Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992/a6b2eaf5-ee84-3358-8dc5-ae2f34a8caee.roa
File:                     a6b2eaf5-ee84-3358-8dc5-ae2f34a8caee.roa (raw, json)
Hash identifier:          4vdakZ3DhH1UzroIS+UlzS9zHlcs/TcQ+exBOg6GiKo=
Subject key identifier:   21:C4:2C:EE:5A:E6:14:7F:6F:F3:94:3D:FE:5D:B5:67:91:B9:E5:E3
Certificate issuer:       /CN=87167031-a0d7-4296-aa00-b21318b85992
Certificate serial:       010D0C9F4328584CE62CB1C38BBCF7DABA639D00
Authority key identifier: 53:B4:E9:69:26:37:A7:6E:A6:EA:03:F3:22:8D:AB:42:47:56:E4:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992/a6b2eaf5-ee84-3358-8dc5-ae2f34a8caee.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     31811
IP address blocks:        209.213.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992/87167031-a0d7-4296-aa00-b21318b85992.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992/87167031-a0d7-4296-aa00-b21318b85992.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b1:c3:8b:bc:f7:da:ba:63:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87167031-a0d7-4296-aa00-b21318b85992
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=4a7ee565-bb4b-42f6-ad19-92c1c229d0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:c3:c3:93:96:9c:7f:6c:f0:66:92:35:d7:
                    09:01:b1:7f:62:60:00:ff:2c:d9:db:92:c4:87:c5:
                    b5:69:e9:f7:da:f0:fe:ac:08:0e:e8:4e:55:d3:b1:
                    3d:32:da:0c:6e:94:3c:50:03:51:07:11:79:e3:07:
                    ad:7a:43:6d:da:80:ea:55:2a:21:c6:cb:b3:2c:5b:
                    e8:e9:59:ef:3b:bc:2b:39:cc:42:ba:5d:fd:f3:b0:
                    c8:e4:e1:fe:b7:3a:52:cb:2e:01:4f:08:b6:37:66:
                    94:f0:00:b6:06:3c:e3:54:ec:d0:18:e8:e2:c3:4c:
                    9d:e3:59:1c:31:50:18:24:6f:83:95:6a:e1:89:cc:
                    12:73:7d:6c:3d:d2:d3:89:39:52:47:e7:6d:9e:0e:
                    b2:45:ed:d5:3b:b5:54:0a:de:bb:bc:e5:0b:2d:11:
                    f9:bc:1d:63:5e:c0:bb:51:b7:18:2e:ec:68:21:ff:
                    ca:22:42:3a:c4:03:1d:a3:e1:67:07:fb:d3:7a:c7:
                    f5:4b:3c:d4:7c:7f:f3:fc:1b:9f:22:e9:a4:c0:d0:
                    54:33:a4:64:e4:e1:7a:b1:7e:2d:b9:5e:a0:63:3b:
                    d3:4a:07:f7:44:d3:c2:9e:6f:7a:15:03:a0:30:d4:
                    28:11:1f:5a:c8:a6:76:03:f8:55:1f:2c:8a:2d:fe:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C4:2C:EE:5A:E6:14:7F:6F:F3:94:3D:FE:5D:B5:67:91:B9:E5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992/a6b2eaf5-ee84-3358-8dc5-ae2f34a8caee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992/87167031-a0d7-4296-aa00-b21318b85992.crl

            X509v3 Authority Key Identifier:
