Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa
File:                     65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa (raw, json)
Hash identifier:          gwsQZp3IJPz/cV5glH7Hga2rBQj4XAy5Fwr37tCg/Ho=
Subject key identifier:   C2:6A:47:56:10:AC:7C:46:5D:25:0C:28:9C:E0:86:75:A3:FE:DD:6B
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584CD220F0B887F5A875A9166EE0
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa
Signing time:             Tue 10 Feb 2026 21:40:46 +0000
ROA not before:           Tue 10 Feb 2026 21:40:46 +0000
ROA not after:            Mon 11 May 2026 20:40:46 +0000
asID:                     2496
IP address blocks:        129.237.54.208/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:20:f0:b8:87:f5:a8:75:a9:16:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Feb 10 21:40:46 2026 GMT
            Not After : May 11 20:40:46 2026 GMT
        Subject: CN=b05e4314-ed23-4e55-8337-79f267caebe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:58:60:33:dc:fa:7a:16:5b:24:06:21:97:
                    13:bf:c1:a0:10:88:fa:16:1d:8a:15:60:b5:ef:f6:
                    20:be:29:fc:b3:04:25:37:54:ae:4f:e3:13:d0:a5:
                    d7:d4:59:20:08:02:7c:ea:65:4e:2e:90:93:2f:e7:
                    73:9b:b1:58:fe:47:73:1e:4e:64:06:4b:02:8f:ea:
                    6a:68:4a:a0:e2:03:3b:36:b7:70:e7:23:36:68:24:
                    08:24:a2:83:4c:9a:9e:04:d1:f5:18:60:5c:aa:0d:
                    ae:80:8d:e8:7c:10:01:8d:1a:d4:bf:5a:63:e2:46:
                    51:2b:8d:fd:71:68:79:79:e9:96:e1:80:7e:16:b4:
                    18:83:eb:d2:60:4c:8e:0a:23:27:28:7a:57:19:7b:
                    17:9f:c4:e2:bc:5d:74:6e:f0:6a:60:d0:38:81:40:
                    9d:c6:f3:34:12:20:ec:f1:a8:cc:d0:93:64:4e:0a:
                    b9:40:2f:65:3f:1b:4b:7a:b7:f5:85:03:ed:19:e9:
                    8b:2a:7e:fd:83:b6:f0:57:c7:d5:3a:1d:4b:2f:7e:
                    47:84:b0:19:c4:45:d1:93:74:e9:4a:29:18:69:da:
                    fb:64:aa:b7:82:45:48:b3:9a:2b:d9:50:71:e2:6a:
                    25:9e:00:0f:12:3a:47:15:ed:47:7e:4b:29:8d:a8:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:47:56:10:AC:7C:46:5D:25:0C:28:9C:E0:86:75:A3:FE:DD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.54.208/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:95:67:ea:53:a4:fd:9c:3a:50:4b:88:2c:a6:50:98:c4:e7:
         55:d8:dd:6f:b1:3d:94:70:59:9d:f5:96:27:3a:79:ab:59:be:
         ca:91:db:a3:40:76:31:b2:c3:c0:eb:a6:f7:fa:9f:d4:56:f8:
         22:36:4b:b9:93:5e:a5:60:9d:31:9a:0a:54:23:9e:3e:15:2a:
         65:c2:a6:a9:cd:15:af:06:d4:9e:b8:88:4f:55:b6:42:e9:a8:
         cd:5c:3e:31:9d:92:20:d4:fa:eb:43:40:02:3f:23:cb:26:be:
         12:16:f7:43:e2:94:e2:08:9c:ab:74:2d:e1:a6:b9:67:63:09:
         ab:50:34:f1:bc:62:fb:c4:31:45:d1:df:26:ec:38:2b:35:c6:
         da:96:9a:47:2b:af:d8:b7:b9:db:81:16:fb:c4:93:f8:ad:31:
         e7:e2:42:5a:08:f3:b7:c9:13:c8:2f:92:f7:02:3e:b3:8f:14:
         ae:c8:e9:e7:86:5d:68:f9:09:66:78:14:5f:58:d2:c3:24:2c:
         ac:f5:4d:75:f3:bf:4b:7c:c4:9a:66:5e:e4:d2:15:19:89:0a:
         fe:cd:e8:0d:5d:98:a3:e2:e6:d4:47:04:31:a9:d4:30:8c:8a:
         66:6b:5b:fe:b0:94:db:f5:b4:c5:69:62:f8:5f:b8:cd:71:8c:
         98:24:87:3f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzSIPC4h/WodakWbuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy
MDIxMB4XDTI2MDIxMDIxNDA0NloXDTI2MDUxMTIwNDA0NlowLzEtMCsGA1UEAxMk
YjA1ZTQzMTQtZWQyMy00ZTU1LTgzMzctNzlmMjY3Y2FlYmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1NYYDPc+noWWyQGIZcTv8GgEIj6Fh2KFWC1
7/Ygvin8swQlN1SuT+MT0KXX1FkgCAJ86mVOLpCTL+dzm7FY/kdzHk5kBksCj+pq
aEqg4gM7Nrdw5yM2aCQIJKKDTJqeBNH1GGBcqg2ugI3ofBABjRrUv1pj4kZRK439
cWh5eemW4YB+FrQYg+vSYEyOCiMnKHpXGXsXn8TivF10bvBqYNA4gUCdxvM0EiDs
8ajM0JNkTgq5QC9lPxtLerf1hQPtGemLKn79g7bwV8fVOh1LL35HhLAZxEXRk3Tp
SikYadr7ZKq3gkVIs5or2VBx4molngAPEjpHFe1HfkspjahlxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMJqR1YQrHxGXSUMKJzghnWj/t1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl
M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvNjVkZmJhZWYtZTI3NS0z
ZTA1LTg2MTAtZWQyODg2YTFkOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm
NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj
MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh
NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDge020DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBElWfqU6T9nDpQS4gsplCYxOdV2N1vsT2UcFmd9ZYnOnmrWb7Kkduj
QHYxssPA66b3+p/UVvgiNku5k16lYJ0xmgpUI54+FSplwqapzRWvBtSeuIhPVbZC
6ajNXD4xnZIg1PrrQ0ACPyPLJr4SFvdD4pTiCJyrdC3hprlnYwmrUDTxvGL7xDFF
0d8m7DgrNcbalppHK6/Yt7nbgRb7xJP4rTHn4kJaCPO3yRPIL5L3Aj6zjxSuyOnn
hl1o+QlmeBRfWNLDJCys9U11879LfMSaZl7k0hUZiQr+zegNXZij4ubURwQxqdQw
jIpma1v+sJTb9bTFaWL4X7jNcYyYJIc/
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:37 2026 by rpki-client