Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
File:                     9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa (raw, json)
Hash identifier:          aBmWBCuMwDgBZAoS211Iolu4o3im5dYFeybNinGPvGU=
Subject key identifier:   EB:7A:1A:BD:92:D9:8D:15:03:FC:80:88:98:98:13:49:A2:3A:4F:16
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584CF2BCEBE723B714D4A57560A0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     393336
IP address blocks:        64.40.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:eb:e7:23:b7:14:d4:a5:75:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=cf1423bb-5055-4434-acd0-aa571e3a2cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:da:a6:7f:a7:43:85:07:07:19:52:19:3d:
                    89:39:35:0b:06:22:a5:a4:20:df:81:d0:f6:3e:4e:
                    bc:8d:e3:f9:12:64:ad:f2:c9:fa:6f:02:1c:43:d7:
                    99:e4:e8:3f:02:c0:8f:a9:ce:9d:33:70:3b:d0:36:
                    2c:77:82:3a:da:ab:88:51:6c:12:94:bf:e4:dd:9d:
                    cb:19:15:fe:c5:1e:02:b9:00:49:f2:b4:18:54:2d:
                    07:eb:fa:2d:45:6f:1e:df:59:1d:70:3a:b6:da:53:
                    26:80:5f:8b:83:4a:ee:f2:80:03:fd:89:cd:9a:c0:
                    0f:55:fb:8e:2c:73:cc:20:6f:d0:2b:39:42:27:e8:
                    5c:84:0d:d5:90:c1:3a:84:da:d3:2b:a5:05:a8:b8:
                    3b:3a:2d:2c:79:00:d3:00:97:5e:46:79:80:50:db:
                    4d:23:72:45:2b:73:52:82:d9:25:ae:7b:f2:f9:65:
                    bc:0f:b6:13:84:e7:62:33:8f:c0:46:56:0b:54:ba:
                    9b:07:7f:d4:a5:dc:1e:c6:2f:95:66:a2:3e:1e:91:
                    e4:39:4f:b1:fc:71:41:d8:c6:c6:4e:a3:d3:23:ef:
                    eb:85:7b:dd:e3:13:ce:47:13:ee:66:94:77:fa:87:
                    53:22:88:35:ae:81:e5:69:69:1c:18:c0:7e:fa:00:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:1A:BD:92:D9:8D:15:03:FC:80:88:98:98:13:49:A2:3A:4F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:e4:c0:b4:bd:1b:8b:2d:62:aa:87:81:a1:e1:62:66:de:75:
         8c:6a:67:fc:70:5a:01:79:c0:0a:2c:c8:02:57:4c:5b:0d:30:
         85:33:4f:0f:d4:99:c0:c5:09:df:72:41:87:2e:98:20:ca:68:
         3f:62:98:81:8d:e1:7b:01:1a:03:f4:a0:e7:56:8a:93:ec:46:
         53:41:9f:81:c2:6d:86:5e:99:9f:4d:cc:b7:dc:7d:82:b4:e9:
         3c:ed:cd:19:01:c5:ca:70:dc:09:a2:ee:79:9c:73:de:6a:00:
         b6:3d:52:05:ab:ab:8c:b5:65:1a:b4:05:5f:52:f9:0e:f0:20:
         44:39:22:59:18:1f:51:36:95:3f:78:ee:13:57:c1:a2:28:08:
         74:0d:55:85:6d:60:28:fd:47:8d:49:42:f8:3a:93:12:ab:57:
         ef:93:c0:e6:2e:b4:df:81:f7:07:55:ad:f6:d4:7b:2c:0c:19:
         e2:fa:14:6c:57:fa:04:df:72:7c:03:c8:c8:23:07:d1:bb:3e:
         6e:f4:ec:a8:d6:ed:70:49:68:28:48:5e:ea:93:18:8f:e2:c0:
         1e:05:b4:5f:18:ab:ee:61:88:d9:5a:44:c8:f0:ab:67:9e:79:
         16:51:ac:a3:b0:8f:32:51:e5:7c:0d:b1:4b:de:e9:bf:30:25:
         23:08:a1:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvOvnI7cU1KV1YKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
Y2YxNDIzYmItNTA1NS00NDM0LWFjZDAtYWE1NzFlM2EyY2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Papn+nQ4UHBxlSGT2JOTULBiKlpCDfgdD2
Pk68jeP5EmSt8sn6bwIcQ9eZ5Og/AsCPqc6dM3A70DYsd4I62quIUWwSlL/k3Z3L
GRX+xR4CuQBJ8rQYVC0H6/otRW8e31kdcDq22lMmgF+Lg0ru8oAD/YnNmsAPVfuO
LHPMIG/QKzlCJ+hchA3VkME6hNrTK6UFqLg7Oi0seQDTAJdeRnmAUNtNI3JFK3NS
gtklrnvy+WW8D7YThOdiM4/ARlYLVLqbB3/Updwexi+VZqI+HpHkOU+x/HFB2MbG
TqPTI+/rhXvd4xPORxPuZpR3+odTIog1roHlaWkcGMB++gBQswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt6Gr2S2Y0VA/yAiJiYE0miOk8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvOTY4N2Y5ZDYtYTZjZi0z
NjAzLWJmMmYtODcyN2Y4MWFhYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAObkwLS9G4stYqqHgaHhYmbedYxqZ/xwWgF5wAosyAJXTFsNMIUzTw/U
mcDFCd9yQYcumCDKaD9imIGN4XsBGgP0oOdWipPsRlNBn4HCbYZemZ9NzLfcfYK0
6TztzRkBxcpw3Ami7nmcc95qALY9UgWrq4y1ZRq0BV9S+Q7wIEQ5IlkYH1E2lT94
7hNXwaIoCHQNVYVtYCj9R41JQvg6kxKrV++TwOYutN+B9wdVrfbUeywMGeL6FGxX
+gTfcnwDyMgjB9G7Pm707KjW7XBJaChIXuqTGI/iwB4FtF8Yq+5hiNlaRMjwq2ee
eRZRrKOwjzJR5XwNsUve6b8wJSMIoVU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:56 2026 by rpki-client