Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
File:                     9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa (raw, json)
Hash identifier:          nV6rSH1HzwyKAKUzCSVQXFujO2qcFFH4NLQkBCJtKd0=
Subject key identifier:   78:4F:D3:E9:03:D6:E5:7A:AD:32:2D:72:64:73:EA:88:25:CF:85:DE
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584CEA5CDDFF8F365BA63E9DEBC0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     46841
IP address blocks:        199.87.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:dd:ff:8f:36:5b:a6:3e:9d:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=8414439f-e301-4666-9c17-676a797b7c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:e2:79:07:7a:de:c5:1e:3a:20:f9:0c:6f:
                    57:c6:72:d8:d6:55:a2:a7:cf:db:da:6f:60:a8:cf:
                    7c:78:c3:59:70:32:bd:f3:a8:8c:1a:56:20:68:c2:
                    82:cc:db:8e:59:93:6e:9e:9f:44:52:54:42:76:fd:
                    2f:6b:ce:47:f8:e3:4a:dc:c8:c1:ef:80:f8:d7:62:
                    fb:8b:66:05:4f:44:fe:c7:b0:e2:82:43:89:cf:9d:
                    c1:3f:c1:66:03:8f:43:dd:3f:b1:f5:08:5f:41:4d:
                    36:c6:37:8b:f1:8c:d9:5f:b6:30:29:7d:62:f0:09:
                    74:46:43:6e:95:b6:5a:6e:da:b5:07:36:9c:5a:19:
                    2d:d9:45:43:e0:87:0c:5c:1d:29:71:9a:b6:88:7a:
                    fb:1e:07:ff:63:34:06:a1:20:b3:71:9b:8c:a2:f4:
                    88:df:7f:21:3c:6c:38:e6:5c:9f:70:0c:be:fa:d9:
                    72:66:38:2f:27:67:2e:eb:17:ff:d4:d1:a6:13:ff:
                    f9:ca:ad:b7:78:54:d6:af:d2:89:ca:68:05:c0:16:
                    e9:dc:34:41:5d:94:9d:23:b4:ba:74:cd:3b:9a:01:
                    74:2f:02:cc:a5:69:a3:46:74:59:27:81:b0:1e:df:
                    7f:e2:53:ee:40:af:60:d1:10:e8:d2:ec:b3:fb:47:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:D3:E9:03:D6:E5:7A:AD:32:2D:72:64:73:EA:88:25:CF:85:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:78:7d:da:23:c9:13:87:c1:58:16:6a:eb:1f:e8:45:e3:e1:
         5c:e3:c3:c0:ba:30:0a:99:d9:19:c5:97:37:7e:80:e6:ab:13:
         c5:70:01:6b:c3:a1:67:24:0c:8f:47:b9:48:6b:7e:d3:e8:d2:
         49:5f:be:84:77:99:16:57:eb:27:e3:34:cb:b3:8a:cb:0c:1c:
         db:f0:3d:95:bb:f9:5e:39:8d:24:5d:02:d5:08:be:e6:8f:09:
         d0:df:12:0c:4d:a0:b3:0a:4f:e4:0e:f9:fd:f7:c5:2b:a1:05:
         25:c0:77:8b:05:3a:9e:cb:5b:f5:6a:c8:e6:e1:5e:ca:69:81:
         c9:4e:0f:2a:30:d3:86:e3:01:b3:3f:02:fa:aa:74:1c:46:69:
         a2:ae:cc:5e:15:c7:db:70:82:90:91:a7:56:13:55:44:df:9b:
         dc:39:19:ff:b7:a3:bc:24:60:2c:89:71:7b:f3:38:05:7f:2a:
         09:b9:af:6f:06:dc:8d:e0:a1:81:ba:f0:ee:69:b4:35:5f:d0:
         93:d1:75:b2:10:37:fc:24:7b:e7:47:b3:a5:a5:99:5c:a6:06:
         bb:7a:34:a4:3d:e8:52:6a:56:10:00:d3:53:ef:03:ca:5b:93:
         15:4e:55:21:4b:60:55:64:81:b5:36:d1:f1:2e:a4:06:51:1d:
         74:16:5e:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXN3/jzZbpj6d68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0
YzhjMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
ODQxNDQzOWYtZTMwMS00NjY2LTljMTctNjc2YTc5N2I3YzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFbieQd63sUeOiD5DG9XxnLY1lWip8/b2m9g
qM98eMNZcDK986iMGlYgaMKCzNuOWZNunp9EUlRCdv0va85H+ONK3MjB74D412L7
i2YFT0T+x7DigkOJz53BP8FmA49D3T+x9QhfQU02xjeL8YzZX7YwKX1i8Al0RkNu
lbZabtq1BzacWhkt2UVD4IcMXB0pcZq2iHr7Hgf/YzQGoSCzcZuMovSI338hPGw4
5lyfcAy++tlyZjgvJ2cu6xf/1NGmE//5yq23eFTWr9KJymgFwBbp3DRBXZSdI7S6
dM07mgF0LwLMpWmjRnRZJ4GwHt9/4lPuQK9g0RDo0uyz+0dv9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHhP0+kD1uV6rTItcmRz6oglz4XeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz
NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOWU4MWYzZWItOWQ2MS0z
YTViLThjMmMtMjE5ZmU4ZmRkMGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2
MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj
NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz
NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1fkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZ4fdojyROHwVgWausf6EXj4Vzjw8C6MAqZ2RnFlzd+gOarE8VwAWvD
oWckDI9HuUhrftPo0klfvoR3mRZX6yfjNMuzissMHNvwPZW7+V45jSRdAtUIvuaP
CdDfEgxNoLMKT+QO+f33xSuhBSXAd4sFOp7LW/VqyObhXsppgclODyow04bjAbM/
AvqqdBxGaaKuzF4Vx9twgpCRp1YTVUTfm9w5Gf+3o7wkYCyJcXvzOAV/Kgm5r28G
3I3goYG68O5ptDVf0JPRdbIQN/wke+dHs6WlmVymBrt6NKQ96FJqVhAA01PvA8pb
kxVOVSFLYFVkgbU20fEupAZRHXQWXkk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:24 2026 by rpki-client