Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dcfc4714-640b-3499-94ad-7f740795aebe.roa
File:                     dcfc4714-640b-3499-94ad-7f740795aebe.roa (raw, json)
Hash identifier:          HTGqHxL7pECla6gX9F806xLhppIHAjWgcXMbDO1qwsM=
Subject key identifier:   AC:08:FD:F3:15:2E:40:0A:2E:F7:5C:B6:8F:3A:DF:CD:FB:23:68:62
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CD24FF8AF2907F46CF200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dcfc4714-640b-3499-94ad-7f740795aebe.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        172.81.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:d2:4f:f8:af:29:07:f4:6c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=9f0e8b71-fbac-4a9e-bf6a-8efbd0a8743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:68:06:5b:be:41:70:ef:4d:ef:88:4b:ba:
                    f4:60:b5:f5:59:87:cb:e8:23:dd:0c:6f:34:51:eb:
                    dc:24:b3:ab:bf:a8:7b:8a:b5:8a:46:5b:85:8f:3e:
                    08:f3:5e:41:02:43:5c:22:ee:b7:37:ce:45:db:b8:
                    a6:5f:50:a8:ab:5e:b7:04:58:98:4a:5a:c5:09:31:
                    c6:72:fd:cb:71:0e:ac:e4:72:4a:6e:57:cd:5c:98:
                    f5:37:00:16:58:43:ef:36:7b:f3:14:3e:7a:af:16:
                    30:73:3c:0b:c0:ad:2f:d5:1f:52:cc:c4:d8:df:4e:
                    43:99:fc:33:f6:4f:85:f5:ae:54:ee:07:32:7b:8d:
                    00:de:8c:6d:46:e8:75:47:e1:c0:9f:c0:49:99:d9:
                    12:da:69:db:c7:7f:0d:b6:13:36:09:df:41:a5:a7:
                    5c:8d:2f:cb:ef:2d:33:27:fc:f6:58:a0:b3:e3:7f:
                    7b:55:0b:6e:df:0a:a0:05:7d:0a:ac:49:43:c4:5c:
                    81:e5:c1:ac:e3:cb:d7:ca:c7:db:1b:49:01:26:92:
                    c6:91:1b:0f:14:c5:ca:33:5b:85:57:de:c8:b2:ca:
                    93:31:98:be:cd:92:af:c4:d3:5f:ea:89:3d:f8:f7:
                    68:4b:ad:de:e6:50:ae:f3:a1:b6:e9:03:2a:77:19:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:FD:F3:15:2E:40:0A:2E:F7:5C:B6:8F:3A:DF:CD:FB:23:68:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dcfc4714-640b-3499-94ad-7f740795aebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:21:28:97:4d:4a:76:31:36:66:20:d3:46:9e:52:bb:32:2e:
         06:f3:62:7f:8d:4e:d2:20:56:50:e5:ba:51:00:e7:12:00:90:
         d8:42:e6:6f:55:ba:9c:cb:70:03:e0:78:2c:d7:86:26:9b:07:
         08:79:42:68:a7:73:dd:e1:72:54:21:9d:3d:8a:17:bc:4d:a1:
         33:da:c4:d4:04:3f:94:e4:e3:7e:ac:e4:8f:44:a0:42:a9:95:
         78:57:fd:97:ca:f4:1e:63:28:ca:8c:bb:9e:48:22:d1:af:de:
         64:5e:5f:6d:0a:b1:40:f9:65:59:f0:50:e8:dd:fd:aa:6e:3b:
         23:02:b9:95:56:ed:bb:6b:a6:c3:e2:4c:12:f7:64:42:7b:54:
         c2:e3:88:50:55:14:60:d5:9f:53:77:44:f4:42:25:7f:fa:ca:
         17:32:e4:3e:47:7a:3b:79:f2:8b:0a:ce:bc:f1:6a:eb:2a:d0:
         fa:ac:db:25:e6:01:1a:55:7e:96:69:b9:f2:63:f1:85:dc:d8:
         4a:dd:8d:2b:a2:70:79:c0:0e:2f:b5:89:43:04:56:a6:0d:aa:
         a9:20:99:ea:5b:4f:c4:c9:f8:7e:62:83:07:73:09:ea:81:69:
         ca:a2:f8:ac:8e:ff:8f:6c:b7:6a:6f:43:00:e1:99:af:73:ec:
         cf:9b:c6:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnNJP+K8pB/Rs8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
OWYwZThiNzEtZmJhYy00YTllLWJmNmEtOGVmYmQwYTg3NDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NxoBlu+QXDvTe+IS7r0YLX1WYfL6CPdDG80
UevcJLOrv6h7irWKRluFjz4I815BAkNcIu63N85F27imX1Coq163BFiYSlrFCTHG
cv3LcQ6s5HJKblfNXJj1NwAWWEPvNnvzFD56rxYwczwLwK0v1R9SzMTY305Dmfwz
9k+F9a5U7gcye40A3oxtRuh1R+HAn8BJmdkS2mnbx38NthM2Cd9BpadcjS/L7y0z
J/z2WKCz4397VQtu3wqgBX0KrElDxFyB5cGs48vXysfbG0kBJpLGkRsPFMXKM1uF
V97IssqTMZi+zZKvxNNf6ok9+PdoS63e5lCu86G26QMqdxlhfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwI/fMVLkAKLvdcto863837I2hiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGNmYzQ3MTQtNjQwYi0z
NDk5LTk0YWQtN2Y3NDA3OTVhZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACghKJdNSnYxNmYg00aeUrsyLgbzYn+NTtIgVlDlulEA5xIAkNhC5m9V
upzLcAPgeCzXhiabBwh5Qminc93hclQhnT2KF7xNoTPaxNQEP5Tk436s5I9EoEKp
lXhX/ZfK9B5jKMqMu55IItGv3mReX20KsUD5ZVnwUOjd/apuOyMCuZVW7btrpsPi
TBL3ZEJ7VMLjiFBVFGDVn1N3RPRCJX/6yhcy5D5Hejt58osKzrzxausq0Pqs2yXm
ARpVfpZpufJj8YXc2ErdjSuicHnADi+1iUMEVqYNqqkgmepbT8TJ+H5igwdzCeqB
acqi+KyO/49st2pvQwDhma9z7M+bxu0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:47 2026 by rpki-client