Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa
File:                     d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa (raw, json)
Hash identifier:          EH+dSLlF1HYcHxrqXn0kSDEOsg99iEJ6G+7wNKN6b/c=
Subject key identifier:   AC:AA:31:45:43:C4:55:83:B8:12:ED:F1:BF:95:13:19:60:56:4C:8E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CE7921962D8805A4442C7A700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     40676
IP address blocks:        72.244.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:19:62:d8:80:5a:44:42:c7:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=ef72eb1e-503e-49e7-bd9b-7f592e1feaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:09:2f:5f:3e:a3:33:e4:93:f9:c9:3e:5a:
                    6a:11:27:8a:31:e6:18:73:ba:a8:c5:d7:fa:98:e1:
                    31:ce:3f:ea:f0:c0:bc:e0:4b:70:fd:b5:fc:1c:6c:
                    05:4a:56:f1:c7:1e:69:f0:20:f6:be:9c:bf:8c:02:
                    59:0e:ec:f3:c6:6f:b1:af:55:17:dd:00:4e:b7:6d:
                    d9:f3:85:1e:50:b8:7c:f2:62:48:79:58:c7:bd:b5:
                    31:2b:ac:a2:3a:98:03:e7:e1:c1:6a:82:ec:0b:7d:
                    5c:ca:b6:6f:b4:9d:28:8c:26:84:f8:df:1c:2f:c0:
                    8f:2c:8a:c5:99:ab:c9:ce:98:7e:aa:f8:70:21:5e:
                    44:c4:ea:77:e0:cf:1a:18:d4:cf:ba:f8:4f:07:5a:
                    49:8c:34:ad:46:78:bc:c2:b6:1d:23:3d:44:b9:00:
                    4d:2c:e6:3c:b1:7f:2e:e1:fd:da:3e:1a:21:b1:24:
                    59:b3:ec:35:ac:40:68:af:01:44:32:80:bf:94:4f:
                    0c:ca:7d:25:57:2f:d7:d9:3e:f2:0c:e5:84:45:dc:
                    38:07:f4:1a:09:49:b5:f0:98:d1:de:f1:f1:28:2d:
                    4f:29:9a:82:da:9a:22:20:ba:0c:aa:03:3f:4f:30:
                    f8:25:06:d0:62:8b:d5:9f:ed:03:ab:d5:2e:76:d7:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AA:31:45:43:C4:55:83:B8:12:ED:F1:BF:95:13:19:60:56:4C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:4b:ba:d0:bd:e8:f4:3d:42:4f:b5:c7:c3:be:b3:cb:f4:
         43:71:5a:f9:f7:31:c2:68:39:d3:45:95:4a:0c:f0:64:e3:89:
         94:7e:93:66:dd:7c:f8:da:7c:fe:74:87:87:9a:9c:2f:4c:91:
         bf:2a:0f:d0:1f:5c:65:e5:35:7c:23:ad:8e:d2:bf:5b:39:21:
         f9:d5:cc:e0:e4:01:3b:42:7a:0f:72:c5:c4:e0:13:51:e7:06:
         78:9a:9d:32:6f:4e:8d:4c:63:6e:0d:8d:73:fc:2a:68:fe:d8:
         d4:75:45:bc:bf:1e:e7:8c:2b:5c:f7:cb:ca:12:00:8a:45:de:
         b1:4b:ea:d8:0a:eb:58:68:a4:31:80:37:14:66:72:86:ec:3a:
         52:9d:e4:dc:8d:22:fe:02:15:bd:88:0f:a4:13:70:c9:9a:6b:
         d6:b1:41:3d:93:33:0b:9a:aa:f2:e8:93:6f:8b:32:c1:46:57:
         be:3e:e0:2a:1c:b0:35:41:10:04:12:15:8c:4b:cf:d1:91:a8:
         38:fc:dc:f4:0c:e2:d7:8e:91:68:04:81:ab:0a:78:f7:79:ff:
         3f:ca:65:d8:14:a8:7c:a0:77:51:7e:33:32:0b:3b:dc:05:5a:
         de:64:3a:c0:cc:b9:c0:65:23:c3:92:ae:d3:41:6f:18:cf:1e:
         e4:e0:be:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEznkhli2IBaRELHpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIxODE0MDA0MVoXDTI2MDUxOTEzMDA0MVowLzEtMCsGA1UEAxMk
ZWY3MmViMWUtNTAzZS00OWU3LWJkOWItN2Y1OTJlMWZlYWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWgJL18+ozPkk/nJPlpqESeKMeYYc7qoxdf6
mOExzj/q8MC84Etw/bX8HGwFSlbxxx5p8CD2vpy/jAJZDuzzxm+xr1UX3QBOt23Z
84UeULh88mJIeVjHvbUxK6yiOpgD5+HBaoLsC31cyrZvtJ0ojCaE+N8cL8CPLIrF
mavJzph+qvhwIV5ExOp34M8aGNTPuvhPB1pJjDStRni8wrYdIz1EuQBNLOY8sX8u
4f3aPhohsSRZs+w1rEBorwFEMoC/lE8Myn0lVy/X2T7yDOWERdw4B/QaCUm18JjR
3vHxKC1PKZqC2poiILoMqgM/TzD4JQbQYovVn+0Dq9Uudtd3iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKyqMUVDxFWDuBLt8b+VExlgVkyOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDEwMTYxOGMtZmI1Yi0z
M2FiLTkwZDYtY2Y0Mjk4OWI0YWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPS4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkcS7rQvej0PUJPtcfDvrPL9ENxWvn3McJoOdNFlUoM8GTjiZR+k2bd
fPjafP50h4eanC9Mkb8qD9AfXGXlNXwjrY7Sv1s5IfnVzODkATtCeg9yxcTgE1Hn
BnianTJvTo1MY24NjXP8Kmj+2NR1Rby/HueMK1z3y8oSAIpF3rFL6tgK61hopDGA
NxRmcobsOlKd5NyNIv4CFb2ID6QTcMmaa9axQT2TMwuaqvLok2+LMsFGV74+4Coc
sDVBEAQSFYxLz9GRqDj83PQM4teOkWgEgasKePd5/z/KZdgUqHygd1F+MzILO9wF
Wt5kOsDMucBlI8OSrtNBbxjPHuTgvio=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:50 2026 by rpki-client