Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa
File:                     2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa (raw, json)
Hash identifier:          bnSjAt7bJT/6XfZmE3H/xDVXGkbXV9/HLgaJwPys47M=
Subject key identifier:   04:E4:1A:31:90:06:5B:AC:40:6D:59:01:D7:41:8A:1D:29:C8:B2:A5
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F4328584CD6D20A0FECCD2BABB4FCA000
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        192.0.58.0/24 maxlen: 24
                          192.0.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:0a:0f:ec:cd:2b:ab:b4:fc:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=ed00c63a-9b6a-4d2c-aca5-213d84ad869a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:f0:93:89:c4:3b:d3:64:78:5a:95:3c:a1:
                    47:a2:17:2e:1e:b5:c7:c0:18:ed:93:a6:75:b8:20:
                    b6:1e:27:cb:7f:8c:1c:43:e8:26:9a:ad:bd:35:ea:
                    bd:64:98:17:02:94:a0:e4:12:b4:32:cc:21:23:a0:
                    c1:a6:b9:60:e6:bd:21:0c:54:7b:4d:f2:81:20:5a:
                    6d:d6:69:b2:2e:2b:6a:d6:1f:f7:b5:80:d4:53:35:
                    67:fe:ae:86:15:47:13:da:29:a9:2b:b4:49:3e:d1:
                    43:60:83:9e:aa:2b:02:3d:df:fe:c0:a3:a5:c2:26:
                    bd:e4:05:59:6a:86:d6:3f:19:ab:1e:64:a5:2f:35:
                    c2:b8:d5:00:09:47:7e:2b:26:46:00:5d:31:57:ff:
                    9a:78:cd:df:d0:f3:a2:a9:71:00:e3:61:27:b7:59:
                    64:b2:32:b8:4f:e1:d7:95:f4:17:29:a3:72:f8:00:
                    27:84:6d:6c:71:f7:f0:cf:cd:b4:43:7c:3c:6a:bb:
                    ab:12:5c:d2:e1:cd:1a:15:65:cf:cc:0f:2d:71:cb:
                    71:f5:f6:4f:cb:bc:8a:61:fb:52:77:c3:cc:a7:e1:
                    ba:0e:47:d0:d4:c6:87:4c:02:47:eb:fd:7f:00:9d:
                    0b:d5:95:d2:bd:89:ca:70:69:93:18:2e:3c:39:cd:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E4:1A:31:90:06:5B:AC:40:6D:59:01:D7:41:8A:1D:29:C8:B2:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:b0:a1:e2:08:31:80:f0:7b:3d:db:e0:b8:89:e2:0b:91:
         bb:1e:14:d6:36:f4:cd:87:fd:97:c3:3e:eb:1f:21:d8:4a:ee:
         ab:c8:58:fd:53:13:42:9a:a7:c4:48:b4:9c:a6:e5:c5:f6:4e:
         9e:9e:3a:69:d1:f5:ee:bb:0d:88:01:25:dd:52:3a:0f:31:ac:
         52:50:c8:37:bf:82:9c:38:7b:86:14:a4:b6:60:9e:60:67:8e:
         13:d4:93:2c:bd:2b:ee:40:99:62:85:c1:17:4c:8a:8e:59:1d:
         db:d3:df:3f:51:70:ee:47:12:51:ca:74:53:f6:60:69:2d:40:
         0c:76:cf:6c:a0:18:7c:c7:1f:15:89:17:66:33:e0:d0:a0:4b:
         b9:bc:fb:16:81:e5:d5:da:2a:96:bb:d8:fe:64:d2:8a:4f:a9:
         3c:d1:56:8a:00:f7:43:52:4c:c4:4c:3d:97:c9:24:31:88:66:
         a5:76:6d:d3:4d:05:c4:45:74:62:2a:5a:1f:a3:a1:0a:74:b9:
         b1:59:6e:55:75:f0:d7:87:a0:4d:af:38:3e:09:46:4c:4e:53:
         98:8a:ac:56:e5:e1:d3:46:50:fc:da:0d:94:2e:d3:79:7a:69:
         64:4c:55:9e:76:9d:7a:9d:f9:b7:99:9a:0c:bf:0b:59:1a:f4:
         47:cf:73:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0goP7M0rq7T8oAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAxOGJmZTktNTY0My00ODhhLWE5Y2QtMzljYjc4Y2Fk
ZmExMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
ZWQwMGM2M2EtOWI2YS00ZDJjLWFjYTUtMjEzZDg0YWQ4NjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlbwk4nEO9NkeFqVPKFHohcuHrXHwBjtk6Z1
uCC2HifLf4wcQ+gmmq29Neq9ZJgXApSg5BK0MswhI6DBprlg5r0hDFR7TfKBIFpt
1mmyLitq1h/3tYDUUzVn/q6GFUcT2impK7RJPtFDYIOeqisCPd/+wKOlwia95AVZ
aobWPxmrHmSlLzXCuNUACUd+KyZGAF0xV/+aeM3f0POiqXEA42Ent1lksjK4T+HX
lfQXKaNy+AAnhG1scffwz820Q3w8arurElzS4c0aFWXPzA8tcctx9fZPy7yKYftS
d8PMp+G6DkfQ1MaHTAJH6/1/AJ0L1ZXSvYnKcGmTGC48Oc3g3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATkGjGQBlusQG1ZAddBih0pyLKlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4
YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNiNzhjYWRmYTEvMmVkODAxZjAtMGE5YS0z
YWIzLTllNTEtMzRjNWM4MDU4NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAxOGJmZTktNTY0My00ODhhLWE5
Y2QtMzljYjc4Y2FkZmExLzQwMThiZmU5LTU2NDMtNDg4YS1hOWNkLTM5Y2I3OGNh
ZGZhMS5jcmwwHwYDVR0jBBgwFoAU92gYKDUvn3LcLDIzRMtSiNLHGm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNi
NzhjYWRmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwAA6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6asKHiCDGA8Hs92+C4ieILkbseFNY29M2H/ZfDPusfIdhK7qvIWP1T
E0Kap8RItJym5cX2Tp6eOmnR9e67DYgBJd1SOg8xrFJQyDe/gpw4e4YUpLZgnmBn
jhPUkyy9K+5AmWKFwRdMio5ZHdvT3z9RcO5HElHKdFP2YGktQAx2z2ygGHzHHxWJ
F2Yz4NCgS7m8+xaB5dXaKpa72P5k0opPqTzRVooA90NSTMRMPZfJJDGIZqV2bdNN
BcRFdGIqWh+joQp0ubFZblV18NeHoE2vOD4JRkxOU5iKrFbl4dNGUPzaDZQu03l6
aWRMVZ52nXqd+beZmgy/C1ka9EfPczg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:58 2026 by rpki-client