Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0efc0604-f905-307c-949d-90a720c308cf.roa
File:                     0efc0604-f905-307c-949d-90a720c308cf.roa (raw, json)
Hash identifier:          hNRM8gBB39llZrGxJ5c8z2FuWZC0KdkO2bOLQ73dO8M=
Subject key identifier:   DA:F1:77:92:2C:CE:43:68:A3:8E:36:72:3A:32:93:E9:13:FF:FD:E0
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584CA5F71038AA64ECF0495B3D80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0efc0604-f905-307c-949d-90a720c308cf.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     57043
IP address blocks:        208.67.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:10:38:aa:64:ec:f0:49:5b:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=4a1ffa29-8a55-4d71-97ac-0688a815e714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:d3:fc:f9:34:ec:dc:4a:24:20:51:79:74:
                    db:34:c1:ec:c6:01:2a:48:85:32:52:5f:ea:4a:e5:
                    3e:50:bd:c3:a2:7a:a2:18:07:41:4a:d7:75:04:e6:
                    e7:e6:74:6d:bb:2d:22:48:92:5d:e6:c1:04:08:62:
                    df:f4:b0:ce:28:57:a2:5f:aa:20:f6:de:3b:82:99:
                    88:09:22:92:16:bd:b0:b2:0c:be:78:dc:a9:f3:b0:
                    52:8b:93:1a:67:80:b6:59:dc:ef:fd:9d:23:c9:89:
                    1f:72:ac:e3:da:bb:03:a5:71:08:a8:8a:ab:7f:f4:
                    66:17:78:77:b0:1b:c3:62:ee:a9:3c:75:03:af:44:
                    5e:09:4e:46:78:4d:64:2c:b3:47:f5:16:7c:e1:7d:
                    33:82:1c:92:7f:25:ea:a4:ac:d7:b6:92:a7:b9:24:
                    af:35:64:90:c7:f8:d9:d0:6d:6e:ca:d3:66:7e:ad:
                    05:90:b1:2e:5a:b6:c5:bd:10:83:88:30:01:43:51:
                    36:29:65:4f:10:28:22:00:ad:5f:4f:b2:42:41:c7:
                    19:34:44:89:f9:73:3c:5f:9a:4d:6c:ab:50:4d:45:
                    e4:c1:04:0c:87:5e:60:db:23:6c:3c:8e:53:16:43:
                    60:66:8a:3d:20:4c:9b:48:ef:9c:f8:05:79:c6:65:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:77:92:2C:CE:43:68:A3:8E:36:72:3A:32:93:E9:13:FF:FD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0efc0604-f905-307c-949d-90a720c308cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:42:ea:1c:6d:4e:6b:20:7b:f0:d9:37:1b:56:1b:ae:b7:
         d5:e6:ce:cf:cd:d7:5c:3d:da:57:14:45:3e:d1:fe:24:40:fd:
         e5:80:39:94:ac:0b:31:03:b4:e3:6f:a1:ad:d3:7a:1b:3c:16:
         a4:d6:7b:22:9a:fa:98:09:ee:e2:bf:6a:3d:96:5b:d5:6b:8d:
         c9:c4:fb:ac:0e:db:e4:04:49:62:d4:1f:af:88:a9:5a:37:e2:
         b8:b8:c0:52:b7:79:ed:5a:94:1f:2f:8b:61:94:34:fc:d3:43:
         2b:a3:2d:d5:6b:9d:fc:b4:50:38:9b:87:b9:b4:66:17:a8:63:
         ef:ca:b6:cd:04:e4:22:04:d1:34:0f:e7:fa:61:45:16:0a:eb:
         6f:20:f7:15:29:fc:8c:b6:54:c5:a9:35:40:4b:b5:1a:c6:84:
         39:b7:1c:02:e4:aa:21:21:b0:70:bb:b0:a2:1d:fc:7a:a4:db:
         8a:73:28:43:97:49:7c:35:54:74:42:e5:dd:0f:30:fc:a9:72:
         2f:df:73:3a:d6:c6:dc:1e:c7:de:a0:7f:f1:f0:46:be:2a:51:
         1f:4f:15:86:5b:32:2c:1e:7c:85:8d:6e:c3:02:da:2d:b8:b7:
         3a:9a:ca:f1:25:4f:eb:6e:89:ea:fc:2a:20:91:ad:1a:13:4e:
         33:5c:2d:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xA4qmTs8ElbPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1YTk3YWUtZGY0ZS00OWJjLTlmNzYtZmYwMjVhNWMy
NWU4MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
NGExZmZhMjktOGE1NS00ZDcxLTk3YWMtMDY4OGE4MTVlNzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6fT/Pk07NxKJCBReXTbNMHsxgEqSIUyUl/q
SuU+UL3DonqiGAdBStd1BObn5nRtuy0iSJJd5sEECGLf9LDOKFeiX6og9t47gpmI
CSKSFr2wsgy+eNyp87BSi5MaZ4C2Wdzv/Z0jyYkfcqzj2rsDpXEIqIqrf/RmF3h3
sBvDYu6pPHUDr0ReCU5GeE1kLLNH9RZ84X0zghySfyXqpKzXtpKnuSSvNWSQx/jZ
0G1uytNmfq0FkLEuWrbFvRCDiDABQ1E2KWVPECgiAK1fT7JCQccZNESJ+XM8X5pN
bKtQTUXkwQQMh15g2yNsPI5TFkNgZoo9IEybSO+c+AV5xmXz3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrxd5IszkNoo442cjoyk+kT//3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTVh
OTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAyNWE1YzI1ZTgvMGVmYzA2MDQtZjkwNS0z
MDdjLTk0OWQtOTBhNzIwYzMwOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU1YTk3YWUtZGY0ZS00OWJjLTlm
NzYtZmYwMjVhNWMyNWU4LzQ1NWE5N2FlLWRmNGUtNDliYy05Zjc2LWZmMDI1YTVj
MjVlOC5jcmwwHwYDVR0jBBgwFoAU1q6NbrjOWHH/k5GUTpU1xCeTuU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTVhOTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAy
NWE1YzI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ENpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItvQuocbU5rIHvw2TcbVhuut9Xmzs/N11w92lcURT7R/iRA/eWAOZSs
CzEDtONvoa3Tehs8FqTWeyKa+pgJ7uK/aj2WW9VrjcnE+6wO2+QESWLUH6+IqVo3
4ri4wFK3ee1alB8vi2GUNPzTQyujLdVrnfy0UDibh7m0ZheoY+/Kts0E5CIE0TQP
5/phRRYK628g9xUp/Iy2VMWpNUBLtRrGhDm3HALkqiEhsHC7sKId/Hqk24pzKEOX
SXw1VHRC5d0PMPypci/fczrWxtwex96gf/HwRr4qUR9PFYZbMiwefIWNbsMC2i24
tzqayvElT+tuier8KiCRrRoTTjNcLRk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:55 2026 by rpki-client