Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/5ae09803-7cc5-3d9d-8450-61da66accef1.roa
File:                     5ae09803-7cc5-3d9d-8450-61da66accef1.roa (raw, json)
Hash identifier:          fPYfn/vDd0OFiaQgiaU0V3sroNi9j6PxfOzbs1DaX/U=
Subject key identifier:   35:7C:B0:6C:4E:FE:5E:F7:F9:7E:5E:66:27:5A:7D:83:7F:99:C2:3E
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F4328584CDF32781463ABA84D44C40280
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/5ae09803-7cc5-3d9d-8450-61da66accef1.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     834
IP address blocks:        64.72.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:78:14:63:ab:a8:4d:44:c4:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=b9beb94e-f74e-49d9-9dcb-78ec271b51f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:10:2b:37:ff:56:3a:30:28:30:ad:d4:86:
                    77:0a:08:3d:f9:ae:aa:92:c0:e6:97:b0:84:34:9a:
                    02:69:e4:14:2d:65:ea:12:8f:c5:77:94:ec:bf:47:
                    d3:36:c0:73:01:64:0c:d6:e6:6c:67:d2:20:6b:ef:
                    b8:24:22:72:32:eb:4c:5f:fc:97:7f:8c:23:14:ef:
                    02:e8:cb:21:ad:3a:0c:f6:9b:95:e6:03:d4:43:37:
                    23:01:38:88:fd:0e:8b:e4:e0:b8:a1:85:73:44:82:
                    c4:ce:64:4c:a1:d0:99:f3:bf:cb:a7:99:a4:44:a4:
                    3e:85:5c:44:80:55:a2:e6:77:a8:69:8a:f8:6d:b8:
                    a7:14:51:55:95:21:6f:c8:a1:a1:23:9a:8a:d2:5e:
                    b0:48:bf:ea:27:0d:4f:1b:53:bf:2a:7a:b8:20:0b:
                    d2:01:9d:88:a4:80:64:1d:6b:0c:2d:c6:f1:3f:9d:
                    1f:c5:f9:f6:74:2b:79:e4:4b:dd:54:a4:7a:4f:c9:
                    18:54:f9:6b:c6:97:17:18:17:25:83:2d:e9:d8:ee:
                    07:bc:f3:91:92:02:45:c5:df:7f:d1:ab:85:cc:bb:
                    28:75:26:3d:f3:0a:24:1d:f7:e9:e8:16:5e:33:e9:
                    f8:18:de:7f:0c:d3:76:62:10:1e:2e:57:3a:4c:43:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7C:B0:6C:4E:FE:5E:F7:F9:7E:5E:66:27:5A:7D:83:7F:99:C2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/5ae09803-7cc5-3d9d-8450-61da66accef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:71:4c:cc:55:76:35:05:e0:30:d2:dc:6b:4f:53:15:20:85:
         bb:d2:08:90:0d:0e:e7:56:2e:8d:59:ad:8d:bc:db:64:a7:56:
         25:e6:5b:f8:c2:ab:1e:8e:04:54:cd:6f:36:f4:ad:90:77:a4:
         f1:2a:b8:b1:f9:e3:6f:e3:0c:15:f0:ef:e7:2d:f1:d5:ed:91:
         a9:b9:ab:13:f3:b6:b1:62:b4:21:4e:6d:30:7b:57:67:ae:d5:
         06:b2:48:c2:09:94:04:db:b5:3e:49:db:69:32:e6:13:96:4c:
         e6:24:13:e7:7a:85:0f:cd:c3:e4:95:a3:d1:00:2d:c5:47:03:
         d1:49:96:b7:3d:01:51:9b:c0:49:63:08:7b:1b:f2:0e:3d:bc:
         54:eb:37:2b:30:4f:f6:21:62:35:89:01:4b:61:b1:d4:2c:b4:
         fa:db:0e:20:75:1a:07:ad:4b:09:27:d5:5d:92:41:7e:ab:e5:
         12:91:a4:82:40:8b:95:88:c3:0a:b3:eb:a8:f7:27:6f:57:d0:
         58:72:51:5c:8f:42:8f:a4:2e:6a:f5:ec:ba:e9:12:54:25:dc:
         47:11:4a:d4:68:c8:7e:2e:0c:8b:de:66:a8:a2:82:7b:86:7f:
         2f:77:c6:12:35:09:b5:f6:df:85:f1:8f:3b:dd:a7:3b:b9:33:
         ee:18:85:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMngUY6uoTUTEAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMxYTkyNmMtOWZlNS00MjY5LTg1NDktYTE1ZWVjOWQw
MGQyMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
YjliZWI5NGUtZjc0ZS00OWQ5LTlkY2ItNzhlYzI3MWI1MWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eIQKzf/VjowKDCt1IZ3Cgg9+a6qksDml7CE
NJoCaeQULWXqEo/Fd5Tsv0fTNsBzAWQM1uZsZ9Iga++4JCJyMutMX/yXf4wjFO8C
6MshrToM9puV5gPUQzcjATiI/Q6L5OC4oYVzRILEzmRModCZ87/Lp5mkRKQ+hVxE
gFWi5neoaYr4bbinFFFVlSFvyKGhI5qK0l6wSL/qJw1PG1O/Knq4IAvSAZ2IpIBk
HWsMLcbxP50fxfn2dCt55EvdVKR6T8kYVPlrxpcXGBclgy3p2O4HvPORkgJFxd9/
0auFzLsodSY98wokHffp6BZeM+n4GN5/DNN2YhAeLlc6TEOgdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDV8sGxO/l73+X5eZidafYN/mcI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MzFh
OTI2Yy05ZmU1LTQyNjktODU0OS1hMTVlZWM5ZDAwZDIvNWFlMDk4MDMtN2NjNS0z
ZDlkLTg0NTAtNjFkYTY2YWNjZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzMxYTkyNmMtOWZlNS00MjY5LTg1
NDktYTE1ZWVjOWQwMGQyLzczMWE5MjZjLTlmZTUtNDI2OS04NTQ5LWExNWVlYzlk
MDBkMi5jcmwwHwYDVR0jBBgwFoAU/joYbJVWQwBw8KR+SNQjRFuezRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83MzFhOTI2Yy05ZmU1LTQyNjktODU0OS1hMTVl
ZWM5ZDAwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEjMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNxTMxVdjUF4DDS3GtPUxUghbvSCJANDudWLo1ZrY2822SnViXmW/jC
qx6OBFTNbzb0rZB3pPEquLH542/jDBXw7+ct8dXtkam5qxPztrFitCFObTB7V2eu
1QaySMIJlATbtT5J22ky5hOWTOYkE+d6hQ/Nw+SVo9EALcVHA9FJlrc9AVGbwElj
CHsb8g49vFTrNyswT/YhYjWJAUthsdQstPrbDiB1GgetSwkn1V2SQX6r5RKRpIJA
i5WIwwqz66j3J29X0FhyUVyPQo+kLmr17LrpElQl3EcRStRoyH4uDIveZqiignuG
fy93xhI1CbX234Xxjzvdpzu5M+4YhWA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:29 2026 by rpki-client