Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0de6db2e-c66d-3f31-85c2-8f49ef27e8f4.roa
File:                     0de6db2e-c66d-3f31-85c2-8f49ef27e8f4.roa (raw, json)
Hash identifier:          9pScp9Co5gbE1i/3p8XCTPo1/0vmmimH7nUMrtWoUYw=
Subject key identifier:   C2:7C:55:D6:70:3C:D5:5B:B8:88:7C:C9:25:E2:0D:A4:6F:6D:70:F8
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC216F6C7345855B0BC0C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0de6db2e-c66d-3f31-85c2-8f49ef27e8f4.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        128.109.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:16:f6:c7:34:58:55:b0:bc:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=51714771-7245-40f5-ba72-1c23765757db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:35:74:2f:f4:8a:64:eb:27:48:76:09:99:
                    e5:b1:7b:cc:6a:8c:62:b5:27:54:b3:6a:00:bb:59:
                    68:bd:98:38:2c:b7:a0:a2:4b:22:27:3b:d7:ed:6d:
                    2b:9b:15:7a:20:16:88:88:5e:01:84:ae:c1:b5:55:
                    bc:78:63:8b:46:cd:e8:3e:97:60:ca:ea:64:13:d0:
                    70:65:a6:f3:8b:85:b2:40:df:77:42:18:8d:58:40:
                    8f:e8:86:cd:03:73:12:13:67:ce:f7:33:50:31:47:
                    5b:bc:58:f6:28:c3:d0:df:8c:9b:19:2c:8f:dd:6b:
                    4b:2e:51:ff:11:00:5c:c8:d4:99:a3:47:7e:07:47:
                    d4:c5:a3:ba:ef:c3:7b:ca:b5:51:30:3c:18:57:78:
                    2a:56:cd:30:60:4f:5f:36:99:e5:74:ad:57:9b:90:
                    cd:27:7e:3d:42:9f:35:e4:e7:e9:48:25:18:94:05:
                    45:9f:32:42:63:af:65:0f:e3:dd:60:d0:e7:a9:91:
                    84:3f:49:1e:10:5c:70:bd:29:7b:76:cf:66:32:c5:
                    9a:8b:c4:7f:38:e3:cc:fd:24:0b:56:52:20:92:7d:
                    82:65:cb:e4:e5:f0:19:98:19:7c:d5:c3:04:5f:3a:
                    60:ec:71:6e:53:4d:d9:fa:40:56:45:00:07:86:bb:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:55:D6:70:3C:D5:5B:B8:88:7C:C9:25:E2:0D:A4:6F:6D:70:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0de6db2e-c66d-3f31-85c2-8f49ef27e8f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:b8:18:91:8e:e7:18:42:f8:d7:31:ba:62:d2:4f:bd:5c:
         da:e8:81:a6:e6:eb:9d:ae:b4:05:62:b3:72:06:34:ee:dc:73:
         18:3a:98:36:6b:29:cb:4d:a2:f7:3a:80:c5:cf:25:b6:7c:90:
         a8:e3:9c:95:41:c2:d6:71:90:1e:31:11:f1:b6:e6:17:f8:34:
         c5:a6:bd:94:97:d5:d9:02:0b:b1:f7:3a:82:af:19:5e:9b:6f:
         aa:3e:1e:f9:5b:8c:2d:23:8b:a6:6b:eb:b1:0f:a5:94:9b:3e:
         9e:11:82:89:f2:3e:98:c6:85:b1:c1:b8:71:1a:54:c9:71:73:
         6e:ef:3c:55:c8:8f:62:08:67:ef:87:98:d0:f6:ce:6a:cc:bf:
         44:5c:2d:fb:73:1f:3b:8b:99:05:f5:15:03:a1:6b:bc:8b:ad:
         cd:0d:ce:6d:a2:ee:07:fd:26:22:b6:6d:1d:02:dd:cf:0b:87:
         5f:e3:3a:41:d8:58:dd:5d:68:65:d8:f5:6d:2e:73:e5:1f:ad:
         15:83:e9:c9:c5:11:eb:30:95:75:ea:79:57:be:06:09:cd:9d:
         33:f4:61:2e:5b:7f:14:c4:db:be:4a:e0:dc:cd:cb:8c:24:b3:
         ba:70:0f:f3:62:c0:c0:24:00:1d:31:9f:65:0c:f1:0e:f4:45:
         9f:3e:a2:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhb2xzRYVbC8DAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NTE3MTQ3NzEtNzI0NS00MGY1LWJhNzItMWMyMzc2NTc1N2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoag1dC/0imTrJ0h2CZnlsXvMaoxitSdUs2oA
u1lovZg4LLegoksiJzvX7W0rmxV6IBaIiF4BhK7BtVW8eGOLRs3oPpdgyupkE9Bw
Zabzi4WyQN93QhiNWECP6IbNA3MSE2fO9zNQMUdbvFj2KMPQ34ybGSyP3WtLLlH/
EQBcyNSZo0d+B0fUxaO678N7yrVRMDwYV3gqVs0wYE9fNpnldK1Xm5DNJ349Qp81
5OfpSCUYlAVFnzJCY69lD+PdYNDnqZGEP0keEFxwvSl7ds9mMsWai8R/OOPM/SQL
VlIgkn2CZcvk5fAZmBl81cMEXzpg7HFuU03Z+kBWRQAHhrudjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ8VdZwPNVbuIh8ySXiDaRvbXD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMGRlNmRiMmUtYzY2ZC0z
ZjMxLTg1YzItOGY0OWVmMjdlOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADacuBiRjucYQvjXMbpi0k+9XNrogabm652utAVis3IGNO7ccxg6mDZr
KctNovc6gMXPJbZ8kKjjnJVBwtZxkB4xEfG25hf4NMWmvZSX1dkCC7H3OoKvGV6b
b6o+HvlbjC0ji6Zr67EPpZSbPp4RgonyPpjGhbHBuHEaVMlxc27vPFXIj2IIZ++H
mND2zmrMv0RcLftzHzuLmQX1FQOha7yLrc0Nzm2i7gf9JiK2bR0C3c8Lh1/jOkHY
WN1daGXY9W0uc+UfrRWD6cnFEeswlXXqeVe+BgnNnTP0YS5bfxTE275K4NzNy4wk
s7pwD/NiwMAkAB0xn2UM8Q70RZ8+ooo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:25 2026 by rpki-client