Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/e3ba4400-8694-33ef-add0-4b97cb1013e1.roa
File:                     e3ba4400-8694-33ef-add0-4b97cb1013e1.roa (raw, json)
Hash identifier:          ZSfj+LaX94han7D36gnBGYwze5bjGa4U/QNTi31qjHI=
Subject key identifier:   3C:AD:0F:4F:97:D9:2B:82:2D:49:08:A4:98:69:B3:2F:3C:8A:FB:25
Certificate issuer:       /CN=2dc207a0-a39a-4922-b631-3ea815cafcad
Certificate serial:       010D0C9F4328584CF5879175F7D22C5EE9955E00
Authority key identifier: 70:EF:B2:36:35:A8:A4:17:22:B1:76:B5:1B:9E:6D:36:A3:6C:3B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/e3ba4400-8694-33ef-add0-4b97cb1013e1.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     18647
IP address blocks:        69.84.240.0/20 maxlen: 24
                          160.238.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/2dc207a0-a39a-4922-b631-3ea815cafcad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/2dc207a0-a39a-4922-b631-3ea815cafcad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:91:75:f7:d2:2c:5e:e9:95:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc207a0-a39a-4922-b631-3ea815cafcad
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=76e58812-e9ea-4687-8555-0e809c4abe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:83:5b:7d:12:3f:59:a6:2c:f9:4d:b7:78:
                    05:a6:e6:75:20:c2:c8:85:56:2a:af:88:17:cd:46:
                    b4:b5:33:ee:a2:a2:2e:b8:d8:db:d2:ca:2b:c2:ba:
                    c0:15:f6:f0:2f:88:1e:cc:a2:cf:51:f1:64:74:5d:
                    e6:f0:f4:cb:80:07:73:e2:ae:1d:f7:8a:31:4b:11:
                    47:01:56:89:06:ac:68:42:fe:8b:d7:6c:9c:4f:7e:
                    6d:a9:d9:5c:e2:89:6e:fd:44:5c:1d:16:e4:45:f6:
                    15:c7:a9:3b:98:fa:47:e2:61:76:a4:3f:01:fb:76:
                    3b:df:e2:8d:c9:d5:d1:db:6d:0b:c1:e4:47:d5:d5:
                    88:d9:f8:fd:80:25:d4:bf:5a:cc:1f:b7:95:2f:f4:
                    44:fb:8c:92:a4:88:8b:d2:a8:b4:87:10:ba:76:59:
                    1e:e5:db:be:28:8f:90:ab:b7:57:c5:25:91:29:e6:
                    ab:09:a4:76:5c:a7:a5:65:e0:0a:ec:bc:32:40:bb:
                    41:e3:a6:0f:fd:34:ff:8d:9f:20:6d:f6:84:2d:64:
                    f3:92:d6:10:3b:3e:31:79:0e:07:00:2b:ce:78:14:
                    a5:96:25:18:2b:6b:c1:16:a9:b0:b4:48:04:31:48:
                    87:1a:4a:65:55:1e:32:b1:5c:6b:5d:68:ab:3b:9b:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:0F:4F:97:D9:2B:82:2D:49:08:A4:98:69:B3:2F:3C:8A:FB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/e3ba4400-8694-33ef-add0-4b97cb1013e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/2dc207a0-a39a-4922-b631-3ea815cafcad.crl

            X509v3 Authority Key Identifier:
                keyid:70:EF:B2:36:35:A8:A4:17:22:B1:76:B5:1B:9E:6D:36:A3:6C:3B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.240.0/20
