Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebb2b8c2-8299-3028-905e-2385d42b1101.roa
File:                     ebb2b8c2-8299-3028-905e-2385d42b1101.roa (raw, json)
Hash identifier:          XHvuXwl4c68hvx9/Xs3fy67vLKbYkcJfyLeQhggH5bo=
Subject key identifier:   89:CE:6C:A2:39:40:A6:60:88:49:07:1F:47:AE:0E:9B:98:6F:4F:03
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99D1585B0475B178F68B9E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebb2b8c2-8299-3028-905e-2385d42b1101.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        199.101.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:15:85:b0:47:5b:17:8f:68:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=37a6eb75-8d7c-4c53-8c22-142939470c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:3a:fd:42:d3:7f:cc:ac:ee:05:18:ab:dc:
                    95:56:b5:86:fe:ae:11:45:b8:45:d9:74:5a:35:ae:
                    bd:e0:82:be:99:cd:d8:9a:26:cd:13:1d:32:f4:40:
                    da:cf:90:2e:3e:c8:3e:59:d3:69:ba:e0:1d:f7:ce:
                    5d:e9:0f:fc:dc:c9:1f:9c:06:da:c4:7c:ab:e6:d0:
                    58:35:e2:4f:91:07:6d:ae:d2:b1:ba:25:e7:72:17:
                    7d:16:7b:1f:eb:80:f6:1f:2d:7d:0f:3e:0e:9d:3d:
                    cc:25:8b:9d:b7:ca:c9:fc:6d:2f:90:69:f2:fc:39:
                    91:d4:cf:e1:5e:52:f9:e1:6f:5a:4c:39:a7:52:a2:
                    be:83:90:09:e0:7f:cd:1a:7f:1d:0e:f8:ae:83:b7:
                    1d:95:ad:67:6d:b1:d2:72:d6:fe:2f:15:82:6d:f4:
                    ba:46:c4:04:b4:c7:d0:d6:d7:1c:46:b5:bb:e3:0d:
                    bf:84:8a:4a:0f:84:f8:5a:d1:5f:0c:35:29:98:f1:
                    5b:6c:22:96:93:31:48:8b:db:92:95:08:40:b3:29:
                    4e:8f:3e:8c:35:fc:6d:4d:bd:9e:40:ae:4e:20:9a:
                    6b:86:a5:95:84:41:81:9d:f6:ef:8a:84:40:39:3d:
                    d9:db:8c:a6:35:e1:14:e1:21:8f:f1:49:a1:c4:fb:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:6C:A2:39:40:A6:60:88:49:07:1F:47:AE:0E:9B:98:6F:4F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebb2b8c2-8299-3028-905e-2385d42b1101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:19:b8:72:60:f0:7c:49:66:a2:42:c3:6c:0f:7c:2f:87:8f:
         ab:b4:46:cc:23:cd:d9:34:ca:75:08:e5:8c:d3:53:95:d4:3b:
         1b:18:9d:35:31:47:83:1f:6c:cb:54:63:f9:12:5e:dd:2b:65:
         b7:2a:17:9f:db:36:99:b8:42:0c:7b:66:4b:38:9b:14:c3:f2:
         50:33:16:1a:23:40:ba:ee:27:c8:b3:b4:3d:88:bf:87:c3:03:
         6b:9c:51:f8:7c:7f:15:42:1e:c3:4a:b5:3e:a4:b4:13:4b:9f:
         5a:b9:91:de:2e:af:6d:e3:55:b8:96:e5:bd:42:2f:95:6d:70:
         5a:36:87:0f:bf:28:22:a9:cf:49:d8:2a:64:b6:d0:ec:e0:4d:
         26:4a:e0:94:e4:50:d5:97:fa:ac:8c:1a:19:0f:42:33:0d:39:
         62:d7:ce:03:07:18:f1:52:0e:96:c1:b7:18:78:d3:3b:7c:2d:
         64:99:3b:a9:90:c3:b3:1a:5f:10:69:ca:61:75:cb:ca:0a:f5:
         d3:73:a3:6b:c2:97:91:cd:03:4d:e9:a7:80:5d:0e:bd:13:15:
         17:ea:51:ff:c4:8a:4d:6f:38:e6:e4:e2:03:2c:af:b2:b2:29:
         15:aa:39:34:f7:e6:1f:5a:db:5d:88:72:18:1d:8a:74:7b:68:
         7c:c1:75:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnRWFsEdbF49oueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
MzdhNmViNzUtOGQ3Yy00YzUzLThjMjItMTQyOTM5NDcwYzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X06/ULTf8ys7gUYq9yVVrWG/q4RRbhF2XRa
Na694IK+mc3YmibNEx0y9EDaz5AuPsg+WdNpuuAd985d6Q/83MkfnAbaxHyr5tBY
NeJPkQdtrtKxuiXnchd9Fnsf64D2Hy19Dz4OnT3MJYudt8rJ/G0vkGny/DmR1M/h
XlL54W9aTDmnUqK+g5AJ4H/NGn8dDviug7cdla1nbbHSctb+LxWCbfS6RsQEtMfQ
1tccRrW74w2/hIpKD4T4WtFfDDUpmPFbbCKWkzFIi9uSlQhAsylOjz6MNfxtTb2e
QK5OIJprhqWVhEGBnfbvioRAOT3Z24ymNeEU4SGP8UmhxPsH7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInObKI5QKZgiEkHH0euDpuYb08DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWJiMmI4YzItODI5OS0z
MDI4LTkwNWUtMjM4NWQ0MmIxMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMZuHJg8HxJZqJCw2wPfC+Hj6u0Rswjzdk0ynUI5YzTU5XUOxsYnTUx
R4MfbMtUY/kSXt0rZbcqF5/bNpm4Qgx7Zks4mxTD8lAzFhojQLruJ8iztD2Iv4fD
A2ucUfh8fxVCHsNKtT6ktBNLn1q5kd4ur23jVbiW5b1CL5VtcFo2hw+/KCKpz0nY
KmS20OzgTSZK4JTkUNWX+qyMGhkPQjMNOWLXzgMHGPFSDpbBtxh40zt8LWSZO6mQ
w7MaXxBpymF1y8oK9dNzo2vCl5HNA03pp4BdDr0TFRfqUf/Eik1vOObk4gMsr7Ky
KRWqOTT35h9a212IchgdinR7aHzBdUA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:10 2026 by rpki-client