Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/02e9a292-51d6-3d79-813a-f0d4b78de7f2.roa
File:                     02e9a292-51d6-3d79-813a-f0d4b78de7f2.roa (raw, json)
Hash identifier:          6YFnVTxgL64uR7hHLMQZA78J29iLrG9Ix20mvdi9X5Q=
Subject key identifier:   3D:05:F8:27:3C:91:6F:3A:44:23:09:5D:DF:07:1A:EE:86:28:53:F1
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584CD221555EA29F0389EE553300
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/02e9a292-51d6-3d79-813a-f0d4b78de7f2.roa
Signing time:             Tue 10 Feb 2026 21:41:33 +0000
ROA not before:           Tue 10 Feb 2026 21:41:33 +0000
ROA not after:            Mon 11 May 2026 20:41:33 +0000
asID:                     2496
IP address blocks:        129.237.106.120/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:21:55:5e:a2:9f:03:89:ee:55:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Feb 10 21:41:33 2026 GMT
            Not After : May 11 20:41:33 2026 GMT
        Subject: CN=98444fde-d8e8-47bd-9630-5c85efe1be7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:ea:1d:f9:b5:df:67:0c:61:04:7a:bf:3f:
                    81:3d:f4:bc:8f:db:a6:a2:69:f1:1e:30:77:76:0f:
                    c4:32:75:b6:57:28:c7:0b:31:8c:d4:73:c3:f8:6a:
                    25:39:03:e2:17:16:72:6d:fc:86:79:d5:06:d4:a0:
                    54:a0:6b:1f:d2:bf:92:e1:1a:be:c1:2e:a8:56:4c:
                    c8:30:3b:68:ea:a4:34:e0:b4:22:dc:57:87:3d:2b:
                    64:fd:7c:aa:05:04:a2:40:f1:a2:e0:98:95:79:41:
                    a4:38:62:91:9c:6e:0f:15:69:05:78:ab:27:ba:c6:
                    43:fe:5b:4b:cd:eb:0b:a2:be:cb:f3:73:c1:89:6e:
                    c7:2e:07:4c:d0:13:93:29:6c:a4:36:8e:76:bd:2c:
                    ea:a2:29:60:df:12:0d:bc:d2:b8:15:f4:27:57:93:
                    68:f1:c9:e4:4d:04:bc:4f:c1:4d:22:d8:73:f6:84:
                    9c:eb:d0:be:6f:b8:fa:de:ff:b6:4c:6c:c2:47:f7:
                    5f:e6:1a:b8:09:21:e5:0d:4d:c1:7e:aa:cb:54:bc:
                    96:88:e8:01:3b:60:a0:94:a8:8e:dc:2a:f7:dc:f3:
                    98:cf:91:4e:3e:e3:94:cd:2f:41:e9:5b:d4:70:19:
                    56:4c:b8:fa:7d:02:18:dc:0e:73:eb:6a:d5:69:48:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:05:F8:27:3C:91:6F:3A:44:23:09:5D:DF:07:1A:EE:86:28:53:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/02e9a292-51d6-3d79-813a-f0d4b78de7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.106.120/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:01:6f:91:0b:e9:7e:73:38:be:6d:0a:31:0f:60:ba:08:b3:
         98:03:99:b3:c5:53:e7:d2:c9:d3:7f:ee:56:b6:50:47:df:f5:
         ff:37:63:8f:b5:f7:e2:5d:b8:34:40:6c:83:5c:af:ba:ef:9f:
         4d:10:e1:7c:96:0a:da:29:83:a4:3e:b0:95:02:ce:2a:b7:d8:
         26:da:b0:2a:fe:23:9e:3d:29:05:14:d3:6e:b3:1b:e7:56:5b:
         0c:80:ff:03:44:4f:53:ca:90:8f:55:c7:aa:ea:fa:57:c6:34:
         00:2a:79:93:c8:c0:22:3e:55:d1:f0:8b:cd:a5:8f:38:ec:25:
         42:d8:2c:8e:79:9a:b4:0d:7c:93:24:5f:35:5e:ff:cb:95:9e:
         b8:37:d7:39:e5:23:48:08:e4:11:8f:a2:e5:66:fa:39:c4:05:
         04:e1:45:33:4e:52:e3:5f:55:11:62:ef:5d:6a:f8:7d:77:ac:
         29:e8:ec:b1:b1:6e:57:af:b1:62:e0:44:45:ed:12:2d:9e:ab:
         86:6b:67:6f:e6:cf:1e:da:79:67:ae:3b:cb:ed:fe:24:3a:66:
         7d:ef:ef:fa:76:e5:f4:7a:3f:fc:d0:79:6d:3f:0d:9b:93:93:
         90:17:f2:ae:61:39:51:ee:78:af:39:5c:01:34:84:c4:67:81:
         14:ee:7a:64
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzSIVVeop8Die5VMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy
MDIxMB4XDTI2MDIxMDIxNDEzM1oXDTI2MDUxMTIwNDEzM1owLzEtMCsGA1UEAxMk
OTg0NDRmZGUtZDhlOC00N2JkLTk2MzAtNWM4NWVmZTFiZTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhezqHfm132cMYQR6vz+BPfS8j9umomnxHjB3
dg/EMnW2VyjHCzGM1HPD+GolOQPiFxZybfyGedUG1KBUoGsf0r+S4Rq+wS6oVkzI
MDto6qQ04LQi3FeHPStk/XyqBQSiQPGi4JiVeUGkOGKRnG4PFWkFeKsnusZD/ltL
zesLor7L83PBiW7HLgdM0BOTKWykNo52vSzqoilg3xINvNK4FfQnV5No8cnkTQS8
T8FNIthz9oSc69C+b7j63v+2TGzCR/df5hq4CSHlDU3BfqrLVLyWiOgBO2CglKiO
3Cr33POYz5FOPuOUzS9B6VvUcBlWTLj6fQIY3A5z62rVaUgU/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD0F+Cc8kW86RCMJXd8HGu6GKFPxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl
M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvMDJlOWEyOTItNTFkNi0z
ZDc5LTgxM2EtZjBkNGI3OGRlN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm
NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj
MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh
NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDge1qeDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBmAW+RC+l+czi+bQoxD2C6CLOYA5mzxVPn0snTf+5WtlBH3/X/N2OP
tffiXbg0QGyDXK+6759NEOF8lgraKYOkPrCVAs4qt9gm2rAq/iOePSkFFNNusxvn
VlsMgP8DRE9TypCPVceq6vpXxjQAKnmTyMAiPlXR8IvNpY847CVC2CyOeZq0DXyT
JF81Xv/LlZ64N9c55SNICOQRj6LlZvo5xAUE4UUzTlLjX1URYu9davh9d6wp6Oyx
sW5Xr7Fi4ERF7RItnquGa2dv5s8e2nlnrjvL7f4kOmZ97+/6duX0ej/80HltPw2b
k5OQF/KuYTlR7nivOVwBNITEZ4EU7npk
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:03 2026 by rpki-client