                  160.238.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:87:db:75:64:e9:ff:38:45:3d:4e:0d:96:2c:41:e1:af:
         8e:57:b7:e4:78:b4:ce:4b:cf:38:f4:9b:bf:3b:78:62:13:ce:
         e5:a2:67:c3:3f:5d:ff:08:25:26:10:ab:06:b2:b8:bf:d3:a7:
         c7:71:a9:28:5f:b8:4a:bb:38:21:ca:9e:80:1f:bf:8a:77:75:
         73:b1:86:e5:c8:d1:3a:6c:97:ae:63:b9:98:2d:f9:cb:14:e6:
         bb:d6:40:83:7d:a9:c2:17:89:d4:b8:7d:a7:d0:93:a9:56:d1:
         97:5d:65:e7:07:92:2a:5d:db:6f:55:23:a8:37:d1:ed:27:fb:
         cf:31:ed:da:b0:52:52:5c:b3:f0:28:20:41:01:fa:f3:49:95:
         60:de:73:19:4c:c5:84:2d:f7:95:b8:1f:87:b5:5c:aa:63:20:
         1b:84:e0:12:b7:fa:f6:91:17:f8:50:eb:7a:85:9c:d9:c9:9c:
         44:2a:6e:0b:a0:2d:1e:38:df:b2:78:73:30:32:18:96:78:cf:
         aa:35:4f:6a:60:8a:5d:0b:65:00:5a:fd:e5:9d:bd:0a:a5:66:
         3f:63:a6:82:31:ee:32:35:2b:0e:db:78:dd:b6:be:e7:e5:5b:
         81:a3:6c:e1:47:e9:dc:e7:76:52:5c:6f:ca:37:26:c4:e8:d5:
         23:f3:f0:03
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz1h5F199IsXumVXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRjMjA3YTAtYTM5YS00OTIyLWI2MzEtM2VhODE1Y2Fm
Y2FkMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
NzZlNTg4MTItZTllYS00Njg3LTg1NTUtMGU4MDljNGFiZTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdCDW30SP1mmLPlNt3gFpuZ1IMLIhVYqr4gX
zUa0tTPuoqIuuNjb0sorwrrAFfbwL4gezKLPUfFkdF3m8PTLgAdz4q4d94oxSxFH
AVaJBqxoQv6L12ycT35tqdlc4olu/URcHRbkRfYVx6k7mPpH4mF2pD8B+3Y73+KN
ydXR220LweRH1dWI2fj9gCXUv1rMH7eVL/RE+4ySpIiL0qi0hxC6dlke5du+KI+Q
q7dXxSWRKearCaR2XKelZeAK7LwyQLtB46YP/TT/jZ8gbfaELWTzktYQOz4xeQ4H
ACvOeBSlliUYK2vBFqmwtEgEMUiHGkplVR4ysVxrXWirO5sTZwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDytD0+X2SuCLUkIpJhpsy88ivslMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGMy
MDdhMC1hMzlhLTQ5MjItYjYzMS0zZWE4MTVjYWZjYWQvZTNiYTQ0MDAtODY5NC0z
M2VmLWFkZDAtNGI5N2NiMTAxM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmRjMjA3YTAtYTM5YS00OTIyLWI2
MzEtM2VhODE1Y2FmY2FkLzJkYzIwN2EwLWEzOWEtNDkyMi1iNjMxLTNlYTgxNWNh
ZmNhZC5jcmwwHwYDVR0jBBgwFoAUcO+yNjWopBcisXa1G55tNqNsO78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGMyMDdhMC1hMzlhLTQ5MjItYjYzMS0zZWE4
MTVjYWZjYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERVTwAwQA
oO4qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH/wh9t1ZOn/OEU9Tg2WLEHhr45Xt+R4tM5Lzzj0m787eGIT
zuWiZ8M/Xf8IJSYQqwayuL/Tp8dxqShfuEq7OCHKnoAfv4p3dXOxhuXI0Tpsl65j
uZgt+csU5rvWQIN9qcIXidS4fafQk6lW0ZddZecHkipd229VI6g30e0n+88x7dqw
UlJcs/AoIEEB+vNJlWDecxlMxYQt95W4H4e1XKpjIBuE4BK3+vaRF/hQ63qFnNnJ
nEQqbgugLR4437J4czAyGJZ4z6o1T2pgil0LZQBa/eWdvQqlZj9jpoIx7jI1Kw7b
eN22vuflW4GjbOFH6dzndlJcb8o3JsTo1SPz8AM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:55 2026 by rpki-client