Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f36c3091-0ace-3234-b107-56ae191c8014.roa
File:                     f36c3091-0ace-3234-b107-56ae191c8014.roa (raw, json)
Hash identifier:          7IRz+uDJ/b1l2xLXd/bp4WH4dTg8+VvC6AOYHzQgzF0=
Subject key identifier:   BE:B3:CD:42:D5:22:2F:25:C5:C6:5A:35:1D:C6:63:BD:A6:F1:67:62
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CDA475C4327A078A7DF5612C0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f36c3091-0ace-3234-b107-56ae191c8014.roa
Signing time:             Fri 13 Feb 2026 19:44:38 +0000
ROA not before:           Fri 13 Feb 2026 19:44:38 +0000
ROA not after:            Thu 14 May 2026 18:44:38 +0000
asID:                     3738
IP address blocks:        192.250.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:da:47:5c:43:27:a0:78:a7:df:56:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 13 19:44:38 2026 GMT
            Not After : May 14 18:44:38 2026 GMT
        Subject: CN=33b465fc-77dd-42df-9bb2-d561b010215f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:f6:09:2e:4c:87:c6:94:5a:98:ce:c4:f7:
                    12:e2:e0:0c:5d:fd:34:fd:b9:60:03:62:00:63:b4:
                    1c:fa:07:27:9d:f5:62:1d:87:23:cc:22:8b:34:da:
                    c9:bc:3f:19:bf:da:6e:e8:4d:c9:ab:6c:20:34:3e:
                    bd:e6:e4:81:9d:9a:6f:89:d8:0c:c6:a0:38:40:02:
                    2a:6b:13:b3:e0:02:3c:ad:3f:82:c8:2f:81:2d:dc:
                    59:64:01:87:55:d0:60:f2:98:ca:bb:1d:ef:e4:2f:
                    7c:cd:3e:26:68:5e:14:28:f5:c6:48:8a:1f:94:79:
                    84:0e:69:de:76:68:5e:55:8c:68:8e:87:5e:7e:90:
                    1d:04:f5:66:c0:c0:49:ba:91:73:f5:f4:36:d3:4c:
                    c5:26:98:f2:0f:99:93:49:af:4e:6d:cc:9a:79:fa:
                    4e:18:a4:5d:5c:a4:18:e4:6b:18:13:8b:1f:48:96:
                    22:8a:95:77:c6:ae:ce:d9:13:5a:91:37:8f:87:9f:
                    4e:60:73:c3:70:1f:3f:cb:7a:60:8f:80:b6:08:21:
                    db:c1:83:ca:44:95:78:de:6e:fa:59:1f:ed:d6:d7:
                    92:7a:76:15:d3:1b:c6:81:d8:54:15:cb:46:71:5f:
                    58:49:eb:b1:6b:37:4e:15:b0:ed:db:ca:aa:a4:42:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:CD:42:D5:22:2F:25:C5:C6:5A:35:1D:C6:63:BD:A6:F1:67:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f36c3091-0ace-3234-b107-56ae191c8014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:d9:b1:c3:7b:ef:18:67:98:50:15:fb:59:1a:e6:5e:ee:
         93:08:78:d8:44:e9:92:ab:89:a5:8b:8f:87:93:5c:b1:3b:da:
         f9:f4:54:a0:d0:1d:3a:ae:c5:fa:49:a3:6e:05:4a:89:4a:b4:
         da:7a:c7:0f:48:bd:d5:56:3c:7c:93:86:ed:31:99:a6:0e:51:
         bb:ff:6b:d3:73:db:42:33:b7:48:cf:af:da:3a:d5:02:e5:e6:
         ac:4b:94:7a:10:c4:16:f9:4f:ef:be:dd:ec:f3:4a:b6:17:df:
         d6:84:28:10:76:50:2a:af:4a:fe:a5:be:6a:a7:f7:0d:9e:63:
         6d:e2:f5:ea:38:9d:b8:37:b2:41:5d:e9:7c:00:df:a5:d9:bb:
         bd:02:22:3a:5e:31:a9:82:16:dc:34:ee:c4:a2:1f:13:96:4c:
         09:43:74:ed:a8:62:b9:6d:98:5c:e7:31:d8:82:ea:81:b5:a4:
         67:01:8a:c6:08:e6:ac:2b:a7:04:50:4c:44:8e:cb:ba:9c:1e:
         3d:b1:ec:8f:38:6c:80:fd:c5:37:b4:91:65:be:29:14:c4:b7:
         97:f4:52:2f:17:78:40:d4:6a:27:f4:7c:2b:fe:24:78:e4:44:
         ff:1c:07:06:a4:5e:97:fc:a1:00:b8:81:f7:a7:0d:de:62:c5:
         e1:22:74:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzaR1xDJ6B4p99WEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI2MDIxMzE5NDQzOFoXDTI2MDUxNDE4NDQzOFowLzEtMCsGA1UEAxMk
MzNiNDY1ZmMtNzdkZC00MmRmLTliYjItZDU2MWIwMTAyMTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtf2CS5Mh8aUWpjOxPcS4uAMXf00/blgA2IA
Y7Qc+gcnnfViHYcjzCKLNNrJvD8Zv9pu6E3Jq2wgND695uSBnZpvidgMxqA4QAIq
axOz4AI8rT+CyC+BLdxZZAGHVdBg8pjKux3v5C98zT4maF4UKPXGSIoflHmEDmne
dmheVYxojodefpAdBPVmwMBJupFz9fQ200zFJpjyD5mTSa9ObcyaefpOGKRdXKQY
5GsYE4sfSJYiipV3xq7O2RNakTePh59OYHPDcB8/y3pgj4C2CCHbwYPKRJV43m76
WR/t1teSenYV0xvGgdhUFctGcV9YSeuxazdOFbDt28qqpEIlVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6zzULVIi8lxcZaNR3GY72m8WdiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZjM2YzMwOTEtMGFjZS0z
MjM0LWIxMDctNTZhZTE5MWM4MDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwPp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHq2bHDe+8YZ5hQFftZGuZe7pMIeNhE6ZKriaWLj4eTXLE72vn0VKDQ
HTquxfpJo24FSolKtNp6xw9IvdVWPHyThu0xmaYOUbv/a9Nz20Izt0jPr9o61QLl
5qxLlHoQxBb5T+++3ezzSrYX39aEKBB2UCqvSv6lvmqn9w2eY23i9eo4nbg3skFd
6XwA36XZu70CIjpeMamCFtw07sSiHxOWTAlDdO2oYrltmFznMdiC6oG1pGcBisYI
5qwrpwRQTESOy7qcHj2x7I84bID9xTe0kWW+KRTEt5f0Ui8XeEDUaif0fCv+JHjk
RP8cBwakXpf8oQC4gfenDd5ixeEidHY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:17 2026 by rpki-client