Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
File:                     f842fac7-cd73-3534-92f5-b9959d9393b4.roa (raw, json)
Hash identifier:          PNSIUdee3GUCpj4Iwt4FSo5b0Gv5TRyWTucwetcd2S8=
Subject key identifier:   AB:24:FB:27:E5:27:BD:2B:13:12:D7:63:F3:CF:5D:A5:EF:38:2D:25
Certificate issuer:       /CN=cbfbd197-84de-44e6-b527-b42dddca269d
Certificate serial:       010D0C9F4328584CDC6786259F734EC390EEDC80
Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     46414
IP address blocks:        68.68.225.0/24 maxlen: 24
                          68.68.227.0/24 maxlen: 24
                          68.68.228.0/24 maxlen: 24
                          68.68.230.0/23 maxlen: 24
                          68.68.235.0/24 maxlen: 24
                          97.107.152.0/24 maxlen: 24
                          97.107.155.0/24 maxlen: 24
                          97.107.156.0/22 maxlen: 24
                          2607:4a00:4000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:86:25:9f:73:4e:c3:90:ee:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=82ef31df-bced-4ea6-aa9e-865fe2e62928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:e9:f9:63:b7:15:f6:1c:5a:79:1e:d7:21:
                    8c:a7:e9:40:ff:91:d4:9e:1f:cd:2c:e9:8d:d4:29:
                    20:94:21:67:80:cc:e7:a3:85:76:48:79:4d:f1:b8:
                    9b:3e:4f:96:07:63:ce:b2:67:47:bd:7f:e5:71:c9:
                    0a:55:b3:6d:cb:d4:70:2c:3c:de:c3:2a:e1:95:5d:
                    da:7f:80:2e:c0:4a:90:69:d3:f0:7c:11:78:d0:f8:
                    26:24:b5:d7:f2:80:40:1f:9d:1e:8b:5f:90:80:58:
                    1a:14:8c:de:a2:a4:7e:bf:dd:e0:ca:00:b7:5c:b5:
                    74:5e:73:a7:d0:d2:e5:d8:8a:ce:12:6f:6a:ee:05:
                    c2:f5:e6:96:3f:8d:98:58:f6:c1:ad:36:5b:6e:78:
                    93:10:0b:aa:22:3c:69:76:e2:27:df:28:b4:13:d4:
                    75:89:81:82:a9:81:44:09:8b:15:4c:ee:9b:1b:30:
                    2f:b2:40:74:67:4e:11:60:be:57:f7:3e:d5:b1:1b:
                    ed:fc:49:96:76:09:b6:12:5c:3f:b2:6f:e8:bf:7b:
                    66:8a:9e:66:ac:d0:d2:45:4e:45:4b:62:60:e1:39:
                    2d:6a:31:92:60:ea:42:ac:4f:af:c2:df:5f:05:b4:
                    51:18:61:76:d8:11:0a:51:95:94:2f:43:e0:26:44:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:FB:27:E5:27:BD:2B:13:12:D7:63:F3:CF:5D:A5:EF:38:2D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl

            X509v3 Authority Key Identifier:
                keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.225.0/24
                  68.68.227.0-68.68.228.255
                  68.68.230.0/23
                  68.68.235.0/24
                  97.107.152.0/24
                  97.107.155.0-97.107.159.255
                IPv6:
                  2607:4a00:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:8f:ed:ec:a5:38:b2:32:9c:7d:66:42:6c:1f:29:20:68:
         85:d2:84:e5:3d:19:18:63:46:65:fb:35:56:9f:9f:26:31:84:
         40:68:66:b6:d9:74:5a:14:47:40:35:07:15:ff:a5:20:50:5d:
         ee:ca:a2:ea:c8:a9:f4:e7:2f:8b:ad:bc:b1:b2:bd:36:ff:ca:
         ff:0e:aa:86:49:1f:15:95:49:f3:fd:64:da:c4:9b:7d:b6:99:
         07:b5:2a:0f:78:ae:f1:90:fd:cb:6c:2b:8f:95:ca:1c:8f:45:
         3b:a5:23:00:84:d3:a7:f8:a1:0b:fe:9b:39:f0:1c:d2:b2:d2:
         5e:05:79:3a:40:e8:9f:6c:07:99:91:ed:91:e0:01:81:b3:c8:
         8f:92:05:99:a9:91:1e:eb:60:a4:31:ba:de:1d:ff:4a:6b:b1:
         9f:e8:a4:33:a1:9a:f6:ee:4c:42:05:6a:52:52:d5:07:3a:17:
         12:04:43:9f:7c:3f:63:b8:1f:16:41:f4:c7:72:29:43:23:3c:
         87:cc:38:17:06:18:81:f2:9f:d8:f9:bd:77:38:40:b1:49:c8:
         71:e5:72:46:54:1a:bc:80:11:41:51:e8:d3:44:b6:d0:9b:57:
         ce:99:27:2b:2c:c1:23:6e:20:b7:f2:bc:bc:b0:0e:64:6f:d6:
         60:db:64:6a
-----BEGIN CERTIFICATE-----
MIIGgTCCBWmgAwIBAgIUAQ0Mn0MoWEzcZ4Yln3NOw5Du3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey
NjlkMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
ODJlZjMxZGYtYmNlZC00ZWE2LWFhOWUtODY1ZmUyZTYyOTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjILp+WO3FfYcWnke1yGMp+lA/5HUnh/NLOmN
1CkglCFngMzno4V2SHlN8bibPk+WB2POsmdHvX/lcckKVbNty9RwLDzewyrhlV3a
f4AuwEqQadPwfBF40PgmJLXX8oBAH50ei1+QgFgaFIzeoqR+v93gygC3XLV0XnOn
0NLl2IrOEm9q7gXC9eaWP42YWPbBrTZbbniTEAuqIjxpduIn3yi0E9R1iYGCqYFE
CYsVTO6bGzAvskB0Z04RYL5X9z7VsRvt/EmWdgm2Elw/sm/ov3tmip5mrNDSRU5F
S2Jg4TktajGSYOpCrE+vwt9fBbRRGGF22BEKUZWUL0PgJkQXRQIDAQABo4IDkzCC
A48wHQYDVR0OBBYEFKsk+yflJ70rExLXY/PPXaXvOC0lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi
ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZjg0MmZhYzctY2Q3My0z
NTM0LTkyZjUtYjk5NTlkOTM5M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1
MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh
MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk
ZGRjYTI2OWQuY2VyMF0GCCsGAQUFBwEHAQH/BE4wTDA6BAIAATA0AwQAREThMAwD
BABEROMDBABEROQDBAFEROYDBABEROsDBABha5gwDAMEAGFrmwMEBWFrgDAOBAIA
AjAIAwYFJgdKAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAQTyP7eylOLIynH1mQmwfKSBohdKE5T0ZGGNG
Zfs1Vp+fJjGEQGhmttl0WhRHQDUHFf+lIFBd7sqi6sip9Ocvi628sbK9Nv/K/w6q
hkkfFZVJ8/1k2sSbfbaZB7UqD3iu8ZD9y2wrj5XKHI9FO6UjAITTp/ihC/6bOfAc
0rLSXgV5OkDon2wHmZHtkeABgbPIj5IFmamRHutgpDG63h3/Smuxn+ikM6Ga9u5M
QgVqUlLVBzoXEgRDn3w/Y7gfFkH0x3IpQyM8h8w4FwYYgfKf2Pm9dzhAsUnIceVy
RlQavIARQVHo00S20JtXzpknKyzBI24gt/K8vLAOZG/WYNtkag==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:41 2026 by rpki-client