Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/965fb8e8-c54c-3ac7-834a-9395edf0a326.roa
File:                     965fb8e8-c54c-3ac7-834a-9395edf0a326.roa (raw, json)
Hash identifier:          x2FTvo4DD2tvMSUXX0YkcjY22Ysuv3JOZYTI+TexHJI=
Subject key identifier:   00:10:6B:93:80:DE:7C:0D:A9:DA:C1:3E:B0:D4:C2:CA:39:3A:7D:D1
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584CF4221B0963B949BA8E44C280
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/965fb8e8-c54c-3ac7-834a-9395edf0a326.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     14397
IP address blocks:        65.49.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:1b:09:63:b9:49:ba:8e:44:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=50aadc0e-70c6-4646-a024-272cf75d4058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:aa:7d:e6:ed:fc:4e:dd:a5:f3:a5:4c:63:
                    4b:65:07:50:ad:8f:87:73:de:35:47:f1:49:69:bb:
                    3f:60:bf:61:56:e4:ed:bc:55:9a:2a:de:e7:04:ec:
                    c4:0f:b2:12:39:81:4e:4a:bf:00:f6:56:5d:13:95:
                    20:6f:8f:77:0a:dd:bf:f7:b8:d5:4d:0a:95:d7:7d:
                    c3:0b:68:2d:bb:d6:6d:0d:12:4e:5b:29:5c:05:a6:
                    37:37:11:f5:e7:b1:95:8e:8d:93:de:60:a9:0a:e4:
                    ea:ec:7d:37:43:41:8c:a4:a4:52:2a:ef:71:8b:92:
                    09:83:c9:8d:47:bc:43:82:e0:ee:66:ab:d3:d5:57:
                    bc:71:37:77:0a:ea:68:0a:f8:cd:35:b7:54:b1:1a:
                    ed:1b:b3:05:30:07:8e:81:e8:aa:cc:58:21:5b:2e:
                    3e:3e:55:55:06:54:97:66:dd:b4:d2:b7:01:09:a4:
                    47:76:c0:94:ad:ac:ce:9b:21:74:94:e0:1d:6f:8a:
                    ec:4b:9c:3e:cc:f4:5b:bc:ef:fc:4c:cc:8f:53:52:
                    fc:e0:0a:16:b8:5f:02:d3:28:69:db:3a:4e:95:7b:
                    45:6e:b4:69:95:43:ff:b4:bb:36:6e:e1:9f:5f:34:
                    0c:1f:72:11:ea:db:fc:2e:9f:4d:ed:49:59:2a:dc:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:6B:93:80:DE:7C:0D:A9:DA:C1:3E:B0:D4:C2:CA:39:3A:7D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/965fb8e8-c54c-3ac7-834a-9395edf0a326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:91:af:24:1d:6b:67:ba:f2:2f:5d:b1:ab:19:0d:e6:bc:3f:
         56:3f:68:f1:ba:ff:57:ed:80:be:61:d7:41:c9:56:a3:e9:dc:
         f8:fb:8e:21:2f:ff:c6:22:b0:e4:af:d2:df:e1:11:a4:45:c0:
         0f:74:f1:c6:22:1f:3b:5c:11:46:56:f3:69:d6:c8:70:ab:7a:
         b3:76:60:b5:1c:14:22:50:b4:5c:20:c7:54:6e:25:71:50:19:
         52:77:9d:d9:09:e7:23:78:6a:e1:ed:85:16:2d:29:81:79:3f:
         98:5c:82:3b:52:ea:54:09:59:fd:2a:48:13:97:cc:04:a0:cc:
         81:b8:43:6d:62:e7:42:35:e7:d2:79:fa:d2:a4:da:a1:44:b4:
         ec:7e:70:48:f7:35:e8:0d:30:4c:0e:68:60:eb:a6:9a:9a:92:
         de:8e:d4:52:ec:c9:87:97:d5:67:c3:47:0b:2f:ef:66:09:89:
         08:83:22:cf:c7:6d:cb:2d:3e:fd:89:63:59:7c:98:72:fa:b1:
         4c:95:b5:35:83:0c:bd:ed:1b:e3:aa:95:ca:95:cb:81:a7:e1:
         72:8f:9b:63:e5:14:9c:fc:41:8f:5d:b1:71:fd:7b:f3:85:7f:
         e0:3b:70:6c:06:fd:6b:76:12:d6:5c:f9:70:58:a1:92:a6:88:
         9c:fa:73:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IhsJY7lJuo5EwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1
NWVmMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
NTBhYWRjMGUtNzBjNi00NjQ2LWEwMjQtMjcyY2Y3NWQ0MDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32qfebt/E7dpfOlTGNLZQdQrY+Hc941R/FJ
abs/YL9hVuTtvFWaKt7nBOzED7ISOYFOSr8A9lZdE5Ugb493Ct2/97jVTQqV133D
C2gtu9ZtDRJOWylcBaY3NxH157GVjo2T3mCpCuTq7H03Q0GMpKRSKu9xi5IJg8mN
R7xDguDuZqvT1Ve8cTd3CupoCvjNNbdUsRrtG7MFMAeOgeiqzFghWy4+PlVVBlSX
Zt200rcBCaRHdsCUrazOmyF0lOAdb4rsS5w+zPRbvO/8TMyPU1L84AoWuF8C0yhp
2zpOlXtFbrRplUP/tLs2buGfXzQMH3IR6tv8Lp9N7UlZKtxz3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAQa5OA3nwNqdrBPrDUwso5On3RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy
ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvOTY1ZmI4ZTgtYzU0Yy0z
YWM3LTgzNGEtOTM5NWVkZjBhMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll
MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm
NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm
MjUwZjU1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTGVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaRryQda2e68i9dsasZDea8P1Y/aPG6/1ftgL5h10HJVqPp3Pj7jiEv
/8YisOSv0t/hEaRFwA908cYiHztcEUZW82nWyHCrerN2YLUcFCJQtFwgx1RuJXFQ
GVJ3ndkJ5yN4auHthRYtKYF5P5hcgjtS6lQJWf0qSBOXzASgzIG4Q21i50I159J5
+tKk2qFEtOx+cEj3NegNMEwOaGDrppqakt6O1FLsyYeX1WfDRwsv72YJiQiDIs/H
bcstPv2JY1l8mHL6sUyVtTWDDL3tG+OqlcqVy4Gn4XKPm2PlFJz8QY9dsXH9e/OF
f+A7cGwG/Wt2EtZc+XBYoZKmiJz6c80=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:53 2026 by rpki-client