Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/466a1e88-1c34-3bd8-a0e5-5ee80cedb3b3.roa
File:                     466a1e88-1c34-3bd8-a0e5-5ee80cedb3b3.roa (raw, json)
Hash identifier:          J3UJ1KqZm2wa5Y2r1PfGCn2RtI4TOjKvTvWcDOvnamU=
Subject key identifier:   FD:A6:F2:1A:9A:8D:78:CD:9A:AC:6B:9B:15:EC:53:55:7E:6F:3A:FD
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584CF2BCE529215596C4A0907300
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/466a1e88-1c34-3bd8-a0e5-5ee80cedb3b3.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     393336
IP address blocks:        64.40.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e5:29:21:55:96:c4:a0:90:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=927a523e-a34a-4285-b289-3f0c8d732fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:e5:6e:cb:a1:f1:db:4f:9d:40:39:7f:42:
                    54:80:2f:c3:6e:d6:3b:11:37:82:a4:d2:5e:d1:7c:
                    dc:71:6b:a6:bd:c8:e1:86:8b:4a:a8:4e:4e:39:ef:
                    43:56:d3:fe:2e:e0:fe:ee:c1:78:5e:3f:56:c0:fb:
                    d7:a0:7c:0a:ae:02:5a:23:2d:d8:37:f7:82:04:54:
                    c8:76:80:50:67:56:1e:61:5e:df:74:c1:7d:0b:87:
                    f6:c3:9d:73:f8:e6:cf:86:73:76:bf:79:5c:32:c3:
                    3c:bd:bc:8d:22:93:ae:ef:f4:df:ff:34:4e:41:41:
                    a8:8e:64:9b:29:0b:95:8d:ce:20:65:f5:7a:ff:9f:
                    e2:24:7d:98:f1:ac:cf:ac:da:da:6b:49:f6:d5:c8:
                    ec:e7:1d:c1:e1:21:fe:77:7f:f7:74:cd:a3:07:a7:
                    66:2c:7f:be:db:2e:03:4c:a8:02:01:b2:63:e3:0a:
                    97:5d:c1:87:71:7b:a2:0d:69:37:ef:b3:43:96:7e:
                    68:19:40:06:d0:8b:79:55:43:c5:a8:fa:4c:fb:b7:
                    1c:1d:be:64:d6:65:c6:d4:67:1d:d5:ac:2d:b9:1d:
                    3f:04:db:42:e7:87:c8:80:9f:ab:6e:18:64:5f:ab:
                    a1:10:29:53:a4:29:8f:89:c3:47:9c:b8:04:f0:96:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:F2:1A:9A:8D:78:CD:9A:AC:6B:9B:15:EC:53:55:7E:6F:3A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/466a1e88-1c34-3bd8-a0e5-5ee80cedb3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:52:44:cd:53:0a:fc:ab:6e:89:48:3b:69:9d:c8:3d:3c:
         df:6d:9c:ba:1b:a9:74:97:6d:c9:2a:89:a9:d4:2f:0b:ce:f2:
         ca:7c:a4:3c:62:95:c5:b6:f2:1a:7e:35:72:14:14:86:4b:44:
         11:37:01:2b:99:40:cb:06:8c:e1:0c:74:27:96:33:5e:1c:a6:
         eb:63:94:24:a9:c2:95:8d:f2:55:0b:6a:64:88:0a:3f:6a:c0:
         73:ce:b8:a2:b5:d8:96:02:5c:0f:11:6c:3c:6a:ac:d1:e2:21:
         04:c9:98:78:6f:66:b1:f5:69:4d:e7:b6:9f:84:87:62:43:98:
         8f:63:a9:65:83:80:37:08:d4:98:60:1a:7f:a6:69:33:93:86:
         dd:33:6b:b2:e3:be:14:76:d4:8e:ba:bd:84:a7:ae:38:b9:a8:
         ef:ec:4b:20:43:51:73:65:fa:6b:e4:e5:6e:34:b0:a1:36:95:
         da:7e:a0:02:0a:63:ee:4a:b4:4e:2d:aa:a2:70:25:be:66:8b:
         32:f2:ae:c0:2b:29:98:88:7d:c9:e6:eb:cd:2d:5d:92:10:3f:
         e8:c5:c7:a2:b8:26:91:78:5c:a6:72:c7:d5:89:30:6d:c3:58:
         03:80:f5:d4:1d:ac:2c:f2:28:bd:2d:73:21:0d:39:68:aa:95:
         5a:b6:36:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvOUpIVWWxKCQcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
OTI3YTUyM2UtYTM0YS00Mjg1LWIyODktM2YwYzhkNzMyZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnDlbsuh8dtPnUA5f0JUgC/DbtY7ETeCpNJe
0XzccWumvcjhhotKqE5OOe9DVtP+LuD+7sF4Xj9WwPvXoHwKrgJaIy3YN/eCBFTI
doBQZ1YeYV7fdMF9C4f2w51z+ObPhnN2v3lcMsM8vbyNIpOu7/Tf/zROQUGojmSb
KQuVjc4gZfV6/5/iJH2Y8azPrNraa0n21cjs5x3B4SH+d3/3dM2jB6dmLH++2y4D
TKgCAbJj4wqXXcGHcXuiDWk377NDln5oGUAG0It5VUPFqPpM+7ccHb5k1mXG1Gcd
1awtuR0/BNtC54fIgJ+rbhhkX6uhEClTpCmPicNHnLgE8JZEtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2m8hqajXjNmqxrmxXsU1V+bzr9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvNDY2YTFlODgtMWMzNC0z
YmQ4LWEwZTUtNWVlODBjZWRiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQCgaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTWUkTNUwr8q26JSDtpncg9PN9tnLobqXSXbckqianULwvO8sp8pDxi
lcW28hp+NXIUFIZLRBE3ASuZQMsGjOEMdCeWM14cputjlCSpwpWN8lULamSICj9q
wHPOuKK12JYCXA8RbDxqrNHiIQTJmHhvZrH1aU3ntp+Eh2JDmI9jqWWDgDcI1Jhg
Gn+maTOTht0za7LjvhR21I66vYSnrji5qO/sSyBDUXNl+mvk5W40sKE2ldp+oAIK
Y+5KtE4tqqJwJb5mizLyrsArKZiIfcnm680tXZIQP+jFx6K4JpF4XKZyx9WJMG3D
WAOA9dQdrCzyKL0tcyENOWiqlVq2Ng8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:06 2026 by rpki-client