Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
File:                     22885b19-ffae-32cf-b022-3d5558dc4f90.roa (raw, json)
Hash identifier:          BIRmArj3/UzYNHUpEmckvp45dp2Ff55Che2bUsBT+Bs=
Subject key identifier:   9B:55:75:C3:4C:56:AD:BC:7C:F8:59:89:09:9D:FE:AB:B4:9C:6E:0E
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584CAFBC85CB7D1FFFBF8377B600
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        206.245.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:85:cb:7d:1f:ff:bf:83:77:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=978e490e-828b-4ddd-8afd-1d7b8950dee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:16:c2:b1:ef:98:10:60:40:23:5a:fa:26:
                    11:52:e9:31:07:e0:22:51:17:3b:37:57:6e:d9:61:
                    68:12:7a:1a:d0:cb:c3:37:c9:c9:c1:a8:5e:f3:e7:
                    5e:24:f7:7a:66:4a:e0:f7:85:a8:6e:11:8c:b3:e2:
                    00:dd:34:a6:63:dc:e7:3a:13:bd:16:3b:7f:36:04:
                    42:0b:58:f1:9a:c7:0a:71:60:f9:bd:c1:a1:9e:c3:
                    65:d2:73:66:7a:fc:0a:ae:df:71:13:f3:08:46:3c:
                    e2:4f:98:14:2f:84:ca:2f:a8:b5:d1:6a:e6:9b:be:
                    2a:e3:f8:54:05:cf:78:9d:11:4c:6a:95:88:b8:b3:
                    2c:89:32:90:2b:2f:7a:89:c0:43:4f:49:ee:93:7c:
                    d8:79:2b:f6:50:0f:64:1d:18:ec:70:be:d7:00:7e:
                    7d:77:13:58:a6:96:4f:9d:c0:7f:06:40:25:20:41:
                    e9:db:10:ff:cd:a0:3f:b8:d8:42:bf:0a:ac:5a:00:
                    e5:3a:7a:2e:ba:5b:3c:93:9f:60:38:5a:80:5c:f7:
                    43:a9:5a:4f:41:7d:4f:ce:bf:a9:d7:d3:f9:3a:06:
                    66:30:cb:40:c7:1f:5a:79:3b:86:45:c4:92:19:26:
                    02:6e:6e:fa:63:44:83:7a:d0:a4:41:0e:4a:44:fb:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:55:75:C3:4C:56:AD:BC:7C:F8:59:89:09:9D:FE:AB:B4:9C:6E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:52:64:2f:28:83:e5:40:5a:d2:a7:fb:b5:3f:48:1e:94:df:
         23:4c:3c:23:8e:d5:12:2f:83:c5:4c:1e:35:02:a5:58:ff:1e:
         56:eb:7a:e0:80:01:97:13:95:ea:84:78:66:60:34:aa:48:d4:
         69:31:09:3c:e7:83:09:8c:3c:17:ff:9e:10:fe:8f:43:54:73:
         56:59:f6:6f:34:3d:ab:27:b9:76:a7:20:20:85:70:cb:48:7c:
         63:65:b0:45:7b:38:f8:84:68:eb:f3:a8:a9:2d:98:8b:2c:99:
         4e:fb:21:94:bb:ca:aa:65:85:8b:fd:df:da:d7:f2:d4:4e:95:
         e0:71:a9:96:be:29:35:69:be:2e:fa:81:a7:f2:ac:c1:40:c4:
         55:0f:5d:18:78:cd:41:fa:4c:1e:90:a4:87:9b:2e:f2:07:ac:
         40:60:f0:3c:dc:2d:ac:ad:d5:5b:c7:64:dd:2c:ee:75:0d:07:
         64:27:2c:f9:32:fb:2a:79:d0:a3:5e:4b:32:a5:17:ff:4c:9e:
         c0:f7:88:85:de:34:08:d0:8c:12:07:54:0a:4b:e5:02:d9:59:
         91:70:b1:81:f4:00:d5:c5:55:eb:d4:2c:4a:7a:d0:4d:11:02:
         dd:43:f1:a3:6d:61:be:69:5f:6c:24:45:ea:e3:f4:b4:7e:bd:
         58:8a:ad:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIXLfR//v4N3tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0
NDk0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
OTc4ZTQ5MGUtODI4Yi00ZGRkLThhZmQtMWQ3Yjg5NTBkZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBkWwrHvmBBgQCNa+iYRUukxB+AiURc7N1du
2WFoEnoa0MvDN8nJwahe8+deJPd6Zkrg94WobhGMs+IA3TSmY9znOhO9Fjt/NgRC
C1jxmscKcWD5vcGhnsNl0nNmevwKrt9xE/MIRjziT5gUL4TKL6i10Wrmm74q4/hU
Bc94nRFMapWIuLMsiTKQKy96icBDT0nuk3zYeSv2UA9kHRjscL7XAH59dxNYppZP
ncB/BkAlIEHp2xD/zaA/uNhCvwqsWgDlOnouuls8k59gOFqAXPdDqVpPQX1Pzr+p
19P5OgZmMMtAxx9aeTuGRcSSGSYCbm76Y0SDetCkQQ5KRPu1QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtVdcNMVq28fPhZiQmd/qu0nG4OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1
NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMjI4ODViMTktZmZhZS0z
MmNmLWIwMjItM2Q1NTU4ZGM0ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx
YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk
NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk
ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzvWoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhSZC8og+VAWtKn+7U/SB6U3yNMPCOO1RIvg8VMHjUCpVj/HlbreuCA
AZcTleqEeGZgNKpI1GkxCTzngwmMPBf/nhD+j0NUc1ZZ9m80PasnuXanICCFcMtI
fGNlsEV7OPiEaOvzqKktmIssmU77IZS7yqplhYv939rX8tROleBxqZa+KTVpvi76
gafyrMFAxFUPXRh4zUH6TB6QpIebLvIHrEBg8DzcLayt1VvHZN0s7nUNB2QnLPky
+yp50KNeSzKlF/9MnsD3iIXeNAjQjBIHVApL5QLZWZFwsYH0ANXFVevULEp60E0R
At1D8aNtYb5pX2wkRerj9LR+vViKrbA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:12:45 2026 by rpki-client