Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/8461ce34-cf4c-3612-a529-a4a783652d59.roa
File:                     8461ce34-cf4c-3612-a529-a4a783652d59.roa (raw, json)
Hash identifier:          jLTP/0tq9VUwePDQ6JfOTrqZBzKI4hSj8/v5IrnPWcI=
Subject key identifier:   86:27:2A:05:3A:2D:E0:68:C7:AD:87:67:6B:3D:CD:BF:98:B7:E9:F3
Certificate issuer:       /CN=e25d686e-0b40-4450-bc73-6a20b06135f1
Certificate serial:       010D0C9F4328584CEFF23A1FE895EF01A0DAE680
Authority key identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/8461ce34-cf4c-3612-a529-a4a783652d59.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     32413
IP address blocks:        74.115.88.0/21 maxlen: 21
                          108.59.32.0/20 maxlen: 20
                          199.83.184.0/21 maxlen: 21
                          208.90.224.0/22 maxlen: 24
                          2605:5600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3a:1f:e8:95:ef:01:a0:da:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25d686e-0b40-4450-bc73-6a20b06135f1
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=86f980d5-40bf-4b13-a5ab-2f27f8c5706b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:7b:d5:a7:68:8a:3f:22:49:37:a5:9b:92:
                    3a:75:f0:b0:79:7f:f9:b2:2b:52:0f:1f:58:10:c3:
                    f9:54:a0:21:49:a1:5b:f8:bb:4c:a9:a6:4d:3e:81:
                    96:c3:6a:77:b1:d1:1b:e9:10:d2:0d:7e:0a:b7:f5:
                    ab:42:e4:10:e6:34:ae:a2:c5:d1:b8:3c:2d:42:40:
                    bc:7d:75:8e:2c:9d:83:e4:9b:e5:68:65:1f:3b:ce:
                    e9:9b:d3:02:2b:50:f8:73:08:23:b4:5c:62:76:e4:
                    cc:22:d7:08:c8:25:9a:55:5f:70:b0:fe:f7:f7:4d:
                    ca:c3:56:e9:71:d4:03:1e:17:8c:b4:e1:42:f9:45:
                    9b:e6:dd:23:d3:2b:34:82:bb:4d:2c:b2:28:c4:04:
                    fd:b8:d6:b0:6e:48:c7:0c:a5:f7:01:4d:59:f9:78:
                    d8:ef:d5:56:f4:d1:67:09:7e:4d:38:3a:d8:c6:4f:
                    5f:78:8c:31:9c:71:b4:e4:ea:63:06:39:42:2a:23:
                    e6:6c:2d:7f:9e:31:7d:7c:8f:ee:dd:c4:db:49:3b:
                    9c:b5:12:a9:95:92:19:e0:66:f6:46:87:2b:51:74:
                    f8:fb:3d:30:6a:68:19:e7:40:66:fc:cd:36:7f:bf:
                    92:96:4d:da:a1:49:e3:be:76:3e:44:f3:58:d7:82:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:2A:05:3A:2D:E0:68:C7:AD:87:67:6B:3D:CD:BF:98:B7:E9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/8461ce34-cf4c-3612-a529-a4a783652d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl

            X509v3 Authority Key Identifier:
                keyid:C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.88.0/21
                  108.59.32.0/20
                  199.83.184.0/21
                  208.90.224.0/22
