Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fd2096d8-571f-388c-bf8e-a818491f75ce.roa
File:                     fd2096d8-571f-388c-bf8e-a818491f75ce.roa (raw, json)
Hash identifier:          kFlevzejbWtgbSV1Grr9Rpe58kopdgr3W3Tudj+Uznw=
Subject key identifier:   FD:DB:EC:EF:F6:FD:AE:67:AF:14:06:40:6F:C6:1C:FB:85:D1:A9:69
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99D0666929073AB49EC9100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fd2096d8-571f-388c-bf8e-a818491f75ce.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        208.89.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:06:66:92:90:73:ab:49:ec:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=4836a1f5-085a-4a50-b281-e167a3f667a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:db:b2:e0:ee:11:75:16:f7:91:38:2d:96:
                    9a:ad:57:c0:03:e5:7c:f6:cb:1b:ac:d5:6a:63:53:
                    90:a9:c9:5e:af:bd:0a:52:aa:f1:ae:46:89:d8:7b:
                    ea:44:c8:ee:f1:c4:9c:4c:29:bb:fc:cd:b2:0d:0d:
                    7b:6b:1b:a8:23:f0:c8:ba:0e:1e:8a:5f:34:f0:9f:
                    ff:30:1f:f0:2e:3f:35:26:5d:db:77:3a:70:85:1f:
                    9d:86:4a:ff:4d:92:e9:ef:bd:e0:c7:f9:67:51:13:
                    60:38:d2:8f:59:02:a6:20:1d:eb:ca:cd:1e:6a:9b:
                    ef:2c:ef:a9:4f:5c:8f:17:aa:82:09:f1:30:4f:1f:
                    53:1b:97:b2:0b:ed:76:50:35:53:f1:b0:c4:8f:ec:
                    0a:46:1e:2f:6f:1c:3c:64:80:71:12:6d:08:8a:63:
                    60:c0:4b:ac:7f:e8:3f:90:5d:4d:3d:d5:d7:d5:7e:
                    41:92:37:2f:d6:9d:02:23:ea:fa:57:10:5c:82:8f:
                    b6:b7:eb:4f:03:5b:b6:ee:e8:31:4f:3f:71:af:1e:
                    e0:3e:45:48:d2:43:fe:6e:34:e3:6f:1d:59:0f:10:
                    4e:94:d4:00:50:e2:81:4a:28:85:64:0c:ed:f1:55:
                    42:bd:39:d9:2e:e8:84:dc:8e:38:e2:db:5a:c1:7e:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:EC:EF:F6:FD:AE:67:AF:14:06:40:6F:C6:1C:FB:85:D1:A9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fd2096d8-571f-388c-bf8e-a818491f75ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:75:5f:ea:95:19:c5:6b:34:7a:f6:fb:bb:6b:80:cd:98:69:
         d0:5a:43:65:97:38:54:33:d7:d5:9b:e3:75:29:aa:36:8f:40:
         d3:c9:45:05:c1:0a:ce:1c:9b:6e:47:e9:9b:9d:08:f2:0d:01:
         c8:38:dc:8c:4b:00:d3:91:7d:95:c0:b6:c5:46:6f:37:39:cd:
         33:b4:d2:e6:b4:d6:57:85:d8:b5:4f:44:43:c0:72:c4:48:98:
         c1:b1:63:12:57:0d:79:99:3b:22:43:b1:0c:20:09:0e:b2:0c:
         0c:28:59:69:f2:e7:0e:a9:91:b5:55:82:66:86:77:4f:eb:d3:
         74:d4:25:15:a9:a5:90:b3:2a:90:27:a3:8e:f1:0c:49:43:91:
         d4:74:27:d1:c4:0d:98:f0:8e:d9:a7:2b:b3:42:83:5c:81:38:
         ed:e5:42:d0:d1:a1:f4:a1:fd:cf:99:4b:92:fb:2f:83:e5:ca:
         d3:a3:8b:b2:9d:f2:40:11:26:94:ef:43:c3:b4:cb:df:95:98:
         34:ce:63:c6:ad:41:da:04:ef:07:0d:c3:57:65:94:34:04:10:
         b5:8d:9a:98:a9:04:02:d5:b6:2e:34:31:da:03:ea:11:52:54:
         09:d1:9e:3c:0f:1f:a9:f4:b4:5c:53:48:9a:36:b0:90:44:6a:
         e8:9a:06:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnQZmkpBzq0nskQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
NDgzNmExZjUtMDg1YS00YTUwLWIyODEtZTE2N2EzZjY2N2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6HbsuDuEXUW95E4LZaarVfAA+V89ssbrNVq
Y1OQqcler70KUqrxrkaJ2HvqRMju8cScTCm7/M2yDQ17axuoI/DIug4eil808J//
MB/wLj81Jl3bdzpwhR+dhkr/TZLp773gx/lnURNgONKPWQKmIB3rys0eapvvLO+p
T1yPF6qCCfEwTx9TG5eyC+12UDVT8bDEj+wKRh4vbxw8ZIBxEm0IimNgwEusf+g/
kF1NPdXX1X5Bkjcv1p0CI+r6VxBcgo+2t+tPA1u27ugxTz9xrx7gPkVI0kP+bjTj
bx1ZDxBOlNQAUOKBSiiFZAzt8VVCvTnZLuiE3I444ttawX5JBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3b7O/2/a5nrxQGQG/GHPuF0alpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmQyMDk2ZDgtNTcxZi0z
ODhjLWJmOGUtYTgxODQ5MWY3NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR1X+qVGcVrNHr2+7trgM2YadBaQ2WXOFQz19Wb43UpqjaPQNPJRQXB
Cs4cm25H6ZudCPINAcg43IxLANORfZXAtsVGbzc5zTO00ua01leF2LVPREPAcsRI
mMGxYxJXDXmZOyJDsQwgCQ6yDAwoWWny5w6pkbVVgmaGd0/r03TUJRWppZCzKpAn
o47xDElDkdR0J9HEDZjwjtmnK7NCg1yBOO3lQtDRofSh/c+ZS5L7L4PlytOji7Kd
8kARJpTvQ8O0y9+VmDTOY8atQdoE7wcNw1dllDQEELWNmpipBALVti40MdoD6hFS
VAnRnjwPH6n0tFxTSJo2sJBEauiaBjI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:02 2026 by rpki-client