Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f08ba41-ec98-3c0d-bba8-7190ec96b1b7.roa
File:                     0f08ba41-ec98-3c0d-bba8-7190ec96b1b7.roa (raw, json)
Hash identifier:          YK+RT1K4QLOWu/iMEyNfZuYwz7DCMFRnUb4/Gsr4CzA=
Subject key identifier:   F8:0F:E0:20:09:EC:E1:D0:20:4E:1E:17:33:BC:E5:52:DF:15:ED:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CF6FB809A09176EC3E3E3C600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f08ba41-ec98-3c0d-bba8-7190ec96b1b7.roa
Signing time:             Tue 24 Feb 2026 02:30:14 +0000
ROA not before:           Tue 24 Feb 2026 02:30:14 +0000
ROA not after:            Mon 25 May 2026 01:30:14 +0000
asID:                     27291
IP address blocks:        65.19.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:fb:80:9a:09:17:6e:c3:e3:e3:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 24 02:30:14 2026 GMT
            Not After : May 25 01:30:14 2026 GMT
        Subject: CN=b9afe819-b123-4faf-8b9c-ef21fac38d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:26:7b:1c:b9:fb:1f:4b:5b:7e:91:94:49:
                    33:f8:4d:a8:55:11:c9:b0:62:c1:51:b2:55:4d:ad:
                    b7:3b:80:9f:03:36:3d:e5:7f:5b:d1:81:65:b8:d4:
                    2d:5f:ca:7b:69:9e:98:7a:4a:84:c1:f8:53:b4:ea:
                    87:c4:da:e3:13:ee:f2:4c:f6:8b:7a:69:8d:81:72:
                    ed:6d:ac:fe:3f:56:14:39:06:7c:e0:71:99:79:fa:
                    5c:3a:37:55:23:85:f9:f8:d6:e0:d6:d1:1a:89:0b:
                    e4:12:dc:e4:ef:d0:96:37:9b:70:dd:c0:73:32:9f:
                    18:1d:fd:b1:e1:0f:4c:01:60:89:1e:bf:32:35:af:
                    ae:ec:8a:5b:b0:e2:0a:b2:ae:52:43:97:dc:d6:b9:
                    94:b2:0e:9b:74:b5:a6:a5:79:f1:9a:0e:a7:9d:0d:
                    d2:2f:90:f7:75:0f:ef:ee:51:09:10:a7:8c:19:91:
                    72:17:12:c8:db:21:f7:b0:7a:20:ef:7a:06:2f:92:
                    9f:48:48:d5:6c:34:06:1c:9e:2e:9e:ec:27:2a:0f:
                    68:39:0f:86:6f:c0:27:96:a8:29:c6:6f:92:73:1b:
                    fb:ea:3c:8f:7d:af:ae:87:48:23:a1:62:8f:4a:03:
                    09:cb:4a:60:c3:da:da:15:11:51:bf:9a:fb:bf:7b:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:E0:20:09:EC:E1:D0:20:4E:1E:17:33:BC:E5:52:DF:15:ED:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f08ba41-ec98-3c0d-bba8-7190ec96b1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:89:b9:ef:65:12:bf:01:d9:f7:36:ae:03:0b:e8:87:a0:
         b0:8a:c3:84:1b:62:11:3c:48:de:78:34:c7:f2:3f:a1:1c:36:
         9f:88:36:96:83:07:a0:7a:00:7d:00:78:27:54:64:58:1a:56:
         f9:b6:83:8a:c9:23:c1:90:cc:59:ac:b1:a8:ed:10:35:29:33:
         4c:1d:42:f0:fb:d6:82:75:78:02:8f:b0:55:49:d6:73:e9:5c:
         4d:05:d9:e6:47:de:11:c7:a4:58:b2:e9:4e:5c:e5:36:ac:a0:
         43:ac:a4:a2:68:22:d8:ef:79:bb:01:91:2d:97:e0:03:81:34:
         bb:0d:6b:c4:93:d8:ac:57:4b:98:79:b7:59:01:c6:4d:4c:60:
         9f:32:bb:c7:80:9f:8c:6a:04:74:9a:20:ac:63:02:ed:44:d6:
         fb:bc:80:16:0b:72:8c:a2:af:41:0c:fa:a4:e1:06:a4:75:be:
         97:32:8c:80:74:58:31:d5:ff:66:91:15:f4:46:05:6e:d2:9d:
         14:e0:53:da:a8:e0:ff:05:77:0d:95:9c:a9:8f:d4:c8:2c:64:
         2f:76:60:de:ba:da:7f:f4:f7:bc:4f:d2:61:b1:67:d4:ea:a9:
         2c:7f:f2:54:af:7e:aa:6d:d0:70:25:4e:70:97:9a:04:a2:2c:
         d6:07:63:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz2+4CaCRduw+PjxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDIyNDAyMzAxNFoXDTI2MDUyNTAxMzAxNFowLzEtMCsGA1UEAxMk
YjlhZmU4MTktYjEyMy00ZmFmLThiOWMtZWYyMWZhYzM4ZDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nYmexy5+x9LW36RlEkz+E2oVRHJsGLBUbJV
Ta23O4CfAzY95X9b0YFluNQtX8p7aZ6YekqEwfhTtOqHxNrjE+7yTPaLemmNgXLt
baz+P1YUOQZ84HGZefpcOjdVI4X5+Nbg1tEaiQvkEtzk79CWN5tw3cBzMp8YHf2x
4Q9MAWCJHr8yNa+u7IpbsOIKsq5SQ5fc1rmUsg6bdLWmpXnxmg6nnQ3SL5D3dQ/v
7lEJEKeMGZFyFxLI2yH3sHog73oGL5KfSEjVbDQGHJ4unuwnKg9oOQ+Gb8Anlqgp
xm+Scxv76jyPfa+uh0gjoWKPSgMJy0pgw9raFRFRv5r7v3tsYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgP4CAJ7OHQIE4eFzO85VLfFe0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGYwOGJhNDEtZWM5OC0z
YzBkLWJiYTgtNzE5MGVjOTZiMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQROyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE84ibnvZRK/Adn3Nq4DC+iHoLCKw4QbYhE8SN54NMfyP6EcNp+INpaD
B6B6AH0AeCdUZFgaVvm2g4rJI8GQzFmssajtEDUpM0wdQvD71oJ1eAKPsFVJ1nPp
XE0F2eZH3hHHpFiy6U5c5TasoEOspKJoItjvebsBkS2X4AOBNLsNa8ST2KxXS5h5
t1kBxk1MYJ8yu8eAn4xqBHSaIKxjAu1E1vu8gBYLcoyir0EM+qThBqR1vpcyjIB0
WDHV/2aRFfRGBW7SnRTgU9qo4P8Fdw2VnKmP1MgsZC92YN662n/097xP0mGxZ9Tq
qSx/8lSvfqpt0HAlTnCXmgSiLNYHY7s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:53 2026 by rpki-client