Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa
File:                     dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa (raw, json)
Hash identifier:          elIdIE5BAfni7KSiUSPpOZiyyQ9O0LTQV9HJ8u1OOSw=
Subject key identifier:   77:D1:45:15:0B:79:3C:AC:EB:B7:4E:87:F0:DC:89:13:E7:2A:52:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584CE8F76B5E6E042CBC99020900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     22677
IP address blocks:        97.86.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6b:5e:6e:04:2c:bc:99:02:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=9764678f-e62c-4b2c-ab02-2412c0daf913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:47:a3:96:04:ed:3a:15:fe:4e:c8:2c:49:
                    38:12:35:4b:5b:fe:cd:47:06:9c:ba:31:e9:c4:89:
                    b5:bf:33:b1:40:01:52:24:8f:45:de:0f:f5:7c:2e:
                    7c:44:b3:f9:a3:81:f4:ed:5e:3b:fc:87:c8:a9:02:
                    90:e6:6c:89:99:ca:a2:f2:73:36:b1:87:2a:ef:1e:
                    10:b9:83:8d:d1:c0:37:b7:88:2e:08:0f:cb:e8:b9:
                    45:6b:74:31:66:07:d9:0b:ed:e6:49:09:f3:93:b9:
                    a2:be:f5:44:51:1f:9e:63:3f:39:fb:8e:99:5c:75:
                    49:1b:fc:ae:fc:ea:4d:b6:31:ee:50:29:05:ff:16:
                    19:22:1a:e6:04:da:a3:13:bb:1b:1a:d5:3e:40:42:
                    1c:a9:b9:cf:13:8f:cc:59:85:82:ca:dd:3c:d2:a8:
                    26:8e:69:92:17:5c:de:16:58:8a:73:f3:0f:63:86:
                    e1:f9:4c:16:30:36:37:2c:b7:b5:51:09:49:60:44:
                    a5:da:80:cc:b8:08:bd:e7:07:22:37:7b:1e:fb:6b:
                    8a:8f:56:5f:72:2b:9c:ca:df:71:30:f0:0f:c4:1e:
                    33:fa:f7:fd:f2:9e:17:96:7a:b2:1d:3d:58:9f:f2:
                    bc:ec:33:b5:b6:96:20:bd:e9:90:61:47:94:a7:8f:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D1:45:15:0B:79:3C:AC:EB:B7:4E:87:F0:DC:89:13:E7:2A:52:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:5c:55:98:9a:38:80:50:ed:b7:b3:49:25:f5:d6:7d:27:
         77:be:39:81:e8:ec:27:3a:e4:c2:f8:07:cc:92:1b:84:50:7b:
         1b:0f:22:36:bd:f8:75:3d:66:97:8d:f7:ad:fc:d2:0e:73:2a:
         4f:34:35:c6:23:07:94:7a:73:59:9b:5d:41:e4:62:1f:57:39:
         22:82:07:93:06:9f:3e:a4:64:63:5e:5d:c9:06:8f:f5:61:96:
         05:6a:55:67:36:4f:1a:b6:ce:ae:06:6f:90:57:89:e7:56:90:
         0e:7f:4c:8b:8a:5b:fc:f0:72:6f:06:2a:1f:52:64:55:9b:6b:
         4e:e3:88:b6:87:66:c8:b2:03:fb:81:9c:9e:3b:ec:bf:2d:6c:
         6a:d4:5c:c1:0d:5d:36:b1:4e:a4:19:7f:8e:8a:b3:5f:3f:55:
         e6:4b:9e:4b:05:d6:80:ed:fc:be:28:91:3b:bd:12:95:b8:37:
         7a:60:d9:dd:3e:91:24:49:8f:15:f7:ff:49:12:c1:6a:bb:f7:
         0f:01:ad:b2:37:c0:fe:0e:4c:b9:ee:5b:4e:b4:3c:ae:ab:06:
         a8:5b:06:ee:7b:30:b7:f4:45:32:f6:35:e7:57:e0:5b:e4:bc:
         8f:4c:9f:8c:a0:df:66:a8:2e:98:04:0f:3d:1a:5a:55:53:29:
         42:a3:29:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo92tebgQsvJkCCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
OTc2NDY3OGYtZTYyYy00YjJjLWFiMDItMjQxMmMwZGFmOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFJHo5YE7ToV/k7ILEk4EjVLW/7NRwacujHp
xIm1vzOxQAFSJI9F3g/1fC58RLP5o4H07V47/IfIqQKQ5myJmcqi8nM2sYcq7x4Q
uYON0cA3t4guCA/L6LlFa3QxZgfZC+3mSQnzk7mivvVEUR+eYz85+46ZXHVJG/yu
/OpNtjHuUCkF/xYZIhrmBNqjE7sbGtU+QEIcqbnPE4/MWYWCyt080qgmjmmSF1ze
FliKc/MPY4bh+UwWMDY3LLe1UQlJYESl2oDMuAi95wciN3se+2uKj1Zfciucyt9x
MPAPxB4z+vf98p4XlnqyHT1Yn/K87DO1tpYgvemQYUeUp488NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfRRRULeTys67dOh/DciRPnKlKwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGMyZjA2YjItMjFiYS0z
YzI5LThiOWMtOGYzNmZkMDAxMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVauMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgcXFWYmjiAUO23s0kl9dZ9J3e+OYHo7Cc65ML4B8ySG4RQexsPIja9
+HU9ZpeN96380g5zKk80NcYjB5R6c1mbXUHkYh9XOSKCB5MGnz6kZGNeXckGj/Vh
lgVqVWc2Txq2zq4Gb5BXiedWkA5/TIuKW/zwcm8GKh9SZFWba07jiLaHZsiyA/uB
nJ477L8tbGrUXMENXTaxTqQZf46Ks18/VeZLnksF1oDt/L4okTu9EpW4N3pg2d0+
kSRJjxX3/0kSwWq79w8BrbI3wP4OTLnuW060PK6rBqhbBu57MLf0RTL2NedX4Fvk
vI9Mn4yg32aoLpgEDz0aWlVTKUKjKdw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:45 2026 by rpki-client