Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa
File:                     002d8448-bfd2-3f15-9758-645ea14a426b.roa (raw, json)
Hash identifier:          T8HV/Yt7iJq8x7KqBFZTo9zckcdqOFCvGr0pUjB68FI=
Subject key identifier:   06:66:EF:CE:BC:3A:75:4F:61:70:E9:D7:34:AC:79:D0:2D:16:3D:0D
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CEE8CE117A165D1285E17C980
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     18785
IP address blocks:        216.106.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:e1:17:a1:65:d1:28:5e:17:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=efb1e4d2-3259-43d6-9473-1c57a06a4abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:55:b6:f2:dd:cc:58:fe:29:f1:54:3d:ff:
                    b6:51:90:4d:4c:6c:6f:70:f9:f5:c7:90:21:d9:cb:
                    73:d6:fa:93:d5:6c:1b:0e:38:b5:93:8d:ff:7c:da:
                    13:c4:e8:f3:1b:21:f1:50:5d:43:19:b7:a2:7c:ce:
                    26:b2:17:66:96:cc:20:87:17:34:9f:93:c3:07:44:
                    a6:70:2a:60:9c:e4:86:27:e7:2a:60:57:0a:22:49:
                    0f:c1:65:db:67:2b:50:f9:3f:bb:b6:83:68:55:5d:
                    0f:4e:ca:f5:ab:2a:51:95:bc:70:c6:90:30:68:f3:
                    d7:d8:e7:3c:ce:76:61:e4:dc:8f:5d:ea:3d:50:4d:
                    ef:a3:28:69:33:95:d8:ed:28:88:0e:20:f9:28:23:
                    30:3a:52:28:89:80:62:fa:f2:23:f7:6e:ec:cc:d7:
                    20:6d:e5:aa:39:3e:41:89:a8:d5:71:31:28:4e:64:
                    42:c7:ee:fc:f3:37:3d:ee:63:51:75:22:27:b1:c7:
                    65:4f:7c:79:cf:19:33:4c:e5:6c:ee:8c:5e:dd:0c:
                    f8:ba:82:a9:d3:8f:2a:40:f6:db:42:cb:8c:09:fd:
                    66:1e:dd:4a:39:5e:28:0b:8e:e7:99:c3:49:d9:5f:
                    d7:de:08:b7:12:1b:00:7b:7d:5e:29:e6:18:da:86:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:EF:CE:BC:3A:75:4F:61:70:E9:D7:34:AC:79:D0:2D:16:3D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:9d:c9:97:bd:dc:7f:3b:eb:f2:48:fc:e1:a6:c3:66:3a:
         a8:db:ba:0a:09:b5:af:f1:84:89:b1:7a:81:28:0c:fe:af:90:
         07:e3:a0:c5:39:9a:da:61:42:f0:47:e3:e7:35:39:4e:88:58:
         00:de:2a:16:48:65:51:e6:95:af:c9:c7:92:75:d4:c4:52:04:
         6a:59:fe:99:24:56:c1:b7:ed:9a:ce:0f:ef:7c:51:d8:d5:2b:
         30:e0:6e:25:13:d1:6c:c8:eb:77:80:78:e1:b5:6c:10:a6:52:
         ee:e0:c7:76:5d:67:35:66:ad:d6:7c:e9:0d:5b:a5:d8:44:e3:
         f4:63:69:a6:b0:71:da:33:85:d2:73:4d:0c:55:6a:fc:b9:16:
         1b:d5:ca:03:93:23:ca:3b:51:4f:60:0a:eb:fc:50:af:26:d2:
         ac:47:5c:31:00:45:c9:b8:69:00:50:39:dd:d0:04:e6:fa:1c:
         ba:01:eb:5b:4a:ca:d0:83:3d:d4:29:e3:f4:61:1a:73:fd:8a:
         c7:85:8b:2d:c8:a5:8b:de:f6:75:ec:f2:31:74:55:6c:5d:23:
         57:df:8c:a3:63:55:97:9c:49:73:62:44:2a:7e:0d:cd:56:89:
         4d:42:6c:f2:d3:5c:b3:e0:4b:3e:97:06:5a:78:e8:47:48:58:
         c5:66:11:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujOEXoWXRKF4XyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZWZiMWU0ZDItMzI1OS00M2Q2LTk0NzMtMWM1N2EwNmE0YWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwFVtvLdzFj+KfFUPf+2UZBNTGxvcPn1x5Ah
2ctz1vqT1WwbDji1k43/fNoTxOjzGyHxUF1DGbeifM4mshdmlswghxc0n5PDB0Sm
cCpgnOSGJ+cqYFcKIkkPwWXbZytQ+T+7toNoVV0PTsr1qypRlbxwxpAwaPPX2Oc8
znZh5NyPXeo9UE3voyhpM5XY7SiIDiD5KCMwOlIoiYBi+vIj927szNcgbeWqOT5B
iajVcTEoTmRCx+788zc97mNRdSInscdlT3x5zxkzTOVs7oxe3Qz4uoKp048qQPbb
QsuMCf1mHt1KOV4oC47nmcNJ2V/X3gi3EhsAe31eKeYY2oZ24wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZm7868OnVPYXDp1zSsedAtFj0NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDAyZDg0NDgtYmZkMi0z
ZjE1LTk3NTgtNjQ1ZWExNGE0MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACD7ncmXvdx/O+vySPzhpsNmOqjbugoJta/xhImxeoEoDP6vkAfjoMU5
mtphQvBH4+c1OU6IWADeKhZIZVHmla/Jx5J11MRSBGpZ/pkkVsG37ZrOD+98UdjV
KzDgbiUT0WzI63eAeOG1bBCmUu7gx3ZdZzVmrdZ86Q1bpdhE4/RjaaawcdozhdJz
TQxVavy5FhvVygOTI8o7UU9gCuv8UK8m0qxHXDEARcm4aQBQOd3QBOb6HLoB61tK
ytCDPdQp4/RhGnP9iseFiy3IpYve9nXs8jF0VWxdI1ffjKNjVZecSXNiRCp+Dc1W
iU1CbPLTXLPgSz6XBlp46EdIWMVmEUM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:39 2026 by rpki-client