Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa
File:                     0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa (raw, json)
Hash identifier:          OJxez6ZUXmo0pge3Jw+opcfeJo8M8QMYX3y7hfXGHp4=
Subject key identifier:   4E:D1:A0:F6:23:7C:A6:1F:4D:A4:0F:3D:8F:83:05:09:90:4F:57:D4
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584CDC678BFA09D50AEAC1D39400
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     393249
IP address blocks:        206.87.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:8b:fa:09:d5:0a:ea:c1:d3:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=26faa3d0-7ee2-4055-8210-94ee9a880f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6d:e7:cf:e5:ab:da:0c:14:26:1a:e5:46:5f:
                    67:0b:3c:45:6d:b9:c5:2a:36:c1:d2:6b:8f:dd:2e:
                    7e:31:b6:a0:6a:17:5a:4a:eb:ab:f9:f9:fe:d6:4d:
                    8d:c4:82:df:db:19:63:94:2f:e3:db:10:6e:e9:24:
                    ec:e8:11:5f:3a:2c:37:ac:9d:15:4e:63:98:bc:c0:
                    46:3c:b9:62:a4:47:f7:7c:8d:f5:d7:b9:79:26:79:
                    66:79:4e:d5:7c:6e:f5:85:c5:66:06:f7:1a:93:fe:
                    d5:0c:85:5c:3f:8d:59:14:e3:da:96:f8:97:09:cc:
                    ff:4e:83:53:c8:54:7a:1c:b2:89:06:b6:36:94:db:
                    da:9c:63:95:ad:62:d8:db:2c:59:01:37:69:1f:43:
                    7f:46:18:d3:e2:bf:b9:49:3a:8d:f9:0c:37:a6:c7:
                    29:a5:36:ab:37:07:8e:27:6c:6d:80:23:51:51:a3:
                    9e:0c:2f:da:4b:0e:0f:a9:45:3e:7b:93:d4:d6:b0:
                    d5:48:a2:31:56:b7:f9:5c:0a:3e:74:64:90:87:d6:
                    f0:12:10:de:6b:36:32:12:69:c1:20:86:dd:06:6c:
                    97:ed:72:69:7c:78:ad:7b:ff:11:1f:26:6c:5c:fb:
                    b0:5d:85:e2:84:ad:29:59:09:4e:57:f6:ee:bc:65:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:A0:F6:23:7C:A6:1F:4D:A4:0F:3D:8F:83:05:09:90:4F:57:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:94:43:97:7d:28:6d:68:f5:b8:13:8a:fe:67:d5:27:f5:ad:
         3e:11:91:e4:cc:22:e1:a6:aa:78:e0:85:f3:07:be:ae:29:49:
         ac:8a:4d:de:bf:58:79:f5:06:bb:2c:d9:1d:20:2e:91:9a:d3:
         54:94:ea:e5:d0:f3:47:1d:98:04:7f:b6:ac:d7:9d:7d:c5:7d:
         f1:db:25:cb:54:d7:9c:b7:fc:51:1a:1d:c4:2a:99:57:ce:f5:
         f5:20:f8:ae:e4:8a:00:d7:9e:91:99:f8:79:1a:79:a1:88:58:
         18:c1:ff:2d:7c:04:21:fd:d6:24:26:a5:25:4f:fd:d5:57:c4:
         9e:20:2b:d7:59:2d:73:39:f2:35:c3:dd:dd:76:69:74:dd:fa:
         89:b2:84:2a:81:28:34:9e:61:d8:5c:a9:48:42:1e:34:9d:fd:
         ca:71:8e:76:1c:c4:dc:ca:12:7b:aa:dc:bb:60:45:e9:c1:1e:
         96:9f:6c:27:11:ae:b2:c8:42:2d:98:ab:58:8f:56:54:d7:38:
         c7:0c:25:6a:21:a1:b5:d1:a1:5c:19:cf:e8:00:2b:24:8c:06:
         2d:20:a3:da:54:32:51:96:e6:3d:e5:67:f9:9d:46:a5:3b:18:
         ba:6e:f3:f1:c0:8a:4f:00:5d:3f:57:a5:61:33:60:fd:e5:f3:
         a7:c6:f1:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4v6CdUK6sHTlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
MjZmYWEzZDAtN2VlMi00MDU1LTgyMTAtOTRlZTlhODgwZjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW3nz+Wr2gwUJhrlRl9nCzxFbbnFKjbB0muP
3S5+MbagahdaSuur+fn+1k2NxILf2xljlC/j2xBu6STs6BFfOiw3rJ0VTmOYvMBG
PLlipEf3fI3117l5JnlmeU7VfG71hcVmBvcak/7VDIVcP41ZFOPalviXCcz/ToNT
yFR6HLKJBrY2lNvanGOVrWLY2yxZATdpH0N/RhjT4r+5STqN+Qw3pscppTarNweO
J2xtgCNRUaOeDC/aSw4PqUU+e5PU1rDVSKIxVrf5XAo+dGSQh9bwEhDeazYyEmnB
IIbdBmyX7XJpfHite/8RHyZsXPuwXYXihK0pWQlOV/buvGVPMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7RoPYjfKYfTaQPPY+DBQmQT1fUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMGQzMjBlZDAtN2U5ZC0z
MGRmLWE3ZDAtYmYyMjAxN2FhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzlfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6UQ5d9KG1o9bgTiv5n1Sf1rT4RkeTMIuGmqnjghfMHvq4pSayKTd6/
WHn1Brss2R0gLpGa01SU6uXQ80cdmAR/tqzXnX3FffHbJctU15y3/FEaHcQqmVfO
9fUg+K7kigDXnpGZ+HkaeaGIWBjB/y18BCH91iQmpSVP/dVXxJ4gK9dZLXM58jXD
3d12aXTd+omyhCqBKDSeYdhcqUhCHjSd/cpxjnYcxNzKEnuq3LtgRenBHpafbCcR
rrLIQi2Yq1iPVlTXOMcMJWohobXRoVwZz+gAKySMBi0go9pUMlGW5j3lZ/mdRqU7
GLpu8/HAik8AXT9XpWEzYP3l86fG8Z8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:51 2026 by rpki-client