Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
File:                     f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa (raw, json)
Hash identifier:          NYd/OZuASC2iXQ6p9ESsZDIhroAOO2vHw/nsava++yE=
Subject key identifier:   2E:C1:10:0B:1C:44:AC:27:B4:CD:BD:66:97:23:74:EC:2B:63:40:DC
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584CED27833FC57C6F17C7FB6A00
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     47065
IP address blocks:        66.180.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:83:3f:c5:7c:6f:17:c7:fb:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=4bd5a8a1-4375-4f6f-9d01-8b8f8ac2a5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:86:65:08:9f:e2:df:82:cc:90:90:88:7c:
                    bc:71:3c:6c:63:5f:db:95:5b:f1:c9:be:7b:7b:12:
                    3d:25:13:13:1f:ff:29:ab:05:7e:35:df:24:a3:79:
                    92:a3:53:73:d2:4b:61:99:b4:d7:70:d3:ab:3d:a7:
                    d2:13:84:b9:1e:a7:55:eb:36:58:5f:80:a2:30:b0:
                    5a:df:85:b2:0b:15:33:c0:f3:7b:b3:30:82:41:0e:
                    d8:cd:cc:e6:d7:db:05:f3:38:94:83:5a:80:f7:42:
                    f5:f3:ee:1e:bc:6f:a0:4f:c7:2f:3a:8e:d6:79:4c:
                    d3:22:ed:a4:70:2f:f9:24:94:2f:eb:5b:00:91:a4:
                    b7:b1:e3:36:56:5d:bb:8c:d9:09:e6:a7:19:de:34:
                    ca:f8:f5:7b:09:f3:4c:06:29:cf:90:bd:b9:9f:80:
                    00:0f:5b:80:a8:12:45:6c:1a:e8:15:ef:49:c9:08:
                    78:0d:34:c4:15:a5:7b:70:6e:08:c3:ed:19:82:b1:
                    8e:25:db:79:b1:e8:3f:ee:d6:31:af:98:e9:8b:81:
                    c0:81:a8:de:98:0c:6d:d3:9e:a8:7a:1b:95:16:f4:
                    c2:45:0f:c6:45:e5:91:6e:0d:3f:d5:42:39:01:e3:
                    bf:3c:75:35:cf:26:c7:e1:35:95:e3:0f:93:24:ab:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:10:0B:1C:44:AC:27:B4:CD:BD:66:97:23:74:EC:2B:63:40:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:85:86:cb:6c:53:f7:a0:7b:9f:57:7e:10:7b:9f:eb:0c:
         fa:87:e8:e6:8c:ba:0f:1b:17:d5:42:c9:81:f9:80:e5:01:6c:
         89:ce:8c:4f:35:b3:04:3e:fc:57:46:fe:60:b4:cb:77:08:1c:
         a8:fa:cc:0b:36:eb:10:bb:42:c0:7e:5b:83:cf:9e:3f:24:8d:
         d9:6d:b7:b4:3c:eb:21:22:34:48:b8:26:8c:f6:53:14:19:2c:
         ee:30:ff:ed:dc:05:de:17:0f:b2:17:af:5d:28:1d:cd:ab:a5:
         c6:a1:14:82:8c:52:6b:4d:ec:25:97:d9:3e:48:e6:66:c8:2d:
         01:e1:e0:43:32:a2:82:5b:cf:63:e4:08:7f:a4:53:84:49:72:
         cd:a2:5b:9f:c3:5a:69:a7:63:fb:93:11:c4:da:51:f7:6f:5d:
         f1:56:83:0a:bb:15:a1:84:9f:b6:af:79:b0:21:fc:da:aa:a3:
         16:db:e1:6d:ca:17:5f:41:11:c1:47:25:8e:40:df:e5:11:81:
         71:66:17:8d:46:7d:41:0d:d1:6a:da:3b:cc:dd:b0:6f:f8:cd:
         e0:a2:e8:65:c2:fb:25:0f:89:51:8e:5d:05:f0:e9:48:bf:ba:
         ee:ef:17:7f:04:52:ef:9c:08:30:9e:cb:50:a9:f5:17:b0:d1:
         9b:81:69:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4M/xXxvF8f7agAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz
ZWNkMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
NGJkNWE4YTEtNDM3NS00ZjZmLTlkMDEtOGI4ZjhhYzJhNWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj2GZQif4t+CzJCQiHy8cTxsY1/blVvxyb57
exI9JRMTH/8pqwV+Nd8ko3mSo1Nz0kthmbTXcNOrPafSE4S5HqdV6zZYX4CiMLBa
34WyCxUzwPN7szCCQQ7Yzczm19sF8ziUg1qA90L18+4evG+gT8cvOo7WeUzTIu2k
cC/5JJQv61sAkaS3seM2Vl27jNkJ5qcZ3jTK+PV7CfNMBinPkL25n4AAD1uAqBJF
bBroFe9JyQh4DTTEFaV7cG4Iw+0ZgrGOJdt5seg/7tYxr5jpi4HAgajemAxt056o
ehuVFvTCRQ/GReWRbg0/1UI5AeO/PHU1zybH4TWV4w+TJKvzjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7BEAscRKwntM29ZpcjdOwrY0DcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj
MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZjlkZTBkZjMtNDVjZC0z
NjNiLWEwMTAtNGRjYzIwOWY2YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2
NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj
M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk
OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6RhYbLbFP3oHufV34Qe5/rDPqH6OaMug8bF9VCyYH5gOUBbInOjE81
swQ+/FdG/mC0y3cIHKj6zAs26xC7QsB+W4PPnj8kjdltt7Q86yEiNEi4Joz2UxQZ
LO4w/+3cBd4XD7IXr10oHc2rpcahFIKMUmtN7CWX2T5I5mbILQHh4EMyooJbz2Pk
CH+kU4RJcs2iW5/DWmmnY/uTEcTaUfdvXfFWgwq7FaGEn7avebAh/Nqqoxbb4W3K
F19BEcFHJY5A3+URgXFmF41GfUEN0WraO8zdsG/4zeCi6GXC+yUPiVGOXQXw6Ui/
uu7vF38EUu+cCDCey1Cp9Rew0ZuBafc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:50:48 2026 by rpki-client