Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a909fbbb-306d-33da-ba7e-0b06c4fdc7e3.roa
File:                     a909fbbb-306d-33da-ba7e-0b06c4fdc7e3.roa (raw, json)
Hash identifier:          8kqOf/lG6rxqIaxR/Bv/T7HIf0w9CMTFyk9kUI8Iq/s=
Subject key identifier:   C0:94:66:2C:4B:64:98:B3:50:DD:8D:43:C4:D2:36:9D:85:8F:0A:6E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CD0C9F47F6BD91203B000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a909fbbb-306d-33da-ba7e-0b06c4fdc7e3.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        172.81.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d0:c9:f4:7f:6b:d9:12:03:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=c9ce6dda-9add-42de-a40f-23a8fe5964fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:3d:1e:2d:6f:7e:fc:40:2c:f8:4a:4a:96:
                    e9:1f:a7:2c:bf:bd:de:cd:62:14:80:5c:c3:6b:85:
                    99:ab:97:ba:22:67:70:e1:38:3e:24:98:02:9c:27:
                    69:d7:58:5f:0c:6c:2c:f8:18:3f:8d:62:5c:da:80:
                    55:44:15:41:9b:de:48:e4:f7:f6:40:4f:0c:cd:26:
                    2a:69:b8:8a:66:e5:b8:30:95:92:8b:6a:e4:4e:a3:
                    58:5b:8a:b1:5c:4e:91:97:02:a2:07:a0:bd:45:18:
                    9f:5a:92:61:f4:e7:61:6b:c0:15:e6:6b:ea:6e:0a:
                    ca:82:3e:64:f5:10:d0:bb:f2:ef:40:b9:d9:df:b5:
                    7b:67:f3:b9:f6:35:2e:c6:25:08:57:f9:a6:90:c4:
                    62:6d:2c:ee:f6:58:a6:24:91:71:3d:3e:ec:d2:b2:
                    11:3e:46:b3:41:1b:09:00:ba:29:a0:79:31:8f:e7:
                    91:92:d8:b6:00:76:e3:bb:1e:e5:00:05:31:b4:92:
                    ed:e5:7a:32:00:22:d3:36:af:fd:86:3a:81:ff:93:
                    1d:e1:10:9b:8d:94:43:45:9a:8f:78:f0:4c:78:50:
                    8e:e2:2e:24:a6:10:e3:43:4f:53:15:ba:2e:7b:34:
                    7e:35:96:c5:1d:65:7c:3a:1a:f9:fc:a4:41:57:50:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:94:66:2C:4B:64:98:B3:50:DD:8D:43:C4:D2:36:9D:85:8F:0A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a909fbbb-306d-33da-ba7e-0b06c4fdc7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:35:62:0d:49:c8:84:0e:b7:1e:50:dc:80:62:8a:8d:fa:90:
         87:bd:59:02:75:59:77:78:60:a2:26:4d:a3:96:4c:8b:46:ec:
         82:a5:e9:77:5f:c2:46:4f:e0:a0:08:d8:f0:83:c1:05:59:90:
         d3:ad:76:dd:1a:c8:1e:7a:0f:62:2c:82:4d:d6:80:b6:14:4c:
         95:07:bb:35:a1:b3:8a:4c:e8:95:8f:3d:e7:e4:8b:fa:8b:c2:
         39:20:d8:d9:3c:eb:12:fe:d4:53:b3:fb:9d:8e:a4:6a:6e:5d:
         9d:9c:f1:1f:1a:b0:f4:7e:7b:2e:ab:ee:f6:9e:e2:34:24:f1:
         af:ef:61:c5:ec:35:ad:7f:7a:b6:37:54:c4:78:fc:bb:a3:8a:
         68:56:ac:88:e4:79:28:36:fe:bc:9d:85:d1:2c:20:77:c4:3b:
         54:45:fc:f6:32:a2:77:2d:b4:7d:6f:1a:85:2d:5d:de:fe:7c:
         b3:ad:82:11:49:d0:a1:95:4d:bf:f3:d7:63:d8:1b:48:c8:1a:
         88:07:aa:b2:8b:c9:7f:b8:40:7e:fb:4d:d7:96:8b:c4:dd:4e:
         5f:87:65:97:dc:f3:1f:e9:27:79:17:d2:6f:22:43:1f:19:90:
         5d:25:f0:d2:08:ae:27:67:00:48:5e:61:fa:84:96:09:bb:5a:
         60:b6:6d:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXNDJ9H9r2RIDsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
YzljZTZkZGEtOWFkZC00MmRlLWE0MGYtMjNhOGZlNTk2NGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5k9Hi1vfvxALPhKSpbpH6csv73ezWIUgFzD
a4WZq5e6Imdw4Tg+JJgCnCdp11hfDGws+Bg/jWJc2oBVRBVBm95I5Pf2QE8MzSYq
abiKZuW4MJWSi2rkTqNYW4qxXE6RlwKiB6C9RRifWpJh9Odha8AV5mvqbgrKgj5k
9RDQu/LvQLnZ37V7Z/O59jUuxiUIV/mmkMRibSzu9limJJFxPT7s0rIRPkazQRsJ
ALopoHkxj+eRkti2AHbjux7lAAUxtJLt5XoyACLTNq/9hjqB/5Md4RCbjZRDRZqP
ePBMeFCO4i4kphDjQ09TFbouezR+NZbFHWV8Ohr5/KRBV1B9WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCUZixLZJizUN2NQ8TSNp2FjwpuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTkwOWZiYmItMzA2ZC0z
M2RhLWJhN2UtMGIwNmM0ZmRjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAME1Yg1JyIQOtx5Q3IBiio36kIe9WQJ1WXd4YKImTaOWTItG7IKl6Xdf
wkZP4KAI2PCDwQVZkNOtdt0ayB56D2Isgk3WgLYUTJUHuzWhs4pM6JWPPefki/qL
wjkg2Nk86xL+1FOz+52OpGpuXZ2c8R8asPR+ey6r7vae4jQk8a/vYcXsNa1/erY3
VMR4/LujimhWrIjkeSg2/rydhdEsIHfEO1RF/PYyoncttH1vGoUtXd7+fLOtghFJ
0KGVTb/z12PYG0jIGogHqrKLyX+4QH77TdeWi8TdTl+HZZfc8x/pJ3kX0m8iQx8Z
kF0l8NIIridnAEheYfqElgm7WmC2beg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:15 2026 by rpki-client