Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa
File:                     cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa (raw, json)
Hash identifier:          0IBCY4KjQrpVVJg41PC4cL+wJvGy3+FBoorwOOTQqzI=
Subject key identifier:   E2:F8:80:1D:7A:56:B2:65:74:0E:86:B2:C0:7B:BA:92:D7:7B:72:28
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584CD2A1EDBD38FFE078FC4F6480
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21782
IP address blocks:        192.95.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ed:bd:38:ff:e0:78:fc:4f:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=e1eca38b-8593-492c-a289-3a85c34ae5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:a5:5d:8b:7b:07:39:be:53:2f:2b:c2:70:
                    25:fd:4b:bf:69:03:b2:2e:90:e3:a9:3b:5e:10:4c:
                    81:93:bc:8e:68:83:ce:94:ef:31:2a:d4:33:1b:d2:
                    73:55:e0:80:e2:ef:eb:4c:cb:b9:64:32:2d:d0:88:
                    d4:69:c8:db:9c:27:35:81:e5:d6:fd:c8:5a:1d:da:
                    b2:b0:c8:fe:22:29:e6:10:e8:23:9f:d5:a9:b5:da:
                    a5:59:0c:15:09:c4:d4:14:37:32:65:75:04:a6:d1:
                    49:34:b4:1b:7c:44:0b:0d:af:01:3a:0d:b5:d4:67:
                    4d:5a:f9:6a:0e:43:82:75:08:a2:64:3f:6d:b7:a1:
                    89:cb:c1:5a:94:e1:55:3e:d3:b7:19:01:b8:9e:fc:
                    f8:1f:4f:f5:2c:16:cf:8a:df:03:d2:75:58:2f:7c:
                    a3:e1:74:3e:19:b4:0f:27:3e:11:ee:8c:50:5b:2a:
                    80:87:f5:15:ae:db:d5:d7:b0:b0:d9:c3:45:9f:63:
                    83:89:60:56:4b:18:7a:81:3c:2d:8a:b9:b8:21:e5:
                    30:4d:4f:b4:d6:ec:00:a2:fa:31:8e:c6:7d:7a:b6:
                    64:c3:53:12:49:ae:92:15:a5:c5:fb:1c:11:e7:8a:
                    3f:ef:33:98:d9:ac:4f:c2:40:cc:a5:27:c4:af:0e:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F8:80:1D:7A:56:B2:65:74:0E:86:B2:C0:7B:BA:92:D7:7B:72:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:f5:66:90:17:be:39:7c:63:a4:16:cc:dd:22:18:e2:8e:
         03:70:c8:23:44:6a:8c:04:d2:6c:d4:fe:90:32:23:bf:d5:bf:
         6f:0e:67:e0:d6:00:34:ca:a7:e5:e0:eb:a1:cb:3a:87:2c:8d:
         7f:b9:10:ab:c3:31:91:44:85:fd:b6:28:2b:8f:d8:d2:19:85:
         68:52:14:f9:18:e1:21:5c:22:a0:92:ad:65:30:60:b0:4a:4b:
         96:88:37:a5:b1:4b:dd:16:61:71:56:10:f8:b4:92:d4:18:07:
         a8:a8:c0:17:63:a5:06:bc:60:1a:66:4b:f3:0a:b3:c6:f4:9d:
         b6:51:1c:62:11:a8:8b:c5:a8:0e:af:7e:58:1c:90:50:20:f3:
         31:b1:e6:02:2c:01:48:6d:f9:b8:81:74:d6:d6:96:f9:df:8a:
         00:d1:ae:ee:0b:73:a1:c2:ff:9a:dd:ac:c4:db:77:58:3b:c0:
         4e:d5:8f:e6:b8:10:a8:ad:2c:f7:0d:ce:11:2d:ce:8c:71:82:
         14:a8:ce:7c:25:d9:ba:aa:62:93:63:05:5f:97:8c:96:8c:bf:
         cb:2b:95:8f:76:ea:0d:2b:b8:89:7a:62:1a:3d:08:b0:c0:be:
         0d:3f:d9:87:be:4f:9a:70:be:41:4a:1b:58:70:25:e5:35:36:
         ea:9a:18:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoe29OP/gePxPZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl
OTNhMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZTFlY2EzOGItODU5My00OTJjLWEyODktM2E4NWMzNGFlNWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0ClXYt7Bzm+Uy8rwnAl/Uu/aQOyLpDjqTte
EEyBk7yOaIPOlO8xKtQzG9JzVeCA4u/rTMu5ZDIt0IjUacjbnCc1geXW/chaHdqy
sMj+IinmEOgjn9WptdqlWQwVCcTUFDcyZXUEptFJNLQbfEQLDa8BOg211GdNWvlq
DkOCdQiiZD9tt6GJy8FalOFVPtO3GQG4nvz4H0/1LBbPit8D0nVYL3yj4XQ+GbQP
Jz4R7oxQWyqAh/UVrtvV17Cw2cNFn2ODiWBWSxh6gTwtirm4IeUwTU+01uwAovox
jsZ9erZkw1MSSa6SFaXF+xwR54o/7zOY2axPwkDMpSfErw58swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL4gB16VrJldA6GssB7upLXe3IoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk
YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvY2QzMWQyZjQtMDQ5MS0z
MmU3LThiMjUtNWNkNThmOWJjOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4
YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz
ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1
MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwF9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzq9WaQF745fGOkFszdIhjijgNwyCNEaowE0mzU/pAyI7/Vv28OZ+DW
ADTKp+Xg66HLOocsjX+5EKvDMZFEhf22KCuP2NIZhWhSFPkY4SFcIqCSrWUwYLBK
S5aIN6WxS90WYXFWEPi0ktQYB6iowBdjpQa8YBpmS/MKs8b0nbZRHGIRqIvFqA6v
flgckFAg8zGx5gIsAUht+biBdNbWlvnfigDRru4Lc6HC/5rdrMTbd1g7wE7Vj+a4
EKitLPcNzhEtzoxxghSoznwl2bqqYpNjBV+XjJaMv8srlY926g0ruIl6Yho9CLDA
vg0/2Ye+T5pwvkFKG1hwJeU1NuqaGKg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:48 2026 by rpki-client