Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8e85842-0dd8-33fe-a58b-c59671f5218e.roa
File:                     f8e85842-0dd8-33fe-a58b-c59671f5218e.roa (raw, json)
Hash identifier:          4omuGEAsO/zyetOeA7PC0KHwxzNM2NCxNID2O8e2g/8=
Subject key identifier:   29:50:CE:88:7E:8C:2B:DA:59:E6:D5:ED:C0:D2:B2:CF:15:C4:C6:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC6790DD30447BABC273BD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8e85842-0dd8-33fe-a58b-c59671f5218e.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        141.158.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:90:dd:30:44:7b:ab:c2:73:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=c90eff0f-1293-458e-a091-5a770b8a302d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:91:ea:5a:6c:9a:9a:2d:b7:43:69:e7:f3:
                    15:d8:0e:12:d0:71:21:07:ed:2c:24:e5:ee:e3:fb:
                    0a:c2:8f:aa:fc:93:5d:6b:e2:17:1a:9c:5a:f5:51:
                    7f:cb:65:22:35:87:7b:20:db:41:15:2c:fa:15:fd:
                    e9:9a:7b:bd:b8:5e:bf:7b:1b:89:31:9e:f2:78:e5:
                    e0:a9:f9:13:90:c0:78:36:a6:bc:a9:e0:25:20:2d:
                    17:4b:9c:e8:80:a0:d9:31:10:c2:fd:c0:8f:41:96:
                    6c:b9:25:78:d7:0f:f0:21:05:86:50:e2:33:61:3e:
                    2d:19:50:e2:3b:9a:bf:58:d3:c8:ee:d1:c6:3c:b3:
                    c6:ba:a2:7c:dd:f5:6d:b5:54:e1:45:cd:0a:af:53:
                    bf:6c:3a:a0:48:07:96:14:19:61:8c:3f:9e:7c:10:
                    53:65:0a:92:99:22:d6:47:78:c0:f2:56:16:c9:4a:
                    5d:cb:3c:9a:58:cd:f4:ee:c6:96:f9:16:3e:8d:0c:
                    21:bc:18:95:a0:52:03:ee:f2:62:2e:80:7f:be:0c:
                    11:df:14:d9:3e:b8:b1:1d:92:a3:0d:1e:2f:65:e0:
                    e0:c3:75:59:eb:55:cc:c7:6d:ea:e8:5a:be:7e:c5:
                    0e:9c:72:9e:b7:71:4c:62:5a:de:d4:5d:d7:2a:d9:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:50:CE:88:7E:8C:2B:DA:59:E6:D5:ED:C0:D2:B2:CF:15:C4:C6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8e85842-0dd8-33fe-a58b-c59671f5218e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.158.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7a:c6:77:90:ab:98:d9:c1:2b:c0:41:72:78:16:4d:9e:e1:
         83:49:59:55:cd:78:bf:0f:63:54:33:c5:e4:a4:3f:1c:cf:4b:
         5d:68:2e:6c:49:d5:a7:ab:54:41:80:ce:4e:30:f4:92:7e:9f:
         9d:b3:c8:18:7e:19:8d:99:f8:33:83:ab:e0:e2:8b:98:eb:68:
         9e:b1:1c:e9:0e:41:c8:11:e7:fb:76:c1:f9:d0:fd:a4:75:33:
         ce:7c:a9:62:6e:c6:56:65:6a:cc:ca:21:c9:b0:3b:31:79:11:
         fe:c9:0b:40:fd:af:e5:f8:d3:5c:77:ae:8b:68:c5:7d:ba:c4:
         5c:50:71:a4:b3:55:82:b4:22:a2:2e:8f:90:b3:d7:91:c0:26:
         6d:21:05:dd:26:df:29:5d:d1:ef:a2:cd:9f:dd:ae:c2:56:30:
         57:5f:1a:10:0a:c0:5d:25:a4:77:d3:fc:3f:82:50:0a:3b:3c:
         3a:b5:24:0c:a2:d4:57:dd:6e:24:b8:22:2a:82:96:28:3c:f6:
         a3:d6:0d:b8:1b:96:b8:7c:92:a4:00:5c:0c:95:0c:3a:0f:81:
         af:96:c2:2c:d8:98:8e:88:3d:8b:ef:f7:1c:a5:a8:b7:53:39:
         f4:a5:d8:df:f3:02:6e:73:4e:0c:91:1d:40:6b:2c:93:10:04:
         5e:23:7d:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ5DdMER7q8JzvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
YzkwZWZmMGYtMTI5My00NThlLWEwOTEtNWE3NzBiOGEzMDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSaR6lpsmpott0Np5/MV2A4S0HEhB+0sJOXu
4/sKwo+q/JNda+IXGpxa9VF/y2UiNYd7INtBFSz6Ff3pmnu9uF6/exuJMZ7yeOXg
qfkTkMB4Nqa8qeAlIC0XS5zogKDZMRDC/cCPQZZsuSV41w/wIQWGUOIzYT4tGVDi
O5q/WNPI7tHGPLPGuqJ83fVttVThRc0Kr1O/bDqgSAeWFBlhjD+efBBTZQqSmSLW
R3jA8lYWyUpdyzyaWM307saW+RY+jQwhvBiVoFID7vJiLoB/vgwR3xTZPrixHZKj
DR4vZeDgw3VZ61XMx23q6Fq+fsUOnHKet3FMYlre1F3XKtnDswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClQzoh+jCvaWebV7cDSss8VxMbwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjhlODU4NDItMGRkOC0z
M2ZlLWE1OGItYzU5NjcxZjUyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZ5QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACB6xneQq5jZwSvAQXJ4Fk2e4YNJWVXNeL8PY1QzxeSkPxzPS11oLmxJ
1aerVEGAzk4w9JJ+n52zyBh+GY2Z+DODq+Dii5jraJ6xHOkOQcgR5/t2wfnQ/aR1
M858qWJuxlZlaszKIcmwOzF5Ef7JC0D9r+X401x3rotoxX26xFxQcaSzVYK0IqIu
j5Cz15HAJm0hBd0m3yld0e+izZ/drsJWMFdfGhAKwF0lpHfT/D+CUAo7PDq1JAyi
1FfdbiS4IiqClig89qPWDbgblrh8kqQAXAyVDDoPga+WwizYmI6IPYvv9xylqLdT
OfSl2N/zAm5zTgyRHUBrLJMQBF4jfW8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:44 2026 by rpki-client