Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
File:                     0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa (raw, json)
Hash identifier:          An28h8HIrmuV7+G5R33RkvKZTN+oVAUp313vtiERHkQ=
Subject key identifier:   0F:E6:86:03:5C:49:D5:4D:E5:7B:BD:34:87:CD:4B:43:3F:FE:67:11
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584CE1FCCEACC8A6EC10269D1580
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     8987
IP address blocks:        198.22.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:ce:ac:c8:a6:ec:10:26:9d:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=797a4550-044c-40ad-a556-6f2714f00192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:3c:96:df:47:1a:a1:4a:26:9d:92:6f:2f:
                    23:b2:e0:ab:8f:0c:aa:90:c2:c1:57:c7:ac:3d:e8:
                    87:fc:cf:ba:70:0c:51:ee:61:44:23:19:fe:1c:d9:
                    2c:51:42:f4:43:09:57:d2:02:c0:06:2f:9d:8a:3e:
                    ee:b8:c2:91:89:4c:36:fb:2c:3b:33:6b:47:7d:bb:
                    83:68:e1:13:97:a0:14:26:bf:5d:76:8f:7a:76:4e:
                    75:eb:07:f8:97:29:a9:cc:0e:a8:15:af:d8:30:c3:
                    1d:a3:99:86:c1:31:f4:12:b3:70:f0:24:13:35:1a:
                    2f:a5:b4:d3:93:ff:22:2c:da:a3:be:2b:1e:ed:0f:
                    79:32:7d:68:a2:5b:ac:40:c6:9e:69:25:ca:ab:0d:
                    e8:03:48:91:0e:44:be:ea:9b:3a:68:9e:69:d2:fb:
                    e0:99:0c:b0:45:33:e7:de:ff:af:0f:7e:3c:86:c2:
                    6e:a2:42:63:cf:cb:5c:11:f7:51:38:2f:e4:85:72:
                    bc:d3:2f:26:f6:6e:eb:db:89:e9:18:83:07:5d:6d:
                    37:06:4e:61:a4:67:75:20:96:bf:00:95:e9:24:9c:
                    e4:5c:f1:a7:a6:3d:da:e3:0c:9d:60:ea:16:98:aa:
                    f3:7c:f0:52:a4:3a:3a:9f:a0:99:59:4b:ac:e7:b4:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:86:03:5C:49:D5:4D:E5:7B:BD:34:87:CD:4B:43:3F:FE:67:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cb:71:29:b7:fc:17:18:cc:5d:c3:2f:aa:50:21:11:33:b0:
         b5:27:77:79:b1:18:c5:5f:77:98:f8:41:48:b9:0b:c7:c0:f7:
         55:2e:07:ae:8a:15:45:0f:d6:e8:44:19:61:ae:94:dc:87:df:
         14:f3:79:c6:0d:d6:26:00:68:3c:6e:cc:cd:6d:78:30:41:c8:
         ed:ba:2c:27:09:1a:3e:54:80:d3:08:fa:4e:d0:a4:a6:1e:de:
         3e:c4:3c:7d:ea:ca:26:02:41:bd:71:ac:47:39:87:71:4a:4f:
         2d:a4:a0:96:99:df:01:8c:08:4a:ba:f5:34:3c:64:6e:22:b6:
         84:25:8a:3a:1f:16:7c:32:5e:ab:da:e1:d5:a8:dd:39:d9:13:
         00:d6:49:1a:3a:ff:f9:09:98:16:61:c8:6d:67:04:5e:27:92:
         b4:53:ec:06:73:df:a8:77:35:f5:6a:8e:c9:c2:84:9e:61:d1:
         14:77:ff:13:d7:e4:18:81:e4:78:7c:ed:1e:1c:f1:38:d5:4a:
         93:66:a0:dd:f3:d5:05:5b:46:56:e5:60:5e:e6:f9:bf:17:62:
         54:37:ba:8c:26:43:3a:bb:c7:b0:e3:d2:d7:be:80:42:0d:19:
         bf:c6:ee:2e:3e:48:2f:37:e7:e3:cb:09:87:10:4d:30:78:a0:
         0f:dc:ef:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/M6syKbsECadFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh
YTA5MB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk
Nzk3YTQ1NTAtMDQ0Yy00MGFkLWE1NTYtNmYyNzE0ZjAwMTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWg8lt9HGqFKJp2Sby8jsuCrjwyqkMLBV8es
PeiH/M+6cAxR7mFEIxn+HNksUUL0QwlX0gLABi+dij7uuMKRiUw2+yw7M2tHfbuD
aOETl6AUJr9ddo96dk516wf4lympzA6oFa/YMMMdo5mGwTH0ErNw8CQTNRovpbTT
k/8iLNqjvise7Q95Mn1oolusQMaeaSXKqw3oA0iRDkS+6ps6aJ5p0vvgmQywRTPn
3v+vD348hsJuokJjz8tcEfdROC/khXK80y8m9m7r24npGIMHXW03Bk5hpGd1IJa/
AJXpJJzkXPGnpj3a4wydYOoWmKrzfPBSpDo6n6CZWUus57QISwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/mhgNcSdVN5Xu9NIfNS0M//mcRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2
NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvMGRkYTc4MTAtNzU0MS0z
OWMxLTk1YWQtOWNmOTJlNmU1OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5
OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk
YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0
MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhYMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzLcSm3/BcYzF3DL6pQIREzsLUnd3mxGMVfd5j4QUi5C8fA91UuB66K
FUUP1uhEGWGulNyH3xTzecYN1iYAaDxuzM1teDBByO26LCcJGj5UgNMI+k7QpKYe
3j7EPH3qyiYCQb1xrEc5h3FKTy2koJaZ3wGMCEq69TQ8ZG4itoQlijofFnwyXqva
4dWo3TnZEwDWSRo6//kJmBZhyG1nBF4nkrRT7AZz36h3NfVqjsnChJ5h0RR3/xPX
5BiB5Hh87R4c8TjVSpNmoN3z1QVbRlblYF7m+b8XYlQ3uowmQzq7x7Dj0te+gEIN
Gb/G7i4+SC835+PLCYcQTTB4oA/c7/k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:29 2026 by rpki-client