Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa
File:                     10d866bc-ec9c-3557-be0c-1355d534c8a4.roa (raw, json)
Hash identifier:          XD3g7uI5X8CGTnLrt+qV+tbtiQAS6ylhlUViW4SrxbQ=
Subject key identifier:   A5:7C:37:3B:37:B8:E4:3A:11:66:03:BD:8F:09:9D:06:4F:0B:CB:08
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584CEE45179F3EBAFF1A4B444880
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa
Signing time:             Fri 20 Feb 2026 23:36:14 +0000
ROA not before:           Fri 20 Feb 2026 23:36:14 +0000
ROA not after:            Thu 21 May 2026 22:36:14 +0000
asID:                     54520
IP address blocks:        199.216.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:45:17:9f:3e:ba:ff:1a:4b:44:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Feb 20 23:36:14 2026 GMT
            Not After : May 21 22:36:14 2026 GMT
        Subject: CN=0c80195f-3fc3-410a-9195-952b7f2f6130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:21:63:4b:48:69:ad:4d:59:c3:5b:d9:05:
                    99:54:9a:30:fc:cd:74:0e:cf:c3:21:44:02:39:f0:
                    cf:49:3b:42:0d:f9:b2:16:78:54:6b:0b:32:c9:0d:
                    e2:fd:f4:c8:86:4d:b6:64:ae:3d:77:46:81:bf:1f:
                    a9:92:b0:36:45:f3:26:41:40:e0:6a:8b:67:84:8f:
                    c8:02:52:47:0b:ee:c8:0b:12:ca:09:0b:2f:1f:ae:
                    d9:d3:5f:5d:b5:ad:bf:fb:66:f1:7c:ff:d1:b5:85:
                    72:39:82:ec:28:7d:0b:8b:c3:e1:a6:a4:f2:ea:41:
                    65:90:ef:eb:f3:68:eb:96:8f:d8:94:1b:33:2f:3e:
                    e3:93:26:0d:33:0c:b5:97:d2:5a:97:d8:73:ba:b1:
                    66:70:14:fa:b3:dd:f0:bf:33:05:3a:7e:f1:e4:12:
                    fe:24:c8:96:c1:e0:74:a1:6c:e4:a2:bb:17:0e:25:
                    77:33:e3:d0:f5:25:71:ed:ab:d7:28:ff:eb:b0:00:
                    95:dc:ce:7e:3b:e1:c0:d4:d6:c4:56:b3:ea:d4:e4:
                    99:59:ae:6f:8b:89:67:26:74:2a:1d:3a:16:99:7b:
                    83:1d:51:66:fc:ea:38:4b:62:5f:68:b5:df:d7:6b:
                    9e:84:35:c1:1e:45:4e:a3:5d:03:e9:a4:29:7f:eb:
                    34:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:37:3B:37:B8:E4:3A:11:66:03:BD:8F:09:9D:06:4F:0B:CB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:39:b6:9c:5c:25:47:82:09:3c:7b:e2:d7:48:a4:5f:9d:27:
         b5:2e:7e:ad:cd:2f:41:f4:fc:52:9a:e1:93:2d:14:36:12:71:
         f4:61:05:31:62:1b:41:e9:4f:9c:e1:13:ae:6e:8f:40:1b:90:
         37:eb:6d:c5:be:53:46:20:57:cd:9f:0e:e2:42:61:a3:a1:82:
         3f:e4:26:ab:63:ee:95:70:a2:0b:7b:ce:ac:9d:4e:29:56:2b:
         cd:c8:28:d7:73:de:a5:15:31:85:25:da:25:a3:47:c2:96:8b:
         34:97:d2:7d:0e:4f:33:4c:d8:cf:fa:27:b4:7c:bf:3e:67:c9:
         6f:a3:bb:d3:d8:c8:8e:00:d6:5d:70:97:96:13:e6:82:ae:02:
         13:36:af:6c:8d:5d:24:7c:0b:72:24:9f:ae:7c:f5:8f:d4:02:
         d8:ab:77:40:ad:15:6d:20:fc:42:17:72:28:87:72:71:52:86:
         e2:0b:0b:ed:99:21:b0:d6:1d:81:60:e2:e5:8a:c5:82:4f:dc:
         4b:ed:c0:95:f9:6c:90:86:07:3e:2a:ef:62:37:bc:ac:87:b8:
         0f:03:b6:8d:b3:71:e3:c7:2e:6d:dc:8f:95:44:26:f8:99:94:
         be:1f:22:32:a1:67:58:33:23:d8:0b:66:b1:d1:dc:6e:37:47:
         74:f4:a6:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzuRRefPrr/GktESIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDIyMDIzMzYxNFoXDTI2MDUyMTIyMzYxNFowLzEtMCsGA1UEAxMk
MGM4MDE5NWYtM2ZjMy00MTBhLTkxOTUtOTUyYjdmMmY2MTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1shY0tIaa1NWcNb2QWZVJow/M10Ds/DIUQC
OfDPSTtCDfmyFnhUawsyyQ3i/fTIhk22ZK49d0aBvx+pkrA2RfMmQUDgaotnhI/I
AlJHC+7ICxLKCQsvH67Z019dta2/+2bxfP/RtYVyOYLsKH0Li8PhpqTy6kFlkO/r
82jrlo/YlBszLz7jkyYNMwy1l9Jal9hzurFmcBT6s93wvzMFOn7x5BL+JMiWweB0
oWzkorsXDiV3M+PQ9SVx7avXKP/rsACV3M5+O+HA1NbEVrPq1OSZWa5vi4lnJnQq
HToWmXuDHVFm/Oo4S2JfaLXf12uehDXBHkVOo10D6aQpf+s0xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKV8Nzs3uOQ6EWYDvY8JnQZPC8sIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMTBkODY2YmMtZWM5Yy0z
NTU3LWJlMGMtMTM1NWQ1MzRjOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9guMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADc5tpxcJUeCCTx74tdIpF+dJ7Uufq3NL0H0/FKa4ZMtFDYScfRhBTFi
G0HpT5zhE65uj0AbkDfrbcW+U0YgV82fDuJCYaOhgj/kJqtj7pVwogt7zqydTilW
K83IKNdz3qUVMYUl2iWjR8KWizSX0n0OTzNM2M/6J7R8vz5nyW+ju9PYyI4A1l1w
l5YT5oKuAhM2r2yNXSR8C3Ikn6589Y/UAtird0CtFW0g/EIXciiHcnFShuILC+2Z
IbDWHYFg4uWKxYJP3EvtwJX5bJCGBz4q72I3vKyHuA8Dto2zcePHLm3cj5VEJviZ
lL4fIjKhZ1gzI9gLZrHR3G43R3T0phM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:30 2026 by rpki-client