Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
File:                     1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa (raw, json)
Hash identifier:          Cze918XHfhEBibcMpyTqWC8XOaTWZAi3r/3kcshpbKU=
Subject key identifier:   BD:FC:2F:68:60:FA:EF:75:B0:8C:1B:B7:B1:1D:10:7A:60:E8:9C:7D
Certificate issuer:       /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial:       010D0C9F4328584CEFF23842D712B575F613B900
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     32274
IP address blocks:        207.190.160.0/21 maxlen: 24
                          207.190.168.0/22 maxlen: 24
                          207.190.173.0/24 maxlen: 24
                          207.190.174.0/24 maxlen: 24
                          207.190.175.0/24 maxlen: 24
                          207.190.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:38:42:d7:12:b5:75:f6:13:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=f8b4df92-e5d1-4e8e-9a34-44f685004f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:fd:42:a6:b6:a9:97:b1:19:29:59:d0:67:
                    2e:a4:f8:96:cb:30:ff:49:a8:07:91:ea:a7:0e:0d:
                    b4:3e:74:a5:2b:ca:a7:55:41:33:25:01:11:a3:83:
                    d4:21:f0:3b:b5:22:88:2f:09:2e:1f:e1:d4:ce:83:
                    21:78:da:e2:e5:0b:4f:d6:67:7a:b8:72:80:f0:8b:
                    8b:dd:91:4f:9d:d1:85:62:60:86:4b:cb:b0:52:0d:
                    34:34:0d:d8:cc:33:73:8a:9b:bd:2a:cb:1f:47:3b:
                    14:3a:46:f8:44:37:ed:77:a8:42:2b:a0:55:f0:32:
                    36:fd:bf:56:41:62:ff:c1:dd:dd:ea:af:c8:df:69:
                    b9:b1:29:52:88:7b:47:68:c8:c4:e0:b1:57:a2:91:
                    b9:8d:a3:65:a2:e2:88:30:b1:4f:9c:90:62:bf:cd:
                    c3:9a:c1:0a:cd:23:9e:35:0b:1a:8b:38:30:88:60:
                    91:f3:39:af:e4:e0:61:d2:1b:40:2d:b6:36:dc:f2:
                    c1:b2:f2:c2:fc:b2:94:22:a4:68:9c:7e:1d:0a:77:
                    ab:55:38:55:a8:b2:ac:1f:40:7c:f5:98:6d:ea:88:
                    20:6e:8c:b7:95:32:98:1d:68:c8:40:cd:27:53:75:
                    8e:92:1e:62:7f:f0:70:fa:99:24:8e:95:67:2a:24:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:2F:68:60:FA:EF:75:B0:8C:1B:B7:B1:1D:10:7A:60:E8:9C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.190.160.0-207.190.171.255
                  207.190.173.0-207.190.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:ba:19:7a:03:70:4c:9c:d9:0a:86:bd:37:0b:80:eb:24:
         02:d3:c5:b8:1b:06:a0:e9:3b:0b:03:55:7a:c3:58:6c:31:8e:
         dd:7f:5f:f8:10:f2:0c:0e:81:e6:28:4c:46:49:c9:65:a3:7a:
         92:6c:13:81:35:73:af:7c:c1:f3:13:cc:e8:47:59:cf:e3:8d:
         2d:18:75:a2:d0:cf:67:41:ea:d9:ac:67:f8:66:99:c3:17:27:
         b7:ce:cc:4a:7d:51:b8:4b:88:e8:25:9e:74:e6:9e:14:8d:80:
         cc:33:29:da:06:94:9e:14:4e:bd:8f:2b:89:ea:12:37:16:ac:
         7d:40:b8:56:7e:c3:7c:ff:44:a2:43:e7:5c:cf:42:44:3d:a4:
         85:0e:e2:0f:1e:48:ad:33:92:b7:56:6c:fa:f5:63:31:22:6d:
         b1:7a:e2:61:06:0f:1b:e3:0c:7b:35:f2:f8:b5:d7:8a:38:f2:
         a4:34:16:3f:4b:c8:dc:ef:5f:44:aa:03:49:51:1c:a8:2f:0e:
         f4:9b:01:8b:fc:d6:a0:62:d4:53:b9:6c:37:83:4a:7d:a9:a6:
         45:b2:75:2e:2d:d4:3b:e3:0e:56:63:c2:08:71:6b:8e:76:a9:
         23:e0:8a:56:8c:0b:81:ad:eb:13:0c:50:34:5c:d7:0e:34:86:
         c9:22:84:ad
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEzv8jhC1xK1dfYTuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDA5MWM5OWYtOWNkNS00ZGIyLTg3MzMtNjdlMjIwMzZl
YmI1MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
ZjhiNGRmOTItZTVkMS00ZThlLTlhMzQtNDRmNjg1MDA0ZjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj39Qqa2qZexGSlZ0GcupPiWyzD/SagHkeqn
Dg20PnSlK8qnVUEzJQERo4PUIfA7tSKILwkuH+HUzoMheNri5QtP1md6uHKA8IuL
3ZFPndGFYmCGS8uwUg00NA3YzDNzipu9KssfRzsUOkb4RDftd6hCK6BV8DI2/b9W
QWL/wd3d6q/I32m5sSlSiHtHaMjE4LFXopG5jaNlouKIMLFPnJBiv83DmsEKzSOe
NQsaizgwiGCR8zmv5OBh0htALbY23PLBsvLC/LKUIqRonH4dCnerVThVqLKsH0B8
9Zht6oggboy3lTKYHWjIQM0nU3WOkh5if/Bw+pkkjpVnKiQ/2wIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFL38L2hg+u91sIwbt7EdEHpg6Jx9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MDkx
Yzk5Zi05Y2Q1LTRkYjItODczMy02N2UyMjAzNmViYjUvMWEzNDc4NDAtMjk5YS0z
Y2E5LWJjOTMtZDlmNGUyZmEzZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDA5MWM5OWYtOWNkNS00ZGIyLTg3
MzMtNjdlMjIwMzZlYmI1LzQwOTFjOTlmLTljZDUtNGRiMi04NzMzLTY3ZTIyMDM2
ZWJiNS5jcmwwHwYDVR0jBBgwFoAUne4x2r4g6iqWpU02gfpSq75yJXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MDkxYzk5Zi05Y2Q1LTRkYjItODczMy02N2Uy
MjAzNmViYjUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAXPvqAD
BALPvqgwDAMEAM++rQMEBs++gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2G7oZegNwTJzZCoa9NwuA6yQC
08W4Gwag6TsLA1V6w1hsMY7df1/4EPIMDoHmKExGScllo3qSbBOBNXOvfMHzE8zo
R1nP440tGHWi0M9nQerZrGf4ZpnDFye3zsxKfVG4S4joJZ505p4UjYDMMynaBpSe
FE69jyuJ6hI3Fqx9QLhWfsN8/0SiQ+dcz0JEPaSFDuIPHkitM5K3Vmz69WMxIm2x
euJhBg8b4wx7NfL4tdeKOPKkNBY/S8jc719EqgNJURyoLw70mwGL/NagYtRTuWw3
g0p9qaZFsnUuLdQ74w5WY8IIcWuOdqkj4IpWjAuBresTDFA0XNcONIbJIoSt
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:51 2026 by rpki-client