Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa
File:                     c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa (raw, json)
Hash identifier:          PlFHTzGoFkQCQamz/dfGVEVS5Bp6SECYaaJg1gvjNqM=
Subject key identifier:   2A:F6:10:97:15:02:32:80:C2:94:3A:22:74:C6:99:F5:E9:F0:61:BC
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584CD2212EA39A24A575942F8B80
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa
Signing time:             Tue 10 Feb 2026 21:41:15 +0000
ROA not before:           Tue 10 Feb 2026 21:41:15 +0000
ROA not after:            Mon 11 May 2026 20:41:15 +0000
asID:                     2496
IP address blocks:        129.237.106.112/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:21:2e:a3:9a:24:a5:75:94:2f:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Feb 10 21:41:15 2026 GMT
            Not After : May 11 20:41:15 2026 GMT
        Subject: CN=360067aa-53f8-4d02-bb26-a3f5113d2c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:90:91:a3:90:f9:1e:58:8c:2f:01:ca:3b:3f:
                    aa:7c:80:38:91:3e:3f:41:ac:80:8c:02:5a:83:e4:
                    50:f3:b3:5f:f3:4f:1d:c0:6f:2a:ce:76:f7:88:64:
                    d2:83:a3:9a:79:4d:c2:e2:60:f9:0b:7a:f9:a6:74:
                    3e:a5:c4:93:6b:26:97:81:fa:b0:ed:ef:ad:83:ed:
                    44:70:f8:b7:a9:1a:98:8c:ad:e2:91:9a:9b:cf:29:
                    81:7c:72:0c:39:e9:57:7e:97:e2:3f:dd:4c:f1:a4:
                    6b:9f:4c:1e:eb:f4:ed:de:96:3e:63:16:1e:19:a2:
                    bc:cc:df:93:d4:23:05:44:cd:87:76:6a:32:f2:57:
                    2c:20:56:a7:db:73:35:ef:d3:76:5e:93:0c:f8:a9:
                    d8:db:26:20:0e:e9:fc:af:d1:31:e9:07:71:3d:7e:
                    7c:75:c0:50:05:f7:09:b4:07:6b:b6:51:27:10:9e:
                    78:ea:fc:2d:b9:95:10:f3:ad:84:3d:80:c0:1d:98:
                    6f:d9:af:21:c4:4e:b6:b0:5d:63:b1:dd:3c:7f:18:
                    f2:06:be:95:29:90:6e:4a:80:23:83:56:ca:1c:2c:
                    7d:6b:aa:1e:dc:0e:a4:18:74:30:4a:f4:12:16:0b:
                    a0:b2:26:33:8b:02:d9:36:63:4b:6a:05:1a:69:6c:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F6:10:97:15:02:32:80:C2:94:3A:22:74:C6:99:F5:E9:F0:61:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.106.112/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:22:2f:7c:c6:f7:30:52:55:a9:95:d7:3d:44:63:40:7d:7d:
         06:d6:9e:88:9c:e9:21:85:97:9d:8d:65:50:87:08:9f:64:34:
         8a:aa:c4:17:b7:d4:ad:15:15:cf:03:1d:d0:de:81:7a:02:c2:
         43:36:96:82:88:da:29:db:1d:9d:c6:75:73:6d:9f:ef:2b:5f:
         3a:0e:63:6b:3b:f2:86:d3:86:4f:a4:8b:86:b8:2f:6f:9c:48:
         01:7f:66:2f:63:85:a1:17:e0:c4:da:de:4e:e5:c0:ab:d7:a4:
         6c:9c:09:b0:8a:10:32:87:24:05:2b:ff:25:fa:b7:d5:76:c1:
         7d:b5:6e:1e:40:38:7c:cb:35:b1:13:47:de:93:73:a7:51:d9:
         37:25:c0:ff:28:d8:d0:72:2f:e4:55:c1:a8:0d:e2:b8:47:ea:
         b0:88:42:56:57:f3:8b:b7:58:51:c1:97:74:17:e7:66:47:f6:
         63:be:bf:4a:77:1d:ab:fd:61:91:9d:61:bc:6c:c7:ba:b4:9e:
         51:6c:b3:3c:be:af:13:3b:eb:cb:87:b0:e5:c4:82:19:87:e0:
         14:3e:15:ad:b7:99:c3:e6:21:42:07:b5:c4:0d:fa:ae:50:f1:
         52:28:05:c7:ae:10:5a:75:f1:f1:c7:bb:37:bf:c5:69:f1:26:
         87:30:4a:f3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzSIS6jmiSldZQvi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy
MDIxMB4XDTI2MDIxMDIxNDExNVoXDTI2MDUxMTIwNDExNVowLzEtMCsGA1UEAxMk
MzYwMDY3YWEtNTNmOC00ZDAyLWJiMjYtYTNmNTExM2QyYzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pCRo5D5HliMLwHKOz+qfIA4kT4/QayAjAJa
g+RQ87Nf808dwG8qznb3iGTSg6OaeU3C4mD5C3r5pnQ+pcSTayaXgfqw7e+tg+1E
cPi3qRqYjK3ikZqbzymBfHIMOelXfpfiP91M8aRrn0we6/Tt3pY+YxYeGaK8zN+T
1CMFRM2Hdmoy8lcsIFan23M179N2XpMM+KnY2yYgDun8r9Ex6QdxPX58dcBQBfcJ
tAdrtlEnEJ546vwtuZUQ862EPYDAHZhv2a8hxE62sF1jsd08fxjyBr6VKZBuSoAj
g1bKHCx9a6oe3A6kGHQwSvQSFgugsiYziwLZNmNLagUaaWyBUwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCr2EJcVAjKAwpQ6InTGmfXp8GG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl
M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvYzRjMzM4YzMtZTI2ZC0z
N2JiLThmY2MtN2E3MmY5MWIwZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm
NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj
MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh
NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDge1qcDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAIIi98xvcwUlWpldc9RGNAfX0G1p6InOkhhZedjWVQhwifZDSKqsQX
t9StFRXPAx3Q3oF6AsJDNpaCiNop2x2dxnVzbZ/vK186DmNrO/KG04ZPpIuGuC9v
nEgBf2YvY4WhF+DE2t5O5cCr16RsnAmwihAyhyQFK/8l+rfVdsF9tW4eQDh8yzWx
E0fek3OnUdk3JcD/KNjQci/kVcGoDeK4R+qwiEJWV/OLt1hRwZd0F+dmR/Zjvr9K
dx2r/WGRnWG8bMe6tJ5RbLM8vq8TO+vLh7DlxIIZh+AUPhWtt5nD5iFCB7XEDfqu
UPFSKAXHrhBadfHxx7s3v8Vp8SaHMErz
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:11 2026 by rpki-client