Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/e616b34c-be66-3bf0-8d77-bbf72e047ec5.roa
File:                     e616b34c-be66-3bf0-8d77-bbf72e047ec5.roa (raw, json)
Hash identifier:          yFgH0/mrRAX6AH955+w5DW9NgGzYK3M4VDjrWSQ8u6s=
Subject key identifier:   B2:CC:3D:C8:6B:18:1D:E6:53:05:42:01:23:FE:90:FA:3B:36:9F:AD
Certificate issuer:       /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Certificate serial:       010D0C9F4328584CEE8CBE56B277FDB8AC06B680
Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/e616b34c-be66-3bf0-8d77-bbf72e047ec5.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     8075
IP address blocks:        165.130.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:be:56:b2:77:fd:b8:ac:06:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=e3551452-29ba-48ed-8a29-12657fd27836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:f1:b2:2e:37:ad:ad:42:72:70:51:cc:39:
                    b5:40:90:8d:26:d7:3e:b8:48:27:14:17:d2:4d:c4:
                    ab:8f:2f:87:08:9e:1a:53:c8:bc:88:06:d4:c0:ba:
                    5d:2c:79:ca:8e:3a:23:6b:51:c0:5a:d6:73:e9:78:
                    fd:e8:cd:69:73:10:65:41:a6:1d:95:99:52:51:c2:
                    6e:fe:1d:ab:22:f5:d8:85:17:d2:8f:33:95:3f:d4:
                    f2:7c:b8:53:bd:ad:5f:56:2b:31:da:96:ae:b3:50:
                    5d:64:b7:55:a1:e4:be:76:7b:96:42:59:c9:13:9e:
                    d1:ee:97:8c:57:a1:b5:7e:ca:8b:e0:a2:0a:c7:71:
                    b3:eb:a3:09:c0:7c:a9:69:06:23:ee:b3:38:5c:ef:
                    5f:93:a8:e5:6f:25:8d:0a:27:27:35:26:1e:72:d0:
                    46:3a:fc:69:62:f5:65:ce:ff:21:5a:db:9e:fc:ad:
                    e3:96:11:a8:2b:4b:43:ed:e2:b5:33:e2:e5:63:eb:
                    31:df:4c:b5:ec:d4:92:ee:80:9b:7c:27:0e:76:cf:
                    54:95:fd:85:c5:1a:21:64:d6:9e:2d:17:da:a7:e1:
                    08:b3:75:a6:2e:35:f4:2f:fe:c1:c9:aa:29:30:a2:
                    72:2e:8b:f1:05:99:97:c6:3e:1f:3e:a4:e4:8e:81:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:3D:C8:6B:18:1D:E6:53:05:42:01:23:FE:90:FA:3B:36:9F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/e616b34c-be66-3bf0-8d77-bbf72e047ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.130.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:d4:31:ab:89:4a:50:d7:12:4a:e9:d9:56:79:3f:06:5b:
         00:0a:74:c0:d0:d8:38:91:69:54:d1:13:50:59:a5:c8:a3:6b:
         26:62:0b:12:5e:40:8b:52:b7:3b:ce:45:6b:1d:13:af:ee:ea:
         61:0d:d3:46:c5:0b:01:46:42:5f:90:2c:e2:8e:87:5e:b6:4f:
         74:f4:f9:de:86:49:92:0e:6f:9b:fe:46:6c:75:86:d7:6e:70:
         1b:44:76:f8:a4:c7:af:08:8c:50:87:48:16:51:41:f8:b1:92:
         77:1d:f3:91:88:51:d7:bd:29:58:0f:dc:01:aa:7e:44:d4:62:
         0f:24:96:72:bf:d4:e6:9e:10:2a:2c:97:e1:3a:ba:63:92:96:
         c6:b0:2b:2f:45:99:a9:49:71:eb:25:c3:28:06:38:ec:31:0f:
         7b:ea:91:76:7b:84:15:6e:10:63:ee:9d:31:bb:f3:8c:72:bd:
         40:91:4f:c3:d1:5c:65:d9:8a:d6:a2:92:2d:ef:b8:e4:ba:71:
         3a:1c:11:7c:35:f5:fe:57:20:c8:d0:8a:60:69:66:9e:d7:2c:
         cd:9c:35:6f:16:54:b7:fe:f7:26:bb:ba:92:9e:8f:ec:1e:ec:
         1f:84:05:e4:d0:0f:9a:d7:7a:5e:ff:33:7b:ae:f8:1d:e3:0f:
         93:3c:19:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujL5Wsnf9uKwGtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0
NmMzMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZTM1NTE0NTItMjliYS00OGVkLThhMjktMTI2NTdmZDI3ODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Lxsi43ra1CcnBRzDm1QJCNJtc+uEgnFBfS
TcSrjy+HCJ4aU8i8iAbUwLpdLHnKjjoja1HAWtZz6Xj96M1pcxBlQaYdlZlSUcJu
/h2rIvXYhRfSjzOVP9TyfLhTva1fVisx2paus1BdZLdVoeS+dnuWQlnJE57R7peM
V6G1fsqL4KIKx3Gz66MJwHypaQYj7rM4XO9fk6jlbyWNCicnNSYectBGOvxpYvVl
zv8hWtue/K3jlhGoK0tD7eK1M+LlY+sx30y17NSS7oCbfCcOds9Ulf2FxRohZNae
LRfap+EIs3WmLjX0L/7ByaopMKJyLovxBZmXxj4fPqTkjoHNbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLMPchrGB3mUwVCASP+kPo7Np+tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4
MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvZTYxNmIzNGMtYmU2Ni0z
YmYwLThkNzctYmJmNzJlMDQ3ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk
M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx
NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1
NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpYJYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0m1DGriUpQ1xJK6dlWeT8GWwAKdMDQ2DiRaVTRE1BZpcijayZiCxJe
QItStzvORWsdE6/u6mEN00bFCwFGQl+QLOKOh162T3T0+d6GSZIOb5v+Rmx1htdu
cBtEdvikx68IjFCHSBZRQfixkncd85GIUde9KVgP3AGqfkTUYg8klnK/1OaeECos
l+E6umOSlsawKy9FmalJceslwygGOOwxD3vqkXZ7hBVuEGPunTG784xyvUCRT8PR
XGXZitaiki3vuOS6cTocEXw19f5XIMjQimBpZp7XLM2cNW8WVLf+9ya7upKej+we
7B+EBeTQD5rXel7/M3uu+B3jD5M8GQU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:34 2026 by rpki-client