                keyid:53:B4:E9:69:26:37:A7:6E:A6:EA:03:F3:22:8D:AB:42:47:56:E4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87167031-a0d7-4296-aa00-b21318b85992.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:99:d4:f9:33:7a:f9:36:dd:45:a3:ac:23:f6:8a:ff:8a:c0:
         3c:d6:48:3a:54:f6:e4:ca:6e:2d:ab:86:0f:15:eb:d3:5c:c6:
         58:c4:f2:d7:0c:98:8d:5a:4a:fa:0f:26:5e:d3:51:fe:18:55:
         93:19:20:59:b5:8f:d3:8d:21:d7:ae:ec:aa:e4:f3:18:0f:6d:
         6c:86:f6:04:bb:64:48:14:d5:d2:d5:0c:f4:a8:33:0d:86:09:
         e3:16:88:93:4d:ba:4a:69:58:c5:b0:62:88:3a:cf:3d:7a:e9:
         80:0c:39:51:62:61:a5:34:6b:11:24:f4:b5:46:71:56:aa:1f:
         c6:ae:3e:de:ee:93:f2:17:8d:f7:2a:c8:ac:85:88:f0:ca:ac:
         87:2b:b8:1c:65:e1:97:33:22:71:ad:99:51:07:2e:24:77:22:
         bc:12:ff:d6:e7:aa:57:85:9a:82:5b:27:3f:84:bf:0c:6e:a0:
         b3:83:b4:65:75:1b:85:a6:e8:d4:96:86:d3:40:bb:83:86:ee:
         6a:4f:2e:29:5e:95:a9:47:eb:98:40:72:ce:7e:8f:39:92:74:
         87:e5:79:b7:4a:51:6c:75:c7:44:e8:71:3c:e6:f7:49:7a:d4:
         b4:ea:4a:50:03:67:a5:cb:25:c6:0d:0c:89:2c:d0:41:a6:81:
         a7:5d:d8:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLLHDi7z32rpjnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxNjcwMzEtYTBkNy00Mjk2LWFhMDAtYjIxMzE4Yjg1
OTkyMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
NGE3ZWU1NjUtYmI0Yi00MmY2LWFkMTktOTJjMWMyMjlkMGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTPDw5OWnH9s8GaSNdcJAbF/YmAA/yzZ25LE
h8W1aen32vD+rAgO6E5V07E9MtoMbpQ8UANRBxF54wetekNt2oDqVSohxsuzLFvo
6VnvO7wrOcxCul3987DI5OH+tzpSyy4BTwi2N2aU8AC2BjzjVOzQGOjiw0yd41kc
MVAYJG+DlWrhicwSc31sPdLTiTlSR+dtng6yRe3VO7VUCt67vOULLRH5vB1jXsC7
UbcYLuxoIf/KIkI6xAMdo+FnB/vTesf1SzzUfH/z/BufIumkwNBUM6Rk5OF6sX4t
uV6gYzvTSgf3RNPCnm96FQOgMNQoER9ayKZ2A/hVHyyKLf6xmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHELO5a5hR/b/OUPf5dtWeRueXjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NzE2
NzAzMS1hMGQ3LTQyOTYtYWEwMC1iMjEzMThiODU5OTIvYTZiMmVhZjUtZWU4NC0z
MzU4LThkYzUtYWUyZjM0YThjYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODcxNjcwMzEtYTBkNy00Mjk2LWFh
MDAtYjIxMzE4Yjg1OTkyLzg3MTY3MDMxLWEwZDctNDI5Ni1hYTAwLWIyMTMxOGI4
NTk5Mi5jcmwwHwYDVR0jBBgwFoAUU7TpaSY3p26m6gPzIo2rQkdW5GIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84NzE2NzAzMS1hMGQ3LTQyOTYtYWEwMC1iMjEz
MThiODU5OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGZ1Pkzevk23UWjrCP2iv+KwDzWSDpU9uTKbi2rhg8V69NcxljE8tcM
mI1aSvoPJl7TUf4YVZMZIFm1j9ONIdeu7Krk8xgPbWyG9gS7ZEgU1dLVDPSoMw2G
CeMWiJNNukppWMWwYog6zz166YAMOVFiYaU0axEk9LVGcVaqH8auPt7uk/IXjfcq
yKyFiPDKrIcruBxl4ZczInGtmVEHLiR3IrwS/9bnqleFmoJbJz+EvwxuoLODtGV1
G4Wm6NSWhtNAu4OG7mpPLilelalH65hAcs5+jzmSdIflebdKUWx1x0TocTzm90l6
1LTqSlADZ6XLJcYNDIks0EGmgadd2NY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:30 2026 by rpki-client