Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/9e4152ca-0ed5-3408-8787-5e8adc6bbe53.roa
File:                     9e4152ca-0ed5-3408-8787-5e8adc6bbe53.roa (raw, json)
Hash identifier:          0J25mGfobqhwtVhwsY97Jc9De6ArPecmWj3t/1GVVi0=
Subject key identifier:   4D:70:61:AE:B3:E5:D3:FC:1D:B3:59:0E:52:93:AA:5A:8F:46:84:FF
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328584CE4C770EDE504CEC92EB87540
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/9e4152ca-0ed5-3408-8787-5e8adc6bbe53.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     32726
IP address blocks:        208.95.48.0/22 maxlen: 22
                          208.95.48.0/23 maxlen: 23
                          208.95.48.0/24 maxlen: 24
                          208.95.49.0/24 maxlen: 24
                          208.95.50.0/23 maxlen: 23
                          208.95.50.0/24 maxlen: 24
                          208.95.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:70:ed:e5:04:ce:c9:2e:b8:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=9e5c801f-4b24-41af-999c-dcc381cd087d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:2a:bc:e2:05:f2:d8:17:c8:51:bb:7a:b9:
                    fb:5b:1a:13:59:7e:5f:af:be:d8:e4:47:08:98:31:
                    5f:78:85:2a:e3:42:aa:a1:ff:19:29:08:41:b1:2b:
                    77:0b:40:35:53:40:0b:27:f4:f7:95:64:9e:5f:c4:
                    ac:72:9f:2b:13:e4:71:8e:03:45:2a:8f:dc:b6:5d:
                    a8:a7:65:0a:19:f6:1f:6b:1c:d1:f0:f7:e2:02:fe:
                    78:f3:c2:1c:ad:55:7c:2a:cc:89:85:b1:66:af:ea:
                    4c:0b:61:e6:64:36:ee:09:6a:ef:01:db:3b:ca:5e:
                    28:7d:34:e7:d4:f7:94:74:19:b1:75:07:ee:b6:18:
                    30:36:6e:78:1a:7b:cd:24:10:7d:8d:7f:34:1b:33:
                    7c:68:cc:22:76:8f:85:05:ca:32:a6:32:0a:4d:6d:
                    ba:99:91:9b:97:9c:d3:b8:61:a6:b5:ff:95:f1:ec:
                    9d:6d:28:c6:04:39:ec:e1:37:ab:e5:2a:d6:fd:42:
                    b2:42:d7:2d:99:57:21:06:85:84:19:e9:bf:15:88:
                    45:a7:9b:f0:31:8c:0d:43:a7:63:37:4a:92:cb:d5:
                    2e:0b:49:6b:15:cf:9e:b7:8e:2c:1a:31:5c:fa:85:
                    e3:79:07:fb:d2:91:12:79:9e:80:52:dc:62:91:a1:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:61:AE:B3:E5:D3:FC:1D:B3:59:0E:52:93:AA:5A:8F:46:84:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/9e4152ca-0ed5-3408-8787-5e8adc6bbe53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:bc:f4:75:f7:91:f4:b0:a0:9b:ff:be:86:b9:88:af:db:
         c3:71:7a:fe:69:df:e7:04:ae:18:31:fe:23:99:81:3f:a1:54:
         5c:76:79:00:fb:66:0f:96:d2:b4:20:98:44:90:92:65:80:f2:
         ff:7d:91:c1:2f:ba:bf:89:3e:fd:30:58:7a:3a:a4:47:fd:d5:
         b8:a0:6f:22:07:5e:14:9c:fd:5e:1e:47:ef:4b:5e:bc:09:a0:
         43:4a:7c:e1:a9:fe:be:95:12:6d:07:0b:b8:99:c4:e0:c0:f2:
         f5:43:bb:9d:12:0f:7f:7d:ae:59:01:7a:19:1d:1e:15:c6:bf:
         d1:51:01:e3:a3:bb:29:d7:6a:f1:22:df:7b:cf:3f:f3:9d:45:
         81:ca:46:1d:df:de:c6:46:82:c8:1e:18:37:91:4b:1b:d7:82:
         4c:76:45:00:e2:fc:86:f3:fc:f3:11:e3:c4:06:18:4e:43:c5:
         27:79:41:ae:eb:bd:3f:df:1d:90:9a:9a:d6:88:bb:6e:3b:02:
         59:f5:2a:50:76:8c:b8:03:2a:d5:94:89:97:63:82:89:36:33:
         00:b4:c0:9b:9e:81:46:4b:87:fd:ce:4a:c1:5e:e6:ca:d9:6a:
         24:94:ea:eb:44:0f:8f:3c:ed:e0:cd:95:34:fd:94:b8:5b:b0:
         f0:a2:d4:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx3Dt5QTOyS64dUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzI0NWNkYmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2RhNWQz
ODU0MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk
OWU1YzgwMWYtNGIyNC00MWFmLTk5OWMtZGNjMzgxY2QwODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP0qvOIF8tgXyFG7ern7WxoTWX5fr77Y5EcI
mDFfeIUq40Kqof8ZKQhBsSt3C0A1U0ALJ/T3lWSeX8Sscp8rE+RxjgNFKo/ctl2o
p2UKGfYfaxzR8PfiAv5488IcrVV8KsyJhbFmr+pMC2HmZDbuCWrvAds7yl4ofTTn
1PeUdBmxdQfuthgwNm54GnvNJBB9jX80GzN8aMwido+FBcoypjIKTW26mZGbl5zT
uGGmtf+V8eydbSjGBDns4Ter5SrW/UKyQtctmVchBoWEGem/FYhFp5vwMYwNQ6dj
N0qSy9UuC0lrFc+et44sGjFc+oXjeQf70pESeZ6AUtxikaHYPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1wYa6z5dP8HbNZDlKTqlqPRoT/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1
Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThjZGE1ZDM4NTQvOWU0MTUyY2EtMGVkNS0z
NDA4LTg3ODctNWU4YWRjNmJiZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNkYmYtOTdkNy00Mzc2LTlk
OGQtMjk4Y2RhNWQzODU0LzcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhkLTI5OGNkYTVk
Mzg1NC5jcmwwHwYDVR0jBBgwFoAUFuGCsE5FDCqe3Q3wqqwGKD7Zlz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThj
ZGE1ZDM4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBuvPR195H0sKCb/76GuYiv28Nxev5p3+cErhgx/iOZgT+hVFx2eQD7
Zg+W0rQgmESQkmWA8v99kcEvur+JPv0wWHo6pEf91bigbyIHXhSc/V4eR+9LXrwJ
oENKfOGp/r6VEm0HC7iZxODA8vVDu50SD399rlkBehkdHhXGv9FRAeOjuynXavEi
33vPP/OdRYHKRh3f3sZGgsgeGDeRSxvXgkx2RQDi/Ibz/PMR48QGGE5DxSd5Qa7r
vT/fHZCamtaIu247Aln1KlB2jLgDKtWUiZdjgok2MwC0wJuegUZLh/3OSsFe5srZ
aiSU6utED4887eDNlTT9lLhbsPCi1Fg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:50 2026 by rpki-client