Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2180333d-d822-3436-9c6f-ac4bd7101357.roa
File:                     2180333d-d822-3436-9c6f-ac4bd7101357.roa (raw, json)
Hash identifier:          XOssLWRM12Ct2D8NudYNmdlWTPFf2lHwjSI6mODTWGY=
Subject key identifier:   F3:24:1A:37:C4:93:0B:BD:17:C9:40:E7:AB:38:A9:9D:EE:F6:E8:6F
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584CD13CB2ECC5ADAEB08A4B8960
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2180333d-d822-3436-9c6f-ac4bd7101357.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     6461
IP address blocks:        107.166.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b2:ec:c5:ad:ae:b0:8a:4b:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=4b4777aa-a34a-48c9-8417-e4c09bd5c689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:d9:d0:28:f7:59:4f:d2:a9:ee:1e:f4:df:
                    45:bf:ce:10:c2:81:f9:47:e3:bf:58:8c:a3:4e:1a:
                    1f:8c:83:ea:33:ac:74:96:ec:c1:99:1d:8f:a1:31:
                    9d:00:c0:9a:9e:c0:ad:93:22:82:96:8b:7c:c9:55:
                    e8:6c:7d:bc:e5:25:f8:c0:78:34:7e:ff:a3:fb:72:
                    a2:50:c1:8d:3b:20:5a:a3:c1:75:69:e5:7b:33:7a:
                    97:e6:02:8e:79:e8:f8:de:84:da:ec:dd:b7:59:82:
                    e3:b6:49:9f:95:26:1a:dc:17:88:95:f7:d5:b1:ce:
                    c4:ab:3e:a3:e5:fb:ea:91:c5:1f:ee:fd:4b:e7:be:
                    f4:45:e2:89:87:67:10:cb:94:29:87:83:23:4e:71:
                    3f:e7:8a:b9:a4:5b:e0:16:cd:1a:86:b4:9b:0c:df:
                    fc:7e:15:cc:35:70:2c:fe:15:7c:2f:bf:0c:af:a4:
                    a0:0b:df:9b:21:7a:ee:b0:a2:01:61:3d:f0:fd:7d:
                    6a:f5:33:a1:23:a2:6e:b1:df:50:af:f7:ed:5a:0e:
                    33:5e:93:16:92:52:5f:07:05:f0:26:c9:51:eb:60:
                    a5:ab:a7:40:02:05:08:e9:2e:04:b6:b2:51:37:b5:
                    6b:37:c3:d3:b0:2b:b9:92:4a:f7:7d:83:ef:2c:14:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:1A:37:C4:93:0B:BD:17:C9:40:E7:AB:38:A9:9D:EE:F6:E8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2180333d-d822-3436-9c6f-ac4bd7101357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:2d:0c:e9:e7:b4:6d:ea:de:c0:25:b8:43:22:00:0b:2b:
         92:a0:b1:c9:96:02:e8:a8:89:54:70:ad:ba:79:16:6e:b2:7b:
         43:1e:c3:12:b9:fb:25:c9:24:4e:a6:aa:0b:51:bc:97:2d:6a:
         12:72:3a:29:b1:b8:e6:a7:f3:22:89:ab:48:46:f1:73:4f:87:
         d0:8f:7c:44:8a:52:8a:50:59:33:03:1d:5e:43:75:40:76:55:
         31:f9:3f:be:f2:91:8d:bc:c8:5d:e4:f8:19:1e:9e:db:f0:04:
         63:ac:18:64:cf:e4:61:d2:63:bd:84:8d:9b:1f:a6:64:a0:e3:
         ed:95:62:77:c3:b7:93:fb:3f:ac:8d:c0:e0:b0:13:de:3c:76:
         13:4e:cb:da:df:e8:66:f4:19:72:bc:3b:a6:11:c8:1e:3e:1b:
         d9:c7:74:7f:7d:dd:6e:9c:58:86:08:15:0e:46:7b:d8:c4:f2:
         b0:be:c5:b5:ae:65:12:d7:7d:b9:f6:43:b0:bc:f4:44:d0:11:
         5a:e5:34:b4:5e:af:37:7f:2e:59:6e:45:06:df:c7:12:94:a2:
         22:15:b2:3b:72:49:f3:72:34:cc:8e:19:c4:63:c8:1b:9c:09:
         1c:51:24:c1:37:33:47:12:29:36:50:c8:0e:7e:49:41:ed:db:
         b2:80:dd:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPLLsxa2usIpLiWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
NGI0Nzc3YWEtYTM0YS00OGM5LTg0MTctZTRjMDliZDVjNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUPZ0Cj3WU/Sqe4e9N9Fv84QwoH5R+O/WIyj
ThofjIPqM6x0luzBmR2PoTGdAMCansCtkyKClot8yVXobH285SX4wHg0fv+j+3Ki
UMGNOyBao8F1aeV7M3qX5gKOeej43oTa7N23WYLjtkmflSYa3BeIlffVsc7Eqz6j
5fvqkcUf7v1L5770ReKJh2cQy5Qph4MjTnE/54q5pFvgFs0ahrSbDN/8fhXMNXAs
/hV8L78Mr6SgC9+bIXrusKIBYT3w/X1q9TOhI6Jusd9Qr/ftWg4zXpMWklJfBwXw
JslR62Clq6dAAgUI6S4EtrJRN7VrN8PTsCu5kkr3fYPvLBTdAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMkGjfEkwu9F8lA56s4qZ3u9uhvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMjE4MDMzM2QtZDgyMi0z
NDM2LTljNmYtYWM0YmQ3MTAxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6YMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz4LQzp57Rt6t7AJbhDIgALK5KgscmWAuioiVRwrbp5Fm6ye0MewxK5
+yXJJE6mqgtRvJctahJyOimxuOan8yKJq0hG8XNPh9CPfESKUopQWTMDHV5DdUB2
VTH5P77ykY28yF3k+BkentvwBGOsGGTP5GHSY72EjZsfpmSg4+2VYnfDt5P7P6yN
wOCwE948dhNOy9rf6Gb0GXK8O6YRyB4+G9nHdH993W6cWIYIFQ5Ge9jE8rC+xbWu
ZRLXfbn2Q7C89ETQEVrlNLRerzd/LlluRQbfxxKUoiIVsjtySfNyNMyOGcRjyBuc
CRxRJME3M0cSKTZQyA5+SUHt27KA3Q8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:10 2026 by rpki-client