATeETLQ
RbNpsnMUWc689bwm/sElm7YqG9QpcACWBMRYZ2f/ewvtz3oArb+uHjXw7b6dVOnh
csE+LIPEihj4iG5oiTdvSyJXVO+4UHl8869mfULLGYIhC95Zxh4zBiuT0ZXeN3KF
rFMcpfgT+CCgG25AlHsBWUoRaRZ//Qiy6/y4+E31TFBJ+0vVORugqyY2VF9g/BlX
Myup4MiJISQIGy3tMy4aqu2/BkkYdEM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:35 2026 by rpki-client