Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
File:                     61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa (raw, json)
Hash identifier:          F9XnIkdAjkzmweafmSkntNJWkIB8WR6JuaZ/3TV3xwM=
Subject key identifier:   AC:54:10:53:3A:F9:A4:36:7B:A7:9D:68:14:96:0C:CB:B5:75:E7:58
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584CD13CA8B9824B78584DE21580
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     13347
IP address blocks:        198.145.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a8:b9:82:4b:78:58:4d:e2:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=b5bf73d3-c043-4836-9135-bcfae232bd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:90:e2:3a:4b:4b:07:b0:82:46:5b:55:6c:
                    9a:ca:8f:28:8d:bc:c1:88:53:fc:0b:07:31:d2:6d:
                    d6:e0:ad:b6:48:6d:a0:bd:30:b9:90:7d:a5:6b:e4:
                    61:67:3c:57:61:5c:b5:71:5b:98:65:ef:b4:a9:a4:
                    8b:fd:96:10:e5:0f:e3:0c:ce:c3:ec:8d:b7:47:73:
                    05:2b:ce:44:c3:af:b3:51:6c:74:b2:52:72:c0:9d:
                    ad:ec:ed:28:60:15:97:36:38:4b:24:5f:63:92:a7:
                    d4:5e:d0:2d:16:b8:e6:cd:f0:40:01:c3:6d:51:f2:
                    48:fe:08:b9:19:11:84:bd:77:44:d0:1e:fc:58:81:
                    f5:52:54:db:d7:35:7f:0c:0f:90:51:5d:75:c0:cf:
                    ff:4e:2d:58:74:dc:27:57:2a:45:b1:2a:f7:4e:99:
                    8d:c7:e7:2d:b5:12:8e:b1:6b:f3:81:36:88:79:cf:
                    5b:3f:38:f1:31:8e:bb:0f:d5:72:05:68:f4:c5:c7:
                    d3:e4:ef:23:3a:82:94:d6:05:ba:c6:da:10:29:72:
                    a5:69:2c:ea:cf:36:38:51:49:fc:1d:49:29:3e:29:
                    22:b3:4f:b8:ae:c0:c5:4a:73:16:9d:06:28:c1:bd:
                    c5:81:e1:bb:04:ce:a5:6a:fc:6c:f0:5c:53:a4:dc:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:10:53:3A:F9:A4:36:7B:A7:9D:68:14:96:0C:CB:B5:75:E7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:25:db:7f:f5:26:6f:47:a0:82:81:6b:dc:75:e1:e1:08:a6:
         58:11:b7:2b:ae:61:54:1c:39:df:66:8b:fd:c9:75:12:eb:07:
         ba:ad:0e:22:2c:53:77:5d:e0:f4:61:be:12:02:72:eb:b8:10:
         26:73:ad:94:68:8b:04:42:cd:90:0b:bd:12:aa:23:bd:bc:d5:
         4e:cc:15:ca:b5:3e:03:44:74:dd:2f:cd:94:9d:f3:6b:b1:20:
         cf:54:ff:50:ae:35:1e:c7:aa:2a:21:01:7c:8b:c2:3b:d6:83:
         87:27:1a:2f:90:4c:98:f7:ed:a9:86:f2:ed:05:dd:31:c4:0f:
         d0:2c:d9:cb:6c:b2:8a:2a:d3:d0:65:9a:39:f6:e5:d4:0f:85:
         38:49:61:cb:86:2d:a0:40:7e:7d:0c:3d:f5:eb:4a:e2:e2:5c:
         13:77:26:d0:29:89:74:14:3b:ec:f0:8a:21:6f:c1:05:4c:a2:
         dd:0f:76:9e:f1:c3:d9:5a:cb:3e:1d:c1:9d:36:a7:0e:e1:66:
         2a:c3:bc:34:bd:3c:2f:66:73:d9:1d:0d:81:86:f7:6b:d1:ba:
         9a:34:ae:5b:48:51:63:59:88:34:7a:39:c4:76:df:53:ea:23:
         1c:c0:2e:e9:3f:fc:67:41:52:25:19:9f:1e:8e:f1:16:99:44:
         ef:25:28:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKi5gkt4WE3iFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
YjViZjczZDMtYzA0My00ODM2LTkxMzUtYmNmYWUyMzJiZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKaQ4jpLSwewgkZbVWyayo8ojbzBiFP8Cwcx
0m3W4K22SG2gvTC5kH2la+RhZzxXYVy1cVuYZe+0qaSL/ZYQ5Q/jDM7D7I23R3MF
K85Ew6+zUWx0slJywJ2t7O0oYBWXNjhLJF9jkqfUXtAtFrjmzfBAAcNtUfJI/gi5
GRGEvXdE0B78WIH1UlTb1zV/DA+QUV11wM//Ti1YdNwnVypFsSr3TpmNx+cttRKO
sWvzgTaIec9bPzjxMY67D9VyBWj0xcfT5O8jOoKU1gW6xtoQKXKlaSzqzzY4UUn8
HUkpPikis0+4rsDFSnMWnQYowb3FgeG7BM6lavxs8FxTpNx1BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxUEFM6+aQ2e6edaBSWDMu1dedYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNjFkMmMzN2UtNGMzYS0z
YTAyLWI1YTktYWU3Y2EwMDhlOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpFmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMUl23/1Jm9HoIKBa9x14eEIplgRtyuuYVQcOd9mi/3JdRLrB7qtDiIs
U3dd4PRhvhICcuu4ECZzrZRoiwRCzZALvRKqI7281U7MFcq1PgNEdN0vzZSd82ux
IM9U/1CuNR7HqiohAXyLwjvWg4cnGi+QTJj37amG8u0F3THED9As2ctssooq09Bl
mjn25dQPhThJYcuGLaBAfn0MPfXrSuLiXBN3JtApiXQUO+zwiiFvwQVMot0Pdp7x
w9layz4dwZ02pw7hZirDvDS9PC9mc9kdDYGG92vRupo0rltIUWNZiDR6OcR231Pq
IxzALuk//GdBUiUZnx6O8RaZRO8lKDg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:51 2026 by rpki-client