Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/a6fec238-f298-34dd-9e2d-0f4c133cfe18.roa
File:                     a6fec238-f298-34dd-9e2d-0f4c133cfe18.roa (raw, json)
Hash identifier:          RPjqFp97Bwh4GHrzeyPRe59xF/cJdnC0MGta1UoN+7w=
Subject key identifier:   52:BD:3A:90:0A:49:BB:94:CA:04:1B:65:7F:7D:08:8B:46:DD:1D:BB
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584D03853DB69D8AAE566B0BF860
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/a6fec238-f298-34dd-9e2d-0f4c133cfe18.roa
Signing time:             Sat 28 Feb 2026 14:17:28 +0000
ROA not before:           Sat 28 Feb 2026 14:17:28 +0000
ROA not after:            Fri 29 May 2026 13:17:28 +0000
asID:                     13506
IP address blocks:        166.123.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:85:3d:b6:9d:8a:ae:56:6b:0b:f8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Feb 28 14:17:28 2026 GMT
            Not After : May 29 13:17:28 2026 GMT
        Subject: CN=fb112184-e38e-45f6-8f18-09f014d003e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:cf:a9:9d:a8:c3:c8:b6:10:45:cb:8d:6b:
                    36:60:06:c7:67:20:ed:a8:83:84:78:27:89:c8:e3:
                    61:d7:e7:2f:72:f6:fd:31:ae:76:e5:03:97:c4:fc:
                    12:59:18:c3:ed:1d:55:b5:8a:ff:d9:55:ff:e4:88:
                    f4:aa:70:4d:ed:7f:fe:10:1a:e0:97:7b:4d:69:29:
                    2b:b5:4a:6d:3b:d3:d5:d7:fb:ad:0d:18:7d:76:17:
                    46:21:e3:fe:e3:07:60:19:e1:4c:37:36:6f:61:69:
                    67:5c:78:37:dd:74:a2:07:3f:27:2b:84:00:8e:50:
                    3b:71:bb:8b:6e:c8:2b:4c:9e:49:40:cc:2b:94:e5:
                    c4:98:e2:54:bd:61:f4:56:30:6d:07:2b:64:ca:3a:
                    df:9f:f7:4a:01:5a:3d:fe:38:20:7a:39:2d:96:8b:
                    fb:24:47:91:41:11:e1:84:b3:49:29:22:a3:a3:b5:
                    a3:e1:ce:7a:8e:3e:f1:bd:56:7d:3a:ad:75:2b:a0:
                    0c:8d:b4:8f:c0:36:c3:c7:91:4f:0c:05:52:cc:29:
                    aa:9d:d6:64:e2:94:c9:28:a0:5c:df:b7:2e:6b:43:
                    bd:36:29:78:59:84:37:41:8f:23:b8:f1:5c:ef:61:
                    f0:94:c1:db:06:41:52:97:15:9f:69:ea:95:c1:6b:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BD:3A:90:0A:49:BB:94:CA:04:1B:65:7F:7D:08:8B:46:DD:1D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/a6fec238-f298-34dd-9e2d-0f4c133cfe18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.123.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:33:a5:61:d2:dc:55:c0:0f:5c:d4:9d:92:73:83:8e:fa:d2:
         5b:dc:a2:c3:66:a8:63:10:b4:1a:cd:1e:85:dc:8b:23:2b:56:
         b7:4a:19:e6:c0:43:cc:99:61:ad:72:ab:02:6f:4a:d8:bb:79:
         17:16:06:f5:1a:f1:99:9a:c7:9c:90:56:b6:cf:5c:aa:14:9a:
         c4:f8:ad:5e:b9:56:26:5d:96:3f:30:8e:65:42:de:28:8f:a6:
         6d:46:f1:50:26:d4:37:4c:92:e9:f1:7d:6a:89:dc:74:78:b9:
         65:46:b7:32:d2:32:86:0b:e2:df:6e:61:b3:8e:e7:b4:f2:9e:
         33:50:30:a9:51:d4:dd:45:ac:11:9f:b0:68:cd:45:39:25:5e:
         18:46:7c:12:55:d5:88:a6:47:eb:aa:b5:b4:98:f2:1b:a4:69:
         17:49:c3:9b:55:cd:3d:66:cd:12:f2:f9:aa:bf:f5:e1:04:8a:
         f6:e9:93:22:16:5d:88:60:43:36:ce:38:5e:3a:41:a9:9c:46:
         a2:04:bf:25:2e:08:ab:57:ba:04:70:8b:65:0a:4e:66:16:67:
         80:bf:9e:45:7e:4d:98:83:8e:32:31:1e:49:ae:2c:50:28:f7:
         1e:29:c8:11:70:16:9b:55:54:ae:91:12:93:ff:59:b4:d5:07:
         fc:d5:fa:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DhT22nYquVmsL+GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIzYWZmNDEtODRkYy00ODA4LWE1ZDktN2UwMTFkNGMz
ZTNhMB4XDTI2MDIyODE0MTcyOFoXDTI2MDUyOTEzMTcyOFowLzEtMCsGA1UEAxMk
ZmIxMTIxODQtZTM4ZS00NWY2LThmMTgtMDlmMDE0ZDAwM2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPPqZ2ow8i2EEXLjWs2YAbHZyDtqIOEeCeJ
yONh1+cvcvb9Ma525QOXxPwSWRjD7R1VtYr/2VX/5Ij0qnBN7X/+EBrgl3tNaSkr
tUptO9PV1/utDRh9dhdGIeP+4wdgGeFMNzZvYWlnXHg33XSiBz8nK4QAjlA7cbuL
bsgrTJ5JQMwrlOXEmOJUvWH0VjBtBytkyjrfn/dKAVo9/jggejktlov7JEeRQRHh
hLNJKSKjo7Wj4c56jj7xvVZ9Oq11K6AMjbSPwDbDx5FPDAVSzCmqndZk4pTJKKBc
37cua0O9Nil4WYQ3QY8juPFc72HwlMHbBkFSlxWfaeqVwWvDEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK9OpAKSbuUygQbZX99CItG3R27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMjNh
ZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAxMWQ0YzNlM2EvYTZmZWMyMzgtZjI5OC0z
NGRkLTllMmQtMGY0YzEzM2NmZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDIzYWZmNDEtODRkYy00ODA4LWE1
ZDktN2UwMTFkNGMzZTNhLzAyM2FmZjQxLTg0ZGMtNDgwOC1hNWQ5LTdlMDExZDRj
M2UzYS5jcmwwHwYDVR0jBBgwFoAU/DD3r+bRBzO9UL8KT9i2VjcgAB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMjNhZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAx
MWQ0YzNlM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApnvMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkzpWHS3FXAD1zUnZJzg4760lvcosNmqGMQtBrNHoXciyMrVrdKGebA
Q8yZYa1yqwJvSti7eRcWBvUa8Zmax5yQVrbPXKoUmsT4rV65ViZdlj8wjmVC3iiP
pm1G8VAm1DdMkunxfWqJ3HR4uWVGtzLSMoYL4t9uYbOO57TynjNQMKlR1N1FrBGf
sGjNRTklXhhGfBJV1YimR+uqtbSY8hukaRdJw5tVzT1mzRLy+aq/9eEEivbpkyIW
XYhgQzbOOF46QamcRqIEvyUuCKtXugRwi2UKTmYWZ4C/nkV+TZiDjjIxHkmuLFAo
9x4pyBFwFptVVK6REpP/WbTVB/zV+qQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:34 2026 by rpki-client