Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa
File:                     7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa (raw, json)
Hash identifier:          7fRxKPtE+fRwu8Vopo0sbx9/QsaiqrrZrm9JOtGUdgo=
Subject key identifier:   EC:67:93:3C:5E:BE:47:43:09:9A:CD:80:01:9A:23:75:E3:22:E5:C7
Certificate issuer:       /CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a
Certificate serial:       010D0C9F4328584CDB01F3CA233B16E6B7C54402
Authority key identifier: 76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        192.152.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:f3:ca:23:3b:16:e6:b7:c5:44:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=ef66173d-556b-49e9-85cc-4aab48f6ec56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:78:58:87:42:db:18:8e:22:91:6b:75:c6:
                    5f:1a:f3:39:c1:be:b5:62:95:16:3d:2a:7a:6a:83:
                    a5:73:7f:22:d6:a1:e4:42:25:70:d4:b3:d2:83:1a:
                    ef:02:eb:03:3b:cb:30:e2:81:39:ab:ad:4b:7d:d5:
                    d1:54:1e:f5:5a:50:99:1e:f7:f8:7a:1e:54:b2:31:
                    35:8e:4f:0c:a4:80:a5:b2:76:49:9f:48:50:18:bf:
                    f6:f0:7a:3a:c8:5b:59:1b:ca:c1:af:01:14:ad:13:
                    a3:11:67:85:aa:7f:63:94:f2:79:cc:45:d4:79:8e:
                    9a:9f:e9:a7:23:27:7e:03:bc:d7:13:67:2e:aa:e6:
                    3e:f4:e2:cd:90:4f:58:f5:93:84:bf:f6:f4:ef:c0:
                    fe:50:21:04:3c:f2:41:1c:14:22:52:c6:05:2f:e7:
                    ac:f2:6f:d1:85:81:ac:bc:69:1d:24:82:a1:b3:45:
                    98:a3:57:66:c3:94:47:ee:08:a3:ae:96:4d:ba:58:
                    f4:c8:c1:34:a3:be:47:38:d3:9a:0a:2a:63:ea:0a:
                    75:2a:4f:03:3a:37:e8:25:78:55:4c:bb:ca:9d:2d:
                    91:91:02:80:4d:11:ac:d7:5b:13:4f:7f:1d:d4:c3:
                    11:54:7d:1d:ae:c8:85:22:e8:8f:ad:a5:c1:be:95:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:67:93:3C:5E:BE:47:43:09:9A:CD:80:01:9A:23:75:E3:22:E5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl

            X509v3 Authority Key Identifier:
                keyid:76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:cd:dd:e5:fd:8b:38:1d:c0:c1:3a:66:50:05:31:44:78:
         ac:1a:58:8d:22:a7:aa:0f:70:8c:bd:99:05:b6:ae:c0:a2:19:
         dd:eb:61:77:fd:9b:68:83:af:c7:13:ce:63:2f:52:da:fd:64:
         e0:b8:3b:47:4d:1f:89:85:21:49:f6:56:47:ae:88:dc:88:16:
         1f:de:db:be:c5:24:08:ed:be:e9:e4:ea:8a:f7:bc:70:6a:06:
         49:13:16:d0:b3:c2:c5:bb:45:c3:6c:28:c3:27:8d:d0:48:9f:
         17:6e:44:61:02:6e:c3:4f:14:d1:8a:7c:79:a9:1d:0b:d4:5a:
         92:55:83:97:b9:9d:29:e2:93:9f:c7:59:62:65:21:6b:c7:b1:
         18:0b:3f:4f:32:ad:d2:f8:72:9b:aa:e9:20:7a:36:10:54:4d:
         9a:f9:d8:4f:e8:b2:82:be:af:43:e0:8d:b3:70:c0:af:2f:b0:
         1a:cc:0a:45:88:bb:3d:d1:77:ec:4a:14:fc:4e:5a:51:9c:25:
         e0:9b:65:e0:89:16:fa:83:37:fa:dc:f1:eb:f3:dd:92:40:5d:
         69:33:58:57:9f:e9:f1:92:a5:84:e4:7b:4b:f1:13:ba:96:92:
         0b:8b:1a:fe:64:ec:ef:48:c1:64:f8:a8:8d:44:68:39:8c:c2:
         af:c5:23:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAfPKIzsW5rfFRAIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVmY2ZlOGUtOTY5Yi00OWRmLWE1YjktMDFlM2FkZmUy
YjdhMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
ZWY2NjE3M2QtNTU2Yi00OWU5LTg1Y2MtNGFhYjQ4ZjZlYzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBJ4WIdC2xiOIpFrdcZfGvM5wb61YpUWPSp6
aoOlc38i1qHkQiVw1LPSgxrvAusDO8sw4oE5q61LfdXRVB71WlCZHvf4eh5UsjE1
jk8MpIClsnZJn0hQGL/28Ho6yFtZG8rBrwEUrROjEWeFqn9jlPJ5zEXUeY6an+mn
Iyd+A7zXE2cuquY+9OLNkE9Y9ZOEv/b078D+UCEEPPJBHBQiUsYFL+es8m/RhYGs
vGkdJIKhs0WYo1dmw5RH7gijrpZNulj0yME0o75HONOaCipj6gp1Kk8DOjfoJXhV
TLvKnS2RkQKATRGs11sTT38d1MMRVH0drsiFIuiPraXBvpWSAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxnkzxevkdDCZrNgAGaI3XjIuXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NWZj
ZmU4ZS05NjliLTQ5ZGYtYTViOS0wMWUzYWRmZTJiN2EvN2Q3MTc3NDEtZDJkOC0z
OGVkLTllZWYtOWRkNTU4N2VmYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTVmY2ZlOGUtOTY5Yi00OWRmLWE1
YjktMDFlM2FkZmUyYjdhLzk1ZmNmZThlLTk2OWItNDlkZi1hNWI5LTAxZTNhZGZl
MmI3YS5jcmwwHwYDVR0jBBgwFoAUdlLCba9/5l3LOhsGcFq9nQAcQlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NWZjZmU4ZS05NjliLTQ5ZGYtYTViOS0wMWUz
YWRmZTJiN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJj4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErLzd3l/Ys4HcDBOmZQBTFEeKwaWI0ip6oPcIy9mQW2rsCiGd3rYXf9
m2iDr8cTzmMvUtr9ZOC4O0dNH4mFIUn2VkeuiNyIFh/e277FJAjtvunk6or3vHBq
BkkTFtCzwsW7RcNsKMMnjdBInxduRGECbsNPFNGKfHmpHQvUWpJVg5e5nSnik5/H
WWJlIWvHsRgLP08yrdL4cpuq6SB6NhBUTZr52E/osoK+r0PgjbNwwK8vsBrMCkWI
uz3Rd+xKFPxOWlGcJeCbZeCJFvqDN/rc8evz3ZJAXWkzWFef6fGSpYTke0vxE7qW
kguLGv5k7O9IwWT4qI1EaDmMwq/FI+I=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:53 2026 by rpki-client