Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/096e3618-f69c-3abf-91c1-b26ef46fefdf.roa
File:                     096e3618-f69c-3abf-91c1-b26ef46fefdf.roa (raw, json)
Hash identifier:          KrlvpRLwcjo4v8Hy6KQRSv6Q08dUoJ40CXCG8zIV2ts=
Subject key identifier:   1D:C1:FB:25:CC:68:05:9F:3A:20:AC:B9:E1:E5:32:F5:14:71:35:B2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CF587B3651E7415670199A640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/096e3618-f69c-3abf-91c1-b26ef46fefdf.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     401977
IP address blocks:        74.82.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:b3:65:1e:74:15:67:01:99:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=54cf6eb4-5926-483d-a84f-fd06334918a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:5c:c2:e0:b2:02:c0:ed:86:8e:9c:eb:25:
                    f4:8b:ea:b6:2f:98:f2:92:e5:c2:0b:78:29:05:d8:
                    a8:5d:fe:af:d4:ab:ab:91:5d:cb:63:84:ab:39:ac:
                    41:dd:5f:0d:fb:6d:85:10:36:b0:3f:2a:4c:cc:d2:
                    3d:6a:f5:1d:32:e0:4e:9e:f0:22:9d:fc:93:4c:45:
                    0d:e3:18:ed:af:fe:e7:7e:5e:66:fd:65:bb:a5:fb:
                    c2:10:ea:e2:f4:62:21:2e:b4:97:70:37:35:e5:6d:
                    3c:7a:ab:d0:f9:f7:92:fc:ff:61:95:38:09:31:73:
                    58:8e:2b:2d:4f:30:e5:eb:6c:c0:c5:66:c1:88:51:
                    35:14:34:65:0c:3e:33:17:0f:34:97:dc:78:53:42:
                    57:f2:bb:8a:24:26:62:a7:5c:4b:b9:8a:7b:35:80:
                    9d:9f:0a:1f:44:86:db:40:36:6b:8f:c6:a3:db:5a:
                    49:6b:b5:e6:b6:11:57:88:52:a0:4e:06:47:97:df:
                    2c:6b:9f:b8:3f:a8:d8:a9:ab:10:84:67:6c:c1:ca:
                    8d:3a:c6:41:e0:26:48:5f:e8:26:2c:67:7e:b4:3f:
                    07:bf:a6:a7:7e:a3:df:4f:f1:c7:9b:88:a0:7d:82:
                    ef:97:48:ae:0b:19:2c:be:44:58:b5:07:af:3e:b8:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C1:FB:25:CC:68:05:9F:3A:20:AC:B9:E1:E5:32:F5:14:71:35:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/096e3618-f69c-3abf-91c1-b26ef46fefdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:bd:b8:21:f6:60:3c:45:ae:6c:2c:d4:f2:66:81:ba:72:9d:
         b7:47:49:be:de:ae:df:46:85:6a:ed:5b:35:8d:fb:7e:16:21:
         3a:71:41:26:3f:1a:64:f7:c9:91:f3:b7:19:7e:64:01:4c:d7:
         ee:c9:8a:dc:db:92:61:94:ea:91:d8:00:2b:8c:60:22:f4:cf:
         4a:a0:ff:05:41:fa:26:1d:37:e1:4d:78:7d:d0:70:71:a2:f9:
         a2:17:e6:d0:14:a9:f3:bf:7a:07:21:5f:49:84:33:dd:c9:33:
         20:b0:d2:c1:ef:4c:79:88:29:77:7a:f3:3d:45:37:b0:c9:72:
         77:3b:47:1d:09:6b:47:eb:02:cb:3d:ab:c3:c8:6c:18:8f:bc:
         54:a0:b6:25:d5:b6:ed:ba:41:55:77:72:ab:39:22:d2:2c:fc:
         00:2f:de:c1:ff:64:da:3c:bd:66:b7:25:3b:b4:c0:17:ba:a4:
         7d:f8:7f:bf:5b:ff:7e:b3:bc:da:c4:31:c6:9d:17:62:f4:86:
         70:a5:74:af:47:5e:72:11:68:5d:dc:8d:ea:2d:9f:33:56:61:
         70:b1:83:73:75:d4:54:9b:8b:1b:06:96:83:77:56:45:20:9c:
         ae:bf:eb:31:61:70:72:53:46:c5:a2:91:25:b6:a4:5a:cc:30:
         ba:04:c3:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7NlHnQVZwGZpkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
NTRjZjZlYjQtNTkyNi00ODNkLWE4NGYtZmQwNjMzNDkxOGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf1cwuCyAsDtho6c6yX0i+q2L5jykuXCC3gp
BdioXf6v1KurkV3LY4SrOaxB3V8N+22FEDawPypMzNI9avUdMuBOnvAinfyTTEUN
4xjtr/7nfl5m/WW7pfvCEOri9GIhLrSXcDc15W08eqvQ+feS/P9hlTgJMXNYjist
TzDl62zAxWbBiFE1FDRlDD4zFw80l9x4U0JX8ruKJCZip1xLuYp7NYCdnwofRIbb
QDZrj8aj21pJa7XmthFXiFKgTgZHl98sa5+4P6jYqasQhGdswcqNOsZB4CZIX+gm
LGd+tD8Hv6anfqPfT/HHm4igfYLvl0iuCxksvkRYtQevPriFHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3B+yXMaAWfOiCsueHlMvUUcTWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDk2ZTM2MTgtZjY5Yy0z
YWJmLTkxYzEtYjI2ZWY0NmZlZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlI6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu9uCH2YDxFrmws1PJmgbpynbdHSb7ert9GhWrtWzWN+34WITpxQSY/
GmT3yZHztxl+ZAFM1+7JitzbkmGU6pHYACuMYCL0z0qg/wVB+iYdN+FNeH3QcHGi
+aIX5tAUqfO/egchX0mEM93JMyCw0sHvTHmIKXd68z1FN7DJcnc7Rx0Ja0frAss9
q8PIbBiPvFSgtiXVtu26QVV3cqs5ItIs/AAv3sH/ZNo8vWa3JTu0wBe6pH34f79b
/36zvNrEMcadF2L0hnCldK9HXnIRaF3cjeotnzNWYXCxg3N11FSbixsGloN3VkUg
nK6/6zFhcHJTRsWikSW2pFrMMLoEw9w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:40 2026 by rpki-client