Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ead427ea-8b7b-3776-bb26-a13a3075dfeb.roa
File:                     ead427ea-8b7b-3776-bb26-a13a3075dfeb.roa (raw, json)
Hash identifier:          PcNdvbQDDrY/3GSvNj/Fpq6bG3SWEQliMivX/MFV7DU=
Subject key identifier:   86:F9:38:77:9C:16:74:79:A5:7D:F1:50:CD:8C:14:3B:48:DC:D3:79
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CC777249FD872D640C1789400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ead427ea-8b7b-3776-bb26-a13a3075dfeb.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     329097
IP address blocks:        206.185.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:24:9f:d8:72:d6:40:c1:78:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=76189157-1c57-478c-83c2-34d87ecd79c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:38:d6:4c:0c:53:25:b1:4d:46:fe:5b:7a:
                    5f:64:48:1b:6e:94:2a:0e:49:2c:26:9e:ab:98:17:
                    15:ca:1c:19:99:67:dd:c6:3b:07:d8:fd:69:44:13:
                    03:9b:94:a3:f4:35:46:ad:bd:af:7c:f4:c0:4c:a6:
                    f2:a1:56:78:7a:42:fc:76:6a:cf:08:fe:13:29:0b:
                    a6:aa:5b:40:83:66:68:4f:9f:84:2c:df:19:dc:29:
                    93:f1:2f:2d:39:b6:dc:2f:cf:56:e7:a5:11:33:a0:
                    39:f0:6d:a4:2f:59:8a:d3:ec:4d:8e:54:13:cb:33:
                    90:6e:d0:87:83:26:d5:fc:9a:20:d2:35:c4:75:f7:
                    a7:62:a8:62:14:4e:a0:65:e6:c8:4b:52:a3:61:41:
                    f5:56:77:4d:2e:80:8d:5a:4c:1d:ec:33:6d:37:df:
                    f0:3f:6a:01:9d:28:60:50:32:57:78:ea:de:03:76:
                    24:d2:ba:17:a1:7e:f0:cd:56:c5:0b:d3:a3:8c:41:
                    83:1a:e8:09:2c:1d:8c:89:46:ff:d3:5a:1d:e1:2d:
                    b4:b6:55:e4:ff:90:4a:5c:aa:2d:7e:38:55:98:82:
                    ad:c1:b4:53:e8:d0:6e:b2:d2:16:3c:73:98:26:71:
                    65:f3:5d:ed:76:d6:7f:ea:90:69:55:00:c3:f9:00:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:38:77:9C:16:74:79:A5:7D:F1:50:CD:8C:14:3B:48:DC:D3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ead427ea-8b7b-3776-bb26-a13a3075dfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.185.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:7e:c6:06:3b:3b:c2:48:9d:41:50:43:95:e5:5e:a2:2a:
         89:12:8d:ee:2a:7d:c5:d2:71:f2:10:b1:17:ab:3c:f8:db:35:
         f5:29:b3:27:cc:28:5a:cd:95:30:5d:fb:90:5a:36:2b:63:1a:
         7d:0c:27:ab:6c:47:63:7a:b9:17:02:1c:5c:7c:e5:75:48:9b:
         bb:5b:1e:5f:d0:7d:d7:56:f2:26:3b:3b:3c:7e:3d:a8:45:97:
         93:32:30:7e:12:e7:e7:35:83:e5:e6:8e:96:dc:b9:46:3f:62:
         30:74:0b:6c:07:16:b6:db:b6:be:15:50:a4:f6:04:c2:df:32:
         70:30:2b:5e:1f:2c:60:68:12:4c:ba:0b:30:29:f4:0a:e6:03:
         f5:ec:f2:82:10:3e:3e:9e:e8:83:06:7e:6c:47:16:55:4a:52:
         2f:c2:e5:96:2b:82:a6:ae:da:d0:33:29:c9:72:b0:70:2f:10:
         76:a9:7a:30:a9:90:66:59:32:57:a4:76:95:b2:90:86:cc:3a:
         13:b1:2d:76:9c:71:11:9d:93:87:8a:98:cd:0d:fa:2b:cd:13:
         45:90:79:59:8f:6e:79:a4:5d:7f:fc:d9:55:20:a3:47:33:6e:
         1f:85:74:24:43:11:e0:85:ca:79:fc:2b:40:3d:97:c8:4c:21:
         7c:ed:de:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdySf2HLWQMF4lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
NzYxODkxNTctMWM1Ny00NzhjLTgzYzItMzRkODdlY2Q3OWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/841kwMUyWxTUb+W3pfZEgbbpQqDkksJp6r
mBcVyhwZmWfdxjsH2P1pRBMDm5Sj9DVGrb2vfPTATKbyoVZ4ekL8dmrPCP4TKQum
qltAg2ZoT5+ELN8Z3CmT8S8tObbcL89W56URM6A58G2kL1mK0+xNjlQTyzOQbtCH
gybV/Jog0jXEdfenYqhiFE6gZebIS1KjYUH1VndNLoCNWkwd7DNtN9/wP2oBnShg
UDJXeOreA3Yk0roXoX7wzVbFC9OjjEGDGugJLB2MiUb/01od4S20tlXk/5BKXKot
fjhVmIKtwbRT6NBustIWPHOYJnFl813tdtZ/6pBpVQDD+QCEbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIb5OHecFnR5pX3xUM2MFDtI3NN5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWFkNDI3ZWEtOGI3Yi0z
Nzc2LWJiMjYtYTEzYTMwNzVkZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzrkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGz/fsYGOzvCSJ1BUEOV5V6iKokSje4qfcXScfIQsRerPPjbNfUpsyfM
KFrNlTBd+5BaNitjGn0MJ6tsR2N6uRcCHFx85XVIm7tbHl/QfddW8iY7Ozx+PahF
l5MyMH4S5+c1g+XmjpbcuUY/YjB0C2wHFrbbtr4VUKT2BMLfMnAwK14fLGBoEky6
CzAp9ArmA/Xs8oIQPj6e6IMGfmxHFlVKUi/C5ZYrgqau2tAzKclysHAvEHapejCp
kGZZMlekdpWykIbMOhOxLXaccRGdk4eKmM0N+ivNE0WQeVmPbnmkXX/82VUgo0cz
bh+FdCRDEeCFynn8K0A9l8hMIXzt3lE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:46 2026 by rpki-client