Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/74966020-ea3d-30b0-bfd4-41343c95ceb2.roa
File:                     74966020-ea3d-30b0-bfd4-41343c95ceb2.roa (raw, json)
Hash identifier:          4RMSHhjH3rp4/yurLr7DPHLqft4JEr9IOp1yDU2XQMg=
Subject key identifier:   83:0B:07:08:9A:87:AA:D0:D6:DC:1A:61:7D:9E:0E:C1:77:7E:F9:58
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584CE5BFD54CCAF58DCE2BDEC480
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/74966020-ea3d-30b0-bfd4-41343c95ceb2.roa
Signing time:             Tue 17 Feb 2026 22:21:16 +0000
ROA not before:           Tue 17 Feb 2026 22:21:16 +0000
ROA not after:            Mon 18 May 2026 21:21:16 +0000
asID:                     16509
IP address blocks:        204.10.52.0/24 maxlen: 24
                          204.10.53.0/24 maxlen: 24
                          204.10.54.0/24 maxlen: 24
                          204.10.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:bf:d5:4c:ca:f5:8d:ce:2b:de:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Feb 17 22:21:16 2026 GMT
            Not After : May 18 21:21:16 2026 GMT
        Subject: CN=8f5f037a-7f01-4421-bb37-0a46988d1cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:c3:1f:b5:02:54:b6:0e:0a:9e:48:87:ac:
                    e1:c2:16:db:00:b7:19:d7:db:65:e1:86:85:54:69:
                    85:7a:a3:26:e3:cf:02:97:43:ac:85:36:8d:96:8d:
                    22:99:47:1b:15:99:a6:f0:2f:ee:f6:8e:2b:a5:cc:
                    58:2b:aa:ee:77:1e:59:42:f3:bb:22:18:7c:fa:d2:
                    b7:cf:a4:d3:01:69:02:c0:7c:e4:07:4a:87:ca:f4:
                    35:61:04:84:87:0c:aa:3b:02:45:73:d5:d7:ae:b2:
                    1a:6c:cb:22:b1:46:d6:d7:10:7d:a9:5c:71:f4:a8:
                    dd:3b:11:b2:a6:74:05:54:87:97:95:05:d9:ff:b4:
                    5c:05:6b:14:46:a1:71:d4:db:98:32:03:92:37:66:
                    1e:4f:8e:4e:45:c1:3a:04:75:ca:18:b9:a4:6e:17:
                    57:e0:7e:48:8b:27:7b:cb:9a:e4:03:8d:0e:ad:05:
                    61:9b:bf:de:80:55:53:df:42:05:1e:36:2d:de:8a:
                    6b:6f:c4:fd:2a:50:73:a2:16:b0:77:9e:5f:a6:73:
                    5b:84:c2:b5:e8:1f:fd:90:09:10:ca:d8:0f:05:b1:
                    22:07:fb:e1:b4:09:d7:03:23:f2:ee:fd:9a:99:b0:
                    f9:24:91:31:62:56:c6:ce:b6:e7:60:8a:74:da:fe:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0B:07:08:9A:87:AA:D0:D6:DC:1A:61:7D:9E:0E:C1:77:7E:F9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/74966020-ea3d-30b0-bfd4-41343c95ceb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a6:26:35:ec:12:b5:76:1b:f8:6c:61:f1:79:5a:ad:29:dc:
         64:75:48:56:9b:4a:89:f1:5d:b4:68:2d:bf:33:77:1c:f3:28:
         ee:28:65:ca:41:44:04:c9:b5:d5:58:31:86:52:c2:36:93:d8:
         0d:f5:90:ef:61:89:13:1a:b4:f7:39:9f:2a:97:8b:f1:18:fe:
         71:4b:0b:fd:17:0e:72:35:59:f5:d2:dc:fb:7c:ed:74:20:48:
         ce:1e:d6:9a:b6:51:53:47:af:94:66:f0:db:fc:49:46:90:3f:
         5c:70:95:f9:5a:c9:b5:dd:00:b6:c2:cc:11:e5:2e:f1:4a:26:
         15:13:f7:21:ce:c8:ec:9c:ea:a8:a4:9f:1f:ab:1a:bd:a8:8b:
         71:07:c0:60:ff:81:b8:82:95:bc:12:55:ab:81:3d:97:63:bd:
         c0:30:5d:9f:67:67:53:5e:40:d2:93:07:f1:ab:e1:56:23:96:
         6b:3c:9d:d5:05:32:c1:1a:8e:ed:c2:ae:cd:06:9b:d9:13:55:
         f0:13:6d:de:cd:81:f8:06:d9:fe:e8:f5:73:12:a2:03:55:6c:
         b8:b5:9a:e8:5e:d0:d3:5c:cf:60:6d:2e:36:25:8f:7c:2a:c3:
         53:31:43:14:86:eb:5c:f5:7e:39:f7:b9:d9:03:0f:1b:32:d6:
         3d:75:fe:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlv9VMyvWNzivexIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi
ZjE0MB4XDTI2MDIxNzIyMjExNloXDTI2MDUxODIxMjExNlowLzEtMCsGA1UEAxMk
OGY1ZjAzN2EtN2YwMS00NDIxLWJiMzctMGE0Njk4OGQxY2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/bDH7UCVLYOCp5Ih6zhwhbbALcZ19tl4YaF
VGmFeqMm488Cl0OshTaNlo0imUcbFZmm8C/u9o4rpcxYK6rudx5ZQvO7Ihh8+tK3
z6TTAWkCwHzkB0qHyvQ1YQSEhwyqOwJFc9XXrrIabMsisUbW1xB9qVxx9KjdOxGy
pnQFVIeXlQXZ/7RcBWsURqFx1NuYMgOSN2YeT45ORcE6BHXKGLmkbhdX4H5Iiyd7
y5rkA40OrQVhm7/egFVT30IFHjYt3oprb8T9KlBzohawd55fpnNbhMK16B/9kAkQ
ytgPBbEiB/vhtAnXAyPy7v2ambD5JJExYlbGzrbnYIp02v6QjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMLBwiah6rQ1twaYX2eDsF3fvlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5
NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvNzQ5NjYwMjAtZWEzZC0z
MGIwLWJmZDQtNDEzNDNjOTVjZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5
OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw
YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5
ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAo0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmmJjXsErV2G/hsYfF5Wq0p3GR1SFabSonxXbRoLb8zdxzzKO4oZcpB
RATJtdVYMYZSwjaT2A31kO9hiRMatPc5nyqXi/EY/nFLC/0XDnI1WfXS3Pt87XQg
SM4e1pq2UVNHr5Rm8Nv8SUaQP1xwlflaybXdALbCzBHlLvFKJhUT9yHOyOyc6qik
nx+rGr2oi3EHwGD/gbiClbwSVauBPZdjvcAwXZ9nZ1NeQNKTB/Gr4VYjlms8ndUF
MsEaju3Crs0Gm9kTVfATbd7NgfgG2f7o9XMSogNVbLi1muhe0NNcz2BtLjYlj3wq
w1MxQxSG61z1fjn3udkDDxsy1j11/s8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:01 2026 by rpki-client