Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b072f748-28af-36d3-ace7-611b7b6876ec.roa
File:                     b072f748-28af-36d3-ace7-611b7b6876ec.roa (raw, json)
Hash identifier:          GlmH5ufgKEyQYVAyEAHG7q8fnD99E35fzVq7wj3YezM=
Subject key identifier:   B5:0B:8E:7D:98:39:9E:4B:37:56:16:61:B1:F4:68:93:5E:36:B4:59
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CCE6D7C4A48757D808040
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b072f748-28af-36d3-ace7-611b7b6876ec.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        172.96.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:ce:6d:7c:4a:48:75:7d:80:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=12f5a644-5823-4cdc-a94a-b989e621b361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:87:80:1b:5a:ef:38:91:7d:46:61:44:e6:ee:
                    70:d5:43:08:61:f4:0c:0b:21:8c:29:94:ea:99:c8:
                    c7:d0:ed:ee:e9:f6:6a:48:8b:b2:ad:b3:f5:15:18:
                    49:d7:d4:94:07:ba:07:66:fd:ed:08:6e:a4:18:fd:
                    c8:2f:18:e1:0f:92:62:8c:83:5b:ec:24:ee:89:e9:
                    ab:98:71:34:8f:97:2b:7f:c8:17:0e:41:9c:4f:0a:
                    01:bb:9c:c8:a4:18:e1:0b:b3:c8:12:04:fe:f4:3d:
                    49:37:51:67:f5:98:2d:74:c3:31:5f:c0:32:e1:57:
                    72:39:19:e5:ee:bc:3a:5b:bb:8e:62:fc:72:42:b6:
                    74:e2:f4:16:54:32:42:e9:e5:b6:d5:93:a1:a1:7d:
                    04:05:d3:f5:ed:d4:4b:76:0e:b0:f8:58:de:0b:a5:
                    c5:48:82:ee:90:34:84:47:69:9f:13:44:3a:66:05:
                    60:1c:da:36:74:3a:32:ff:0d:47:28:3c:41:c1:05:
                    36:65:6a:7a:8a:60:c3:ab:9e:cb:b9:7a:c3:37:cc:
                    43:b5:ec:2c:2f:2a:43:90:b2:8c:e3:a7:01:56:45:
                    ee:05:7a:40:01:0f:f0:f5:3c:97:c1:b0:5a:f5:17:
                    25:58:d7:c8:fe:dc:29:82:e2:27:fe:b2:5d:78:22:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:8E:7D:98:39:9E:4B:37:56:16:61:B1:F4:68:93:5E:36:B4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b072f748-28af-36d3-ace7-611b7b6876ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:f4:56:d6:39:80:22:13:b5:01:5a:ac:c7:a9:74:7c:67:
         8f:5d:00:69:aa:cf:56:5a:d8:ba:5f:48:c8:b9:af:62:0f:69:
         44:27:57:e1:f2:be:1a:3a:36:14:91:09:54:20:5f:15:93:75:
         e3:da:a9:fb:96:92:69:90:28:ff:f9:7a:5e:c1:4b:37:ff:43:
         af:ea:40:2f:f5:5c:9b:1b:a9:ec:ed:01:e7:87:a1:77:77:d7:
         ab:c7:70:f3:10:bd:0c:6e:c9:a8:1f:49:71:74:31:f7:94:73:
         4c:81:5c:9c:0a:07:bb:af:ef:f4:46:d7:62:81:a8:83:81:5d:
         01:7f:1f:cb:02:3a:21:29:15:1e:67:7e:8e:67:eb:8e:42:e9:
         50:3d:f8:40:58:88:21:2b:61:67:e3:36:16:af:fd:98:21:4d:
         40:5e:31:a8:75:99:c9:94:bd:21:4f:7d:9d:51:c6:61:b4:36:
         2b:40:3d:9e:bc:fc:76:a4:00:2c:68:c7:84:28:34:bd:c0:db:
         b6:f8:dd:a8:97:87:5d:a3:a1:8d:f3:46:d0:5e:f6:e5:df:a3:
         7b:78:e1:72:d6:53:e9:f7:11:c1:0b:c6:1d:ce:aa:e1:5c:aa:
         14:19:29:d3:e8:ed:25:bc:5b:fd:23:11:11:cc:cf:70:3d:d6:
         7f:20:ba:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXM5tfEpIdX2AgEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MTJmNWE2NDQtNTgyMy00Y2RjLWE5NGEtYjk4OWU2MjFiMzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4eAG1rvOJF9RmFE5u5w1UMIYfQMCyGMKZTq
mcjH0O3u6fZqSIuyrbP1FRhJ19SUB7oHZv3tCG6kGP3ILxjhD5JijINb7CTuiemr
mHE0j5crf8gXDkGcTwoBu5zIpBjhC7PIEgT+9D1JN1Fn9ZgtdMMxX8Ay4VdyORnl
7rw6W7uOYvxyQrZ04vQWVDJC6eW21ZOhoX0EBdP17dRLdg6w+FjeC6XFSILukDSE
R2mfE0Q6ZgVgHNo2dDoy/w1HKDxBwQU2ZWp6imDDq57LuXrDN8xDtewsLypDkLKM
46cBVkXuBXpAAQ/w9TyXwbBa9RclWNfI/twpguIn/rJdeCJAuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLULjn2YOZ5LN1YWYbH0aJNeNrRZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjA3MmY3NDgtMjhhZi0z
NmQzLWFjZTctNjExYjdiNjg3NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpI9FbWOYAiE7UBWqzHqXR8Z49dAGmqz1Za2LpfSMi5r2IPaUQnV+Hy
vho6NhSRCVQgXxWTdePaqfuWkmmQKP/5el7BSzf/Q6/qQC/1XJsbqeztAeeHoXd3
16vHcPMQvQxuyagfSXF0MfeUc0yBXJwKB7uv7/RG12KBqIOBXQF/H8sCOiEpFR5n
fo5n645C6VA9+EBYiCErYWfjNhav/ZghTUBeMah1mcmUvSFPfZ1RxmG0NitAPZ68
/HakACxox4QoNL3A27b43aiXh12joY3zRtBe9uXfo3t44XLWU+n3EcELxh3OquFc
qhQZKdPo7SW8W/0jERHMz3A91n8gutA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:06 2026 by rpki-client