Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/266ab206-16f9-3a4a-9667-4b61a8ed9a6e.roa
File:                     266ab206-16f9-3a4a-9667-4b61a8ed9a6e.roa (raw, json)
Hash identifier:          rK/WgAUF3aFmnl+D2OEhOMKEDQXAfri9Vs7vjMjWF+w=
Subject key identifier:   F8:D8:CF:2D:82:17:DE:FA:B0:40:AC:DE:C4:33:AE:F8:75:DB:93:10
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21CADDE648D48A05C2EB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/266ab206-16f9-3a4a-9667-4b61a8ed9a6e.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.46.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1c:ad:de:64:8d:48:a0:5c:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=4dd5ffe5-6132-4793-87f2-57b8e3629b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:1f:3a:64:fb:11:16:31:58:eb:df:8a:cc:
                    3b:93:2d:2c:d8:ee:f8:aa:ba:e5:c5:53:47:f6:e0:
                    1d:a2:b0:3c:17:18:2f:21:1b:1c:ce:13:25:b9:82:
                    fe:06:a2:2d:b1:63:e5:3a:82:e8:19:f5:8b:3b:ad:
                    a1:30:1b:d2:ec:cd:dd:ab:89:81:22:36:20:3a:bc:
                    05:b4:80:d4:23:c0:55:7a:e2:be:99:3a:b8:17:cf:
                    6c:f3:b0:ed:c9:da:d6:ff:6a:2f:4c:a3:d7:74:fc:
                    c0:65:12:16:24:53:d0:bc:62:80:cc:c2:5a:20:0a:
                    3c:16:3c:1b:ff:d0:42:19:99:5a:92:be:fa:c4:e4:
                    6a:d3:d2:68:88:8a:58:a7:10:21:2c:fb:60:44:ff:
                    ce:01:d6:07:10:4b:2a:b4:bf:81:19:7b:7a:f1:46:
                    5f:0e:e0:41:02:61:e7:58:ab:a2:b2:de:a9:e0:cf:
                    89:ef:08:5b:af:76:bf:98:67:2a:f7:d2:28:26:4c:
                    44:0f:45:65:7b:46:0f:ab:f4:07:dc:22:c8:6d:ff:
                    d1:8a:2c:fc:d8:0c:26:65:06:33:c0:9c:de:65:d9:
                    67:56:5e:96:a1:4b:e3:35:2f:89:ac:4a:6a:27:23:
                    fb:2a:3f:ba:1a:79:66:a0:2e:ab:f2:29:67:3a:4a:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:CF:2D:82:17:DE:FA:B0:40:AC:DE:C4:33:AE:F8:75:DB:93:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/266ab206-16f9-3a4a-9667-4b61a8ed9a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:72:4f:66:db:43:c4:6e:2c:33:05:dc:84:aa:7c:ab:c5:
         bf:75:bb:9c:2e:4e:43:d4:99:eb:2d:36:ff:54:f0:98:d8:95:
         91:c6:ba:25:fc:0c:39:cc:04:85:65:2c:f8:25:6f:19:f1:83:
         10:2c:e5:4a:8b:03:41:e8:fa:f9:11:7b:59:de:63:01:d8:9e:
         cb:aa:dd:a8:d0:f4:5c:4e:4b:06:25:2a:92:0c:c7:c9:12:d5:
         c0:b7:fe:07:31:fa:45:6a:28:43:48:95:76:f7:43:62:45:9e:
         00:53:05:2f:4c:85:eb:ee:df:f4:6b:a1:a1:05:6e:ed:b8:a9:
         d8:07:49:2b:c2:dd:54:17:a8:1c:82:c7:df:33:c5:9a:65:2a:
         1a:de:a9:06:51:6d:84:f4:26:1d:2c:bd:8f:c8:17:cb:f3:b9:
         f2:36:76:7c:ea:71:60:22:4f:bf:9f:38:fa:e6:d0:04:8e:d0:
         3a:4f:b8:ac:69:4a:bb:4f:2b:b1:4d:55:0c:ac:e1:f8:c9:9a:
         a0:b2:e9:53:d8:60:ea:12:0b:8c:42:1b:60:67:2e:96:9c:fb:
         18:08:3a:e0:30:68:4d:d4:65:95:ef:ac:38:20:24:31:94:c4:
         da:65:fb:3d:da:71:5d:d6:62:51:89:02:67:64:de:db:42:31:
         9e:bf:ba:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhyt3mSNSKBcLrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NGRkNWZmZTUtNjEzMi00NzkzLTg3ZjItNTdiOGUzNjI5YjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgukfOmT7ERYxWOvfisw7ky0s2O74qrrlxVNH
9uAdorA8FxgvIRsczhMluYL+BqItsWPlOoLoGfWLO62hMBvS7M3dq4mBIjYgOrwF
tIDUI8BVeuK+mTq4F89s87DtydrW/2ovTKPXdPzAZRIWJFPQvGKAzMJaIAo8Fjwb
/9BCGZlakr76xORq09JoiIpYpxAhLPtgRP/OAdYHEEsqtL+BGXt68UZfDuBBAmHn
WKuist6p4M+J7whbr3a/mGcq99IoJkxED0Vle0YPq/QH3CLIbf/Riiz82AwmZQYz
wJzeZdlnVl6WoUvjNS+JrEpqJyP7Kj+6GnlmoC6r8ilnOkoiIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjYzy2CF976sECs3sQzrvh125MQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjY2YWIyMDYtMTZmOS0z
YTRhLTk2NjctNGI2MWE4ZWQ5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmnck9m20PEbiwzBdyEqnyrxb91u5wuTkPUmestNv9U8JjYlZHGuiX8
DDnMBIVlLPglbxnxgxAs5UqLA0Ho+vkRe1neYwHYnsuq3ajQ9FxOSwYlKpIMx8kS
1cC3/gcx+kVqKENIlXb3Q2JFngBTBS9Mhevu3/RroaEFbu24qdgHSSvC3VQXqByC
x98zxZplKhreqQZRbYT0Jh0svY/IF8vzufI2dnzqcWAiT7+fOPrm0ASO0DpPuKxp
SrtPK7FNVQys4fjJmqCy6VPYYOoSC4xCG2BnLpac+xgIOuAwaE3UZZXvrDggJDGU
xNpl+z3acV3WYlGJAmdk3ttCMZ6/ugg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:02 2026 by rpki-client