Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
File:                     d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json)
Hash identifier:          asf5lTKAztaD6xjO8j4Ymt92PYxg+YlTkVsZGVx5tA0=
Subject key identifier:   05:63:98:2E:E1:1B:1B:44:1C:AC:02:4B:0E:B9:CA:40:63:E7:59:8B
Certificate issuer:       /CN=325f62aa-b9c8-4315-87d2-409b60e8840d
Certificate serial:       010D0C9F4328584CFB1D0079CF533F430AB2E800
Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     400228
IP address blocks:        206.41.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1d:00:79:cf:53:3f:43:0a:b2:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=e215bed7-60bc-4452-a4d3-990e6a7acf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:1a:03:9e:92:d8:7b:da:aa:96:48:6b:ff:
                    95:d0:5e:a8:54:03:1c:cb:fe:24:c3:9b:8c:d0:a5:
                    8c:4f:3a:f0:23:a2:d2:13:e4:9c:55:98:9a:16:5f:
                    7a:60:02:8a:5a:95:c8:c1:bd:90:81:e5:7f:59:48:
                    c8:91:0e:76:41:29:21:f1:dd:16:79:96:f7:db:3d:
                    a5:ed:1b:15:41:8a:a0:42:39:d3:9f:7b:28:67:f1:
                    ce:16:9f:6a:cb:ab:e7:66:fb:20:56:7c:1d:f4:8c:
                    ab:c3:06:e1:2f:aa:13:f5:71:7a:26:a2:97:5b:d6:
                    81:9d:f2:0c:ea:dd:93:b6:42:58:96:7c:35:d0:bc:
                    28:23:39:ad:88:28:2c:56:93:21:e9:22:09:78:d5:
                    84:af:8e:03:3f:81:8d:f9:1d:5c:bb:a5:9e:89:42:
                    9b:37:29:12:5b:08:8e:d5:a0:bf:1a:b2:b3:68:4e:
                    d3:08:00:0b:79:38:ec:25:80:6e:d6:1e:05:98:a3:
                    82:0a:e9:86:d3:6f:3c:9e:0e:63:8c:57:1b:ec:d2:
                    17:c0:1e:b8:0f:2b:2f:53:dd:29:be:1a:a1:a1:4e:
                    2f:91:0b:27:43:04:86:99:66:94:3a:20:05:b6:91:
                    6c:49:68:ac:c9:c6:47:0b:18:ec:66:ae:7e:08:4f:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:63:98:2E:E1:1B:1B:44:1C:AC:02:4B:0E:B9:CA:40:63:E7:59:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl

            X509v3 Authority Key Identifier:
                keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:89:bf:b7:9c:08:c7:fa:cd:5e:31:49:86:2c:04:f3:27:34:
         a0:2e:9b:f0:10:05:82:d3:0b:7f:9d:f0:97:fc:de:0a:1e:e3:
         e2:50:c2:92:1d:14:90:b4:ff:1a:a6:3e:22:1c:3c:cb:e3:72:
         bf:80:1c:da:50:4c:e0:9e:1d:53:28:bb:32:f7:53:9d:05:1f:
         32:e8:7a:33:7a:da:37:4c:e7:09:db:10:12:0f:26:0a:b5:a9:
         0d:bb:75:47:6a:1b:d0:0f:11:a7:42:65:3a:97:c4:c9:31:02:
         e3:89:a6:21:d9:82:7d:fa:19:88:26:ca:0a:a1:80:06:fd:84:
         e3:f8:e8:be:ad:f0:eb:30:0c:af:5a:98:ec:b5:bd:48:01:46:
         26:0c:1d:9c:bd:5c:3a:70:fc:eb:e3:44:3c:8a:6d:76:23:ed:
         d9:8d:8d:bb:72:f0:06:fe:0e:59:5a:15:f9:d4:95:12:b2:72:
         e2:3d:c6:8f:5e:e4:d6:7c:73:a8:c0:2b:9e:71:97:35:da:90:
         48:43:ca:74:2e:d4:b2:59:b1:f5:bc:d3:ee:00:a9:fc:04:26:
         49:ad:06:0b:96:5f:97:b9:0c:87:bf:4f:a7:85:e9:e5:22:4a:
         fd:85:e3:50:20:ca:b8:7a:d1:56:a0:b2:89:07:83:b0:cb:fc:
         a6:67:e6:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HQB5z1M/Qwqy6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4
NDBkMB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk
ZTIxNWJlZDctNjBiYy00NDUyLWE0ZDMtOTkwZTZhN2FjZjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX8aA56S2HvaqpZIa/+V0F6oVAMcy/4kw5uM
0KWMTzrwI6LSE+ScVZiaFl96YAKKWpXIwb2QgeV/WUjIkQ52QSkh8d0WeZb32z2l
7RsVQYqgQjnTn3soZ/HOFp9qy6vnZvsgVnwd9IyrwwbhL6oT9XF6JqKXW9aBnfIM
6t2TtkJYlnw10LwoIzmtiCgsVpMh6SIJeNWEr44DP4GN+R1cu6WeiUKbNykSWwiO
1aC/GrKzaE7TCAALeTjsJYBu1h4FmKOCCumG0288ng5jjFcb7NIXwB64DysvU90p
vhqhoU4vkQsnQwSGmWaUOiAFtpFsSWisycZHCxjsZq5+CE/6CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVjmC7hGxtEHKwCSw65ykBj51mLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm
NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvZDY2ZDNkY2ItMmU5NC0z
OGE3LTk1NDktZDM2OWE1NzcwNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3
ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4
ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli
NjBlODg0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKJv7ecCMf6zV4xSYYsBPMnNKAum/AQBYLTC3+d8Jf83goe4+JQwpId
FJC0/xqmPiIcPMvjcr+AHNpQTOCeHVMouzL3U50FHzLoejN62jdM5wnbEBIPJgq1
qQ27dUdqG9APEadCZTqXxMkxAuOJpiHZgn36GYgmygqhgAb9hOP46L6t8OswDK9a
mOy1vUgBRiYMHZy9XDpw/OvjRDyKbXYj7dmNjbty8Ab+DllaFfnUlRKycuI9xo9e
5NZ8c6jAK55xlzXakEhDynQu1LJZsfW80+4AqfwEJkmtBguWX5e5DIe/T6eF6eUi
Sv2F41Agyrh60VagsokHg7DL/KZn5sU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:50 2026 by rpki-client