Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b472b2e3-bc32-3340-ada1-dafed8029ad7.roa
File:                     b472b2e3-bc32-3340-ada1-dafed8029ad7.roa (raw, json)
Hash identifier:          003V90x6kUBi9FNcghbQd8pQpQkAEVSInZkiLp3uZik=
Subject key identifier:   41:79:5B:23:40:1C:B9:F9:53:82:31:6B:60:51:C5:A6:ED:9F:78:79
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584CCD0C8B6E8777687C3CF47E00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b472b2e3-bc32-3340-ada1-dafed8029ad7.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        207.202.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:8b:6e:87:77:68:7c:3c:f4:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=caa69c00-49dd-4d1a-ae5f-8e30da726bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:c7:80:ac:23:e9:fe:e7:00:ae:48:c4:cf:
                    ad:76:b0:97:e1:d8:24:8e:1f:8a:12:dd:0d:f9:25:
                    9f:b2:f2:08:ab:a1:69:d5:83:75:b5:69:5f:e4:22:
                    39:a7:f0:77:f5:a0:7f:27:35:da:8c:06:36:7d:17:
                    58:1a:41:2a:dd:1e:78:4f:01:69:e1:9c:c1:5a:73:
                    8d:58:71:17:18:ac:e2:3f:fd:04:20:ff:a1:78:2f:
                    2a:70:58:11:be:94:ba:e5:2d:15:e0:c7:69:15:ce:
                    90:11:1b:28:bf:f6:da:34:6d:38:06:a5:35:e4:7c:
                    6c:1f:85:58:80:8c:32:b8:b0:42:e5:7d:90:bb:33:
                    23:83:b0:99:0b:e4:68:e7:fe:d1:20:e1:13:cd:08:
                    54:40:fa:32:df:09:ee:50:1c:02:59:a0:7f:02:02:
                    5a:7f:2a:d0:87:c6:b9:4c:d5:b6:36:cd:b5:66:33:
                    a7:c4:a7:9d:52:09:89:07:4d:fc:1a:c8:10:26:b1:
                    b7:8d:52:ca:3a:8e:32:80:a6:cd:a1:b3:ed:79:ad:
                    3e:4f:98:4a:7a:e8:72:df:56:81:45:3a:8d:c7:77:
                    71:3b:c7:cc:a4:7a:e7:df:f0:02:0a:78:71:35:d6:
                    6e:ef:95:0b:3e:dd:06:fd:a5:37:e9:bb:6f:b2:37:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:79:5B:23:40:1C:B9:F9:53:82:31:6B:60:51:C5:A6:ED:9F:78:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b472b2e3-bc32-3340-ada1-dafed8029ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c1:20:5a:09:69:4b:cc:e2:2f:83:90:96:2e:f2:c5:7c:86:
         5a:8c:77:e5:4e:26:9c:25:5e:ae:ef:ba:a8:8b:33:a2:5a:c3:
         4e:20:d8:98:30:cd:4c:1e:e4:f2:00:be:a8:1e:9c:c8:8a:fc:
         13:76:b3:a1:96:89:1f:8e:3f:02:80:08:00:0f:ba:bb:a9:4f:
         b1:0d:eb:f4:1e:ee:5e:db:25:04:cd:3e:2f:50:ec:4b:7b:83:
         5e:1d:c7:ff:74:29:68:07:82:db:e9:4b:5c:78:3e:0e:3a:a6:
         a8:c3:69:18:54:53:08:61:00:c4:b0:d5:19:37:69:8d:81:ff:
         e3:1a:f0:36:72:0d:b6:b0:e0:24:84:e2:f5:d8:5a:47:cb:83:
         3f:03:e7:85:3f:f9:98:f5:6e:ae:00:66:b0:36:3f:41:5b:84:
         8a:cd:3d:ce:13:22:7c:92:bf:76:f6:d7:31:be:40:bf:16:6f:
         25:de:58:ba:68:ba:d8:dd:8a:ba:d3:76:d6:2c:f1:f3:6a:ab:
         d7:d3:22:36:1e:8b:62:03:b4:60:74:6d:b8:bf:16:e6:0c:e7:
         fb:8a:fa:dd:8f:9a:d2:0d:10:79:28:dc:d7:35:07:ca:64:d6:
         79:6d:5b:6c:5f:fd:6e:05:6c:0b:1d:bf:12:3e:3b:1f:68:38:
         fd:e3:f4:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDItuh3dofDz0fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
Y2FhNjljMDAtNDlkZC00ZDFhLWFlNWYtOGUzMGRhNzI2YmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicnHgKwj6f7nAK5IxM+tdrCX4dgkjh+KEt0N
+SWfsvIIq6Fp1YN1tWlf5CI5p/B39aB/JzXajAY2fRdYGkEq3R54TwFp4ZzBWnON
WHEXGKziP/0EIP+heC8qcFgRvpS65S0V4MdpFc6QERsov/baNG04BqU15HxsH4VY
gIwyuLBC5X2QuzMjg7CZC+Ro5/7RIOETzQhUQPoy3wnuUBwCWaB/AgJafyrQh8a5
TNW2Ns21ZjOnxKedUgmJB038GsgQJrG3jVLKOo4ygKbNobPtea0+T5hKeuhy31aB
RTqNx3dxO8fMpHrn3/ACCnhxNdZu75ULPt0G/aU36btvsjep6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEF5WyNAHLn5U4Ixa2BRxabtn3h5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjQ3MmIyZTMtYmMzMi0z
MzQwLWFkYTEtZGFmZWQ4MDI5YWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrBIFoJaUvM4i+DkJYu8sV8hlqMd+VOJpwlXq7vuqiLM6Jaw04g2Jgw
zUwe5PIAvqgenMiK/BN2s6GWiR+OPwKACAAPurupT7EN6/Qe7l7bJQTNPi9Q7Et7
g14dx/90KWgHgtvpS1x4Pg46pqjDaRhUUwhhAMSw1Rk3aY2B/+Ma8DZyDbaw4CSE
4vXYWkfLgz8D54U/+Zj1bq4AZrA2P0FbhIrNPc4TInySv3b21zG+QL8WbyXeWLpo
utjdirrTdtYs8fNqq9fTIjYei2IDtGB0bbi/FuYM5/uK+t2PmtINEHko3Nc1B8pk
1nltW2xf/W4FbAsdvxI+Ox9oOP3j9I0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:58 2026 by rpki-client