Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
File:                     288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json)
Hash identifier:          juFtaVtRtXOnqqwpqlsZjPUKA6Vy3F1kQahk9PF/b7U=
Subject key identifier:   D9:2C:AA:93:B3:AF:DF:F9:B5:2B:7D:A5:1F:BA:04:89:E2:F2:5E:A7
Certificate issuer:       /CN=194b4d95-965d-467f-835c-6cdeececce61
Certificate serial:       010D0C9F4328584CCD0C9CAE7F7745E7757D8B80
Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     1062
IP address blocks:        23.166.216.0/24 maxlen: 24
                          104.166.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:9c:ae:7f:77:45:e7:75:7d:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=c9843161-8ed0-4790-b6e8-1ee2fe80c4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:dd:b9:ed:1b:2a:b7:1d:28:32:09:25:c1:
                    2c:d8:f1:d5:35:81:fc:3d:1a:cd:95:d9:57:6a:86:
                    8c:75:ee:b6:62:c4:7f:ad:c3:21:8f:39:6b:fd:6f:
                    cc:68:03:43:37:40:af:5f:0d:0c:37:75:9d:9d:e5:
                    24:55:26:62:9e:cf:d0:18:a7:9e:ac:81:99:d2:a3:
                    c1:f3:a4:f1:82:a8:8f:b8:34:11:17:3b:ee:46:fa:
                    a8:c3:e8:c7:58:22:e1:1e:13:db:06:54:6c:f0:ff:
                    ad:bb:d5:d7:a0:17:60:ec:04:6e:79:9e:fb:55:f0:
                    64:03:5f:35:dc:50:79:0d:0b:e5:26:2c:0a:57:09:
                    66:f2:ad:75:52:8c:3f:17:ab:a5:e6:dc:49:28:7a:
                    8e:f5:d0:02:af:0b:22:bc:84:91:a9:40:33:76:5e:
                    6a:6f:ec:e5:97:be:6d:bd:fa:9f:b0:24:30:71:71:
                    5d:85:1e:1d:ff:b1:59:3a:fe:3f:c5:1f:d9:2b:28:
                    5e:b6:c5:e3:67:60:1c:0a:41:c2:30:6e:f8:58:ea:
                    64:c9:27:e0:1b:85:15:5a:bf:eb:ea:98:b0:82:65:
                    77:a9:c9:98:98:85:3f:35:cd:25:8f:a9:26:55:da:
                    0e:88:8d:b4:c1:60:7f:69:cc:5a:61:aa:fc:70:25:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2C:AA:93:B3:AF:DF:F9:B5:2B:7D:A5:1F:BA:04:89:E2:F2:5E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.216.0/24
                  104.166.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:b2:ec:96:a1:32:1d:20:51:73:1e:dc:3d:ad:c2:15:c0:
         c3:58:d5:7d:b8:79:fd:9a:a9:49:09:80:c2:85:14:94:36:b2:
         14:e2:41:d0:10:85:7e:63:0c:2b:35:77:a7:9c:90:e1:22:93:
         9e:43:ae:b6:9c:03:ea:6a:d9:c9:99:98:91:3f:a5:9d:7b:00:
         11:a9:81:1b:35:27:ee:d5:63:85:29:bc:49:a7:91:82:99:d5:
         f2:5d:67:e6:37:1c:b4:85:9e:cf:69:01:5b:ae:32:5d:bd:94:
         f0:d0:8a:8e:fc:41:44:cc:ae:be:f8:d4:ad:c5:40:fb:4c:67:
         fd:43:f1:a0:f7:cc:d9:cb:b9:dd:a7:b9:90:aa:04:b8:79:2b:
         00:5f:42:ef:2e:0c:3a:27:41:35:52:dd:b9:c5:00:b8:13:12:
         33:a0:16:f5:07:03:d6:6f:d6:e4:8c:a8:a0:6c:0a:73:74:70:
         72:e1:aa:20:d2:bd:58:29:b6:71:a4:94:14:46:fe:47:a7:70:
         1a:53:63:1e:c5:b6:85:f6:c7:97:60:79:05:10:ae:e6:5c:06:
         07:0d:98:27:77:d8:bb:89:68:3a:52:7a:80:62:89:b3:6c:6f:
         f3:a1:42:0e:29:71:15:d2:93:73:21:96:af:e8:67:7d:e2:13:
         64:22:f4:30
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzNDJyuf3dF53V9i4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTk0YjRkOTUtOTY1ZC00NjdmLTgzNWMtNmNkZWVjZWNj
ZTYxMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
Yzk4NDMxNjEtOGVkMC00NzkwLWI2ZTgtMWVlMmZlODBjNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPzdue0bKrcdKDIJJcEs2PHVNYH8PRrNldlX
aoaMde62YsR/rcMhjzlr/W/MaANDN0CvXw0MN3WdneUkVSZins/QGKeerIGZ0qPB
86TxgqiPuDQRFzvuRvqow+jHWCLhHhPbBlRs8P+tu9XXoBdg7ARueZ77VfBkA181
3FB5DQvlJiwKVwlm8q11Uow/F6ul5txJKHqO9dACrwsivISRqUAzdl5qb+zll75t
vfqfsCQwcXFdhR4d/7FZOv4/xR/ZKyhetsXjZ2AcCkHCMG74WOpkySfgG4UVWr/r
6piwgmV3qcmYmIU/Nc0lj6kmVdoOiI20wWB/acxaYar8cCW66QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNksqpOzr9/5tSt9pR+6BIni8l6nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRi
NGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2RlZWNlY2NlNjEvMjg4YzEzNzctZDQ1Yy0z
Y2U3LTg4YzktMWViYmZhNDFlNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTk0YjRkOTUtOTY1ZC00NjdmLTgz
NWMtNmNkZWVjZWNjZTYxLzE5NGI0ZDk1LTk2NWQtNDY3Zi04MzVjLTZjZGVlY2Vj
Y2U2MS5jcmwwHwYDVR0jBBgwFoAUL6PHkmAdD3drpwbu4Z7SNOf4kFcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRiNGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2Rl
ZWNlY2NlNjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6bYAwQA
aKZ5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGuksuyWoTIdIFFzHtw9rcIVwMNY1X24ef2aqUkJgMKFFJQ2
shTiQdAQhX5jDCs1d6eckOEik55DrracA+pq2cmZmJE/pZ17ABGpgRs1J+7VY4Up
vEmnkYKZ1fJdZ+Y3HLSFns9pAVuuMl29lPDQio78QUTMrr741K3FQPtMZ/1D8aD3
zNnLud2nuZCqBLh5KwBfQu8uDDonQTVS3bnFALgTEjOgFvUHA9Zv1uSMqKBsCnN0
cHLhqiDSvVgptnGklBRG/kencBpTYx7FtoX2x5dgeQUQruZcBgcNmCd32LuJaDpS
eoBiibNsb/OhQg4pcRXSk3Mhlq/oZ33iE2Qi9DA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:05 2026 by rpki-client