Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
File:                     abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa (raw, json)
Hash identifier:          W4F/qNzR9jPRpVzdbQJRQf4ReQMzrm9iVK5ovYeenZo=
Subject key identifier:   4F:7B:BA:99:67:48:80:64:F4:CE:F4:2A:E8:AA:4C:B9:47:3A:7F:2B
Certificate issuer:       /CN=332b909c-500c-4711-b8f9-90f766d6a38a
Certificate serial:       010D0C9F4328584CD6D21221DCD8257ED8BAAA00
Authority key identifier: BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     63306
IP address blocks:        192.40.216.0/24 maxlen: 24
                          192.104.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:12:21:dc:d8:25:7e:d8:ba:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332b909c-500c-4711-b8f9-90f766d6a38a
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=cd052ded-f8b7-44e9-9967-dfb5eed77494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:db:7d:ca:81:d3:35:a8:36:86:48:0e:a2:
                    b6:7f:70:6e:3e:ab:83:bc:b2:c4:70:18:71:f3:52:
                    c1:6d:59:c9:d3:fb:10:0f:85:51:52:61:16:e0:d9:
                    d1:32:b5:ef:3a:73:e9:84:3f:a0:0b:6a:47:f6:26:
                    ad:9e:b0:99:49:b9:98:96:28:06:e2:f6:0d:12:a7:
                    d7:c9:8e:7f:9c:a6:63:c4:e2:9a:82:e6:c1:a1:f4:
                    81:c9:4f:07:65:7e:ad:5b:39:00:c4:ac:ec:87:53:
                    5a:f4:bf:db:10:b8:fa:e3:31:ea:a2:fb:f5:d1:74:
                    dc:12:84:27:32:97:44:89:74:19:28:57:f3:a3:14:
                    12:a9:5d:e8:85:f3:f4:3d:ac:a9:58:33:70:eb:59:
                    f1:38:35:3c:ee:ac:03:52:7a:79:cb:33:6c:52:2a:
                    cf:32:a6:1e:50:67:bd:4a:2f:5c:98:53:18:10:cc:
                    d9:eb:86:54:41:e1:72:a4:65:21:0f:1c:6c:92:a5:
                    4e:d8:0b:63:76:55:5f:70:b2:d6:6e:1e:ae:b8:3f:
                    58:bb:6a:51:59:8b:71:c8:82:77:32:ed:bf:97:7b:
                    94:55:05:8d:2a:bc:f5:a8:c8:78:44:ff:62:79:b7:
                    9a:b2:49:95:e4:71:bc:38:2d:c9:32:ad:3f:55:61:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:BA:99:67:48:80:64:F4:CE:F4:2A:E8:AA:4C:B9:47:3A:7F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.216.0/24
                  192.104.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5a:09:48:d0:b3:20:39:35:69:54:ec:62:4d:58:7a:6a:40:
         41:b8:27:30:a9:d1:3c:47:fc:17:6b:6d:da:3a:9d:e4:f6:a8:
         64:42:24:a1:3d:9c:a6:22:a4:31:32:9b:6a:9d:42:33:a7:3f:
         e4:f5:47:73:76:8a:6b:fa:14:ee:2c:6a:03:03:8d:19:f3:d0:
         e9:bd:d1:da:87:b5:21:a1:04:ed:dc:0b:2a:ef:9d:ac:6a:d4:
         8c:b3:e1:81:c7:77:35:78:bc:b5:d0:b2:05:96:ca:9c:a1:6c:
         74:f8:7c:4e:59:a8:e6:e1:37:d1:e4:b9:8e:16:bd:ef:01:14:
         37:a7:ec:80:93:d5:53:f2:08:5d:a4:22:98:7f:40:0c:3b:6b:
         d5:9f:ff:e1:5e:89:46:49:92:70:2d:4f:72:74:7e:23:d9:bf:
         15:56:e1:6a:43:ca:35:1a:ca:c0:fc:08:83:fc:9e:63:06:e2:
         4e:0e:09:ef:67:ae:6d:3a:80:e4:9c:47:10:de:9d:6a:7a:35:
         3f:ad:7d:1c:4a:68:e2:52:8f:66:fe:ed:e9:03:e1:92:5f:e1:
         23:1c:71:b3:4f:0d:7a:33:5d:3d:0a:f5:d3:00:e1:42:49:2a:
         74:1a:dc:2b:ad:5b:8a:d4:a3:01:40:69:ff:ff:4f:db:93:8f:
         21:71:40:e2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzW0hIh3Nglfti6qgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzMyYjkwOWMtNTAwYy00NzExLWI4ZjktOTBmNzY2ZDZh
MzhhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
Y2QwNTJkZWQtZjhiNy00NGU5LTk5NjctZGZiNWVlZDc3NDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZbbfcqB0zWoNoZIDqK2f3BuPquDvLLEcBhx
81LBbVnJ0/sQD4VRUmEW4NnRMrXvOnPphD+gC2pH9iatnrCZSbmYligG4vYNEqfX
yY5/nKZjxOKagubBofSByU8HZX6tWzkAxKzsh1Na9L/bELj64zHqovv10XTcEoQn
MpdEiXQZKFfzoxQSqV3ohfP0PaypWDNw61nxODU87qwDUnp5yzNsUirPMqYeUGe9
Si9cmFMYEMzZ64ZUQeFypGUhDxxskqVO2AtjdlVfcLLWbh6uuD9Yu2pRWYtxyIJ3
Mu2/l3uUVQWNKrz1qMh4RP9iebeaskmV5HG8OC3JMq0/VWG+UQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFE97uplnSIBk9M70KuiqTLlHOn8rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMzJi
OTA5Yy01MDBjLTQ3MTEtYjhmOS05MGY3NjZkNmEzOGEvYWJjZmJiOGMtMzYyZi0z
MmU3LTk4YWYtZTZlM2MwYzkyNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzMyYjkwOWMtNTAwYy00NzExLWI4
ZjktOTBmNzY2ZDZhMzhhLzMzMmI5MDljLTUwMGMtNDcxMS1iOGY5LTkwZjc2NmQ2
YTM4YS5jcmwwHwYDVR0jBBgwFoAUvbVlt4Bab/UWQjfcGIQ686qrlpkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zMzJiOTA5Yy01MDBjLTQ3MTEtYjhmOS05MGY3
NjZkNmEzOGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCjYAwQA
wGhvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGRaCUjQsyA5NWlU7GJNWHpqQEG4JzCp0TxH/Bdrbdo6neT2
qGRCJKE9nKYipDEym2qdQjOnP+T1R3N2imv6FO4sagMDjRnz0Om90dqHtSGhBO3c
Cyrvnaxq1Iyz4YHHdzV4vLXQsgWWypyhbHT4fE5ZqObhN9HkuY4Wve8BFDen7ICT
1VPyCF2kIph/QAw7a9Wf/+FeiUZJknAtT3J0fiPZvxVW4WpDyjUaysD8CIP8nmMG
4k4OCe9nrm06gOScRxDenWp6NT+tfRxKaOJSj2b+7ekD4ZJf4SMccbNPDXozXT0K
9dMA4UJJKnQa3CutW4rUowFAaf//T9uTjyFxQOI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:10 2026 by rpki-client