Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa
File:                     f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa (raw, json)
Hash identifier:          0n5TPkSYJgI4LW6NPpghm5SzfrHTLvOKQrEf6s1i05Q=
Subject key identifier:   6C:45:EF:1E:8F:3F:A4:18:CD:DB:1A:9A:E2:32:F2:6E:1D:B3:75:42
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CE62CCBC489A789E981BCBBC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     32620
IP address blocks:        66.253.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:cb:c4:89:a7:89:e9:81:bc:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=5ef6b427-3e9a-4337-910a-5908719591c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:05:06:32:51:0b:40:ad:ac:dc:35:75:46:
                    96:0e:e6:79:35:f5:41:0c:81:1c:e1:b0:2a:e3:12:
                    ac:c9:68:d0:39:e0:d9:ad:e4:e0:84:80:22:bf:a3:
                    16:1e:d9:27:70:aa:d3:5f:d3:bd:15:8e:90:a6:2d:
                    bc:af:83:c6:b3:8d:77:0c:13:27:c3:c7:15:e1:05:
                    d0:06:a9:7c:9d:65:b7:e5:23:7e:fa:a8:e2:d7:51:
                    f6:1b:4b:a7:4d:1f:d2:bc:4a:2a:4e:a8:e5:69:df:
                    63:24:4c:dc:0c:37:5a:cf:e8:5e:8d:99:8c:5c:29:
                    47:b1:72:7e:96:be:5f:ef:f6:a1:f5:1a:43:e5:3d:
                    21:f5:72:0d:3d:f0:15:b0:b9:d2:18:a4:7d:d0:77:
                    c5:c5:41:d2:13:5a:fa:4d:78:d2:7f:45:58:43:7f:
                    10:3f:68:fb:6e:7e:89:b0:74:67:6a:90:0c:2c:5b:
                    18:1a:1a:02:8a:ba:83:7c:20:0b:8e:41:0e:75:ec:
                    1d:7d:6f:5a:24:7a:24:ae:03:f5:df:64:97:f5:a6:
                    5d:55:f8:f5:14:35:2a:3e:7e:bd:72:60:a7:8f:e3:
                    e0:76:44:75:70:22:1d:4f:71:4f:e4:a5:ae:87:12:
                    3a:c2:62:eb:1b:d2:76:db:16:e1:a3:48:5e:6f:2a:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:EF:1E:8F:3F:A4:18:CD:DB:1A:9A:E2:32:F2:6E:1D:B3:75:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:27:46:6b:70:f5:b1:72:59:5c:cd:d2:17:5f:5a:3e:fd:
         68:47:de:dd:19:a6:db:97:c9:9e:67:65:3c:b6:70:50:56:e8:
         97:eb:50:bf:15:90:ab:12:96:4d:fb:35:b9:13:c9:20:8a:66:
         00:35:76:1b:72:8d:43:3c:51:01:c6:50:08:69:14:50:6c:59:
         15:01:9f:56:91:6c:39:9c:82:66:19:b5:33:e6:1d:d2:44:e6:
         ec:f8:a7:c9:50:74:48:2a:9d:ae:f4:15:c3:72:0d:ad:ca:58:
         a4:08:4b:d3:0a:a6:57:c0:ab:8e:06:7b:65:54:e4:78:ea:71:
         18:06:c6:bb:69:03:cc:fc:d6:8a:1f:8b:db:9d:58:85:48:f8:
         dc:d4:d4:a9:99:0a:9f:90:2e:e6:5c:41:7d:7e:86:0c:45:09:
         02:0e:72:2f:e3:a6:95:88:d1:16:d4:98:e7:9a:24:e0:2d:5e:
         cb:40:01:a2:01:be:25:0c:55:78:a4:eb:da:76:aa:38:55:1c:
         7e:42:9f:83:25:8f:dc:f3:d0:12:cd:4a:d1:c0:ba:fb:d6:b7:
         ba:2f:ed:65:47:ca:2f:ad:83:e8:34:6e:ad:f5:3d:ea:5e:d8:
         0e:f4:9e:7f:e1:e4:d4:31:f8:ce:fe:07:ca:b9:2b:1b:00:af:
         a8:b1:8a:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLMvEiaeJ6YG8u8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
NWVmNmI0MjctM2U5YS00MzM3LTkxMGEtNTkwODcxOTU5MWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGkFBjJRC0CtrNw1dUaWDuZ5NfVBDIEc4bAq
4xKsyWjQOeDZreTghIAiv6MWHtkncKrTX9O9FY6Qpi28r4PGs413DBMnw8cV4QXQ
Bql8nWW35SN++qji11H2G0unTR/SvEoqTqjlad9jJEzcDDdaz+hejZmMXClHsXJ+
lr5f7/ah9RpD5T0h9XINPfAVsLnSGKR90HfFxUHSE1r6TXjSf0VYQ38QP2j7bn6J
sHRnapAMLFsYGhoCirqDfCALjkEOdewdfW9aJHokrgP132SX9aZdVfj1FDUqPn69
cmCnj+PgdkR1cCIdT3FP5KWuhxI6wmLrG9J22xbho0hebyqSjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxF7x6PP6QYzdsamuIy8m4ds3VCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjM5MzVmMWEtMmY4Zi0z
ZDhjLWIwYmUtNGUwMjVlNmU2M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlLJ0ZrcPWxcllczdIXX1o+/WhH3t0ZptuXyZ5nZTy2cFBW6JfrUL8V
kKsSlk37NbkTySCKZgA1dhtyjUM8UQHGUAhpFFBsWRUBn1aRbDmcgmYZtTPmHdJE
5uz4p8lQdEgqna70FcNyDa3KWKQIS9MKplfAq44Ge2VU5HjqcRgGxrtpA8z81oof
i9udWIVI+NzU1KmZCp+QLuZcQX1+hgxFCQIOci/jppWI0RbUmOeaJOAtXstAAaIB
viUMVXik69p2qjhVHH5Cn4Mlj9zz0BLNStHAuvvWt7ov7WVHyi+tg+g0bq31Pepe
2A70nn/h5NQx+M7+B8q5KxsAr6ixiqM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:06 2026 by rpki-client