                IPv6:
                  2605:5600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:70:96:2a:3e:6d:46:f8:14:e1:76:0f:cb:92:de:cb:e7:16:
         27:58:9e:e9:a5:de:12:35:34:bd:ad:57:56:7a:40:e5:cd:15:
         e8:cb:23:1a:87:93:72:17:bd:ec:af:0c:e1:33:69:f9:7a:c0:
         fc:58:4f:70:76:e2:de:a5:46:1c:b3:91:67:ad:81:40:f4:be:
         03:aa:60:71:ea:11:28:dd:41:37:39:e9:b5:4a:05:1f:e4:3a:
         35:f3:28:ef:41:b3:a1:63:b2:a5:99:91:8d:78:a6:cc:bb:a3:
         6c:95:8a:99:71:74:5a:92:5b:5a:4b:cf:84:ce:75:72:bf:eb:
         35:5b:3a:45:9d:7b:f2:fa:ed:bb:39:1b:82:23:2d:d5:ef:d5:
         8a:9c:27:e6:d1:03:12:dd:96:ea:26:a1:66:a4:98:69:0f:61:
         04:02:ce:25:a4:71:bb:20:26:90:07:31:35:9b:90:01:c4:d1:
         98:88:35:f2:2f:9a:73:c3:0a:a6:ec:92:c2:ea:d7:a8:1d:ec:
         b3:de:3f:ea:a7:16:bf:5a:6b:ad:48:b9:2e:29:8d:f3:92:69:
         51:13:df:f8:5e:30:4d:3c:e4:d1:58:07:e5:90:a2:e0:29:91:
         9c:53:e8:70:77:d4:87:12:ed:fd:3f:21:61:d3:e4:fb:1a:d5:
         cd:dd:9f:45
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEzv8jof6JXvAaDa5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI1ZDY4NmUtMGI0MC00NDUwLWJjNzMtNmEyMGIwNjEz
NWYxMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
ODZmOTgwZDUtNDBiZi00YjEzLWE1YWItMmYyN2Y4YzU3MDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9N71adoij8iSTelm5I6dfCweX/5sitSDx9Y
EMP5VKAhSaFb+LtMqaZNPoGWw2p3sdEb6RDSDX4Kt/WrQuQQ5jSuosXRuDwtQkC8
fXWOLJ2D5JvlaGUfO87pm9MCK1D4cwgjtFxiduTMItcIyCWaVV9wsP73903Kw1bp
cdQDHheMtOFC+UWb5t0j0ys0grtNLLIoxAT9uNawbkjHDKX3AU1Z+XjY79VW9NFn
CX5NODrYxk9feIwxnHG05OpjBjlCKiPmbC1/njF9fI/u3cTbSTuctRKplZIZ4Gb2
RocrUXT4+z0wamgZ50Bm/M02f7+Slk3aoUnjvnY+RPNY14IpXwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFIYnKgU6LeBox62HZ2s9zb+Yt+nzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjVk
Njg2ZS0wYjQwLTQ0NTAtYmM3My02YTIwYjA2MTM1ZjEvODQ2MWNlMzQtY2Y0Yy0z
NjEyLWE1MjktYTRhNzgzNjUyZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTI1ZDY4NmUtMGI0MC00NDUwLWJj
NzMtNmEyMGIwNjEzNWYxL2UyNWQ2ODZlLTBiNDAtNDQ1MC1iYzczLTZhMjBiMDYx
MzVmMS5jcmwwHwYDVR0jBBgwFoAUyCb7B3Hd5j3W7xHiH43MhTc6zEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjVkNjg2ZS0wYjQwLTQ0NTAtYmM3My02YTIw
YjA2MTM1ZjEuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDSnNYAwQE
bDsgAwQDx1O4AwQC0FrgMA0EAgACMAcDBQAmBVYAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACFwlio+bUb4
FOF2D8uS3svnFidYnuml3hI1NL2tV1Z6QOXNFejLIxqHk3IXveyvDOEzafl6wPxY
T3B24t6lRhyzkWetgUD0vgOqYHHqESjdQTc56bVKBR/kOjXzKO9Bs6FjsqWZkY14
psy7o2yViplxdFqSW1pLz4TOdXK/6zVbOkWde/L67bs5G4IjLdXv1YqcJ+bRAxLd
luomoWakmGkPYQQCziWkcbsgJpAHMTWbkAHE0ZiINfIvmnPDCqbsksLq16gd7LPe
P+qnFr9aa61IuS4pjfOSaVET3/heME085NFYB+WQouApkZxT6HB31IcS7f0/IWHT
5Psa1c3dn0U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:34 2026 by rpki-client