Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e4682f76-b404-38a2-929a-877b707122c0.roa
File:                     e4682f76-b404-38a2-929a-877b707122c0.roa (raw, json)
Hash identifier:          OCPRdUQ6Wlf/yyKrdCX54pKRW2psXGv34zob5e/A69E=
Subject key identifier:   F9:29:4F:86:F8:89:40:64:90:D3:F9:8C:8B:7B:3B:FA:8C:B3:52:68
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584CBF17543F893F25DF69DD40B8
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e4682f76-b404-38a2-929a-877b707122c0.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     22616
IP address blocks:        198.14.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:54:3f:89:3f:25:df:69:dd:40:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=e0657a93-f679-4b71-909d-d4b68dda5ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:94:66:83:c2:95:11:2d:f0:6b:a9:23:b3:
                    5e:56:2f:46:f4:2a:a1:47:62:d9:e6:ae:f2:4f:49:
                    86:81:54:06:f3:b5:d9:76:8c:41:0a:b0:b1:36:74:
                    71:32:33:f1:c0:ed:d0:7b:d1:97:54:cc:d8:51:8e:
                    1e:9c:73:b5:39:78:cd:d8:60:65:56:c3:1a:a9:d5:
                    f0:55:e2:6e:d7:db:2d:d5:18:aa:eb:b3:7a:d2:86:
                    7b:ab:06:92:da:c3:71:da:56:11:11:35:2f:8a:9d:
                    eb:d0:a0:2c:27:e0:7a:35:52:8b:2a:3e:c4:4a:59:
                    60:70:2c:16:b0:d5:26:b6:9a:f8:79:79:a5:27:b2:
                    16:9a:8c:42:24:10:2e:f3:e3:5d:01:78:e2:97:28:
                    5c:0e:3d:db:04:8b:28:21:dd:6a:e3:68:c0:f2:2e:
                    c2:a5:f5:b6:eb:51:72:e1:fb:33:fc:ec:aa:6d:8c:
                    70:46:45:78:1d:44:fd:50:32:9a:02:2d:29:b1:6d:
                    0a:bc:69:82:61:fa:65:02:2d:44:14:a1:13:88:60:
                    ea:3f:2c:bc:9d:bc:9e:32:fe:00:1f:60:31:67:15:
                    bf:c9:cc:d0:18:49:a3:b8:04:ed:15:33:39:c6:82:
                    84:47:38:9f:af:b6:a5:26:f1:6a:42:3f:cf:98:ba:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:4F:86:F8:89:40:64:90:D3:F9:8C:8B:7B:3B:FA:8C:B3:52:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e4682f76-b404-38a2-929a-877b707122c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:59:22:7f:c9:06:e5:0f:aa:7e:c2:a0:28:01:ab:44:fd:
         ad:52:6d:11:f3:de:48:1d:44:28:ca:45:4b:80:aa:8a:f6:13:
         69:8a:af:bc:1c:d4:3d:61:4e:f3:3c:1d:19:68:b3:40:c7:57:
         94:d4:2b:90:92:a0:7e:fe:b9:51:87:58:e5:e7:01:cc:41:23:
         28:ea:23:3d:4b:f9:47:6c:d9:22:97:20:d9:b5:df:0a:a9:87:
         52:19:30:81:8f:dc:ff:7c:3e:c0:5e:55:c2:cc:91:89:92:05:
         1e:00:6c:3a:c1:3b:7e:b4:c8:26:1d:ea:db:0f:09:b1:cb:91:
         8a:d3:bb:61:6e:29:0c:aa:79:84:3e:d6:eb:4d:67:1e:4e:35:
         df:ad:ba:6f:84:34:13:46:c9:cb:05:30:c1:df:3e:1e:64:e0:
         9c:29:7a:38:46:d7:7b:d2:b9:8d:86:ae:55:c4:3e:ad:a8:4e:
         5b:3c:ba:7d:fd:d2:b2:71:1e:2f:0a:3f:b7:6e:e6:da:07:5d:
         f7:72:17:e1:80:40:a3:87:b1:7f:65:11:ae:d5:c2:cf:11:6b:
         35:12:f5:fc:3d:04:3a:af:61:be:27:c9:34:b9:59:64:c2:19:
         30:37:31:c0:17:ea:5f:dc:c0:54:9c:8a:e1:59:fc:44:f2:1a:
         6f:25:2e:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1Q/iT8l32ndQLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZTA2NTdhOTMtZjY3OS00YjcxLTkwOWQtZDRiNjhkZGE1ZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp+UZoPClREt8GupI7NeVi9G9CqhR2LZ5q7y
T0mGgVQG87XZdoxBCrCxNnRxMjPxwO3Qe9GXVMzYUY4enHO1OXjN2GBlVsMaqdXw
VeJu19st1Riq67N60oZ7qwaS2sNx2lYRETUvip3r0KAsJ+B6NVKLKj7ESllgcCwW
sNUmtpr4eXmlJ7IWmoxCJBAu8+NdAXjilyhcDj3bBIsoId1q42jA8i7CpfW261Fy
4fsz/OyqbYxwRkV4HUT9UDKaAi0psW0KvGmCYfplAi1EFKETiGDqPyy8nbyeMv4A
H2AxZxW/yczQGEmjuATtFTM5xoKERzifr7alJvFqQj/PmLoZqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkpT4b4iUBkkNP5jIt7O/qMs1JoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTQ2ODJmNzYtYjQwNC0z
OGEyLTkyOWEtODc3YjcwNzEyMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJiWSJ/yQblD6p+wqAoAatE/a1SbRHz3kgdRCjKRUuAqor2E2mKr7wc
1D1hTvM8HRlos0DHV5TUK5CSoH7+uVGHWOXnAcxBIyjqIz1L+Uds2SKXINm13wqp
h1IZMIGP3P98PsBeVcLMkYmSBR4AbDrBO360yCYd6tsPCbHLkYrTu2FuKQyqeYQ+
1utNZx5ONd+tum+ENBNGycsFMMHfPh5k4JwpejhG13vSuY2GrlXEPq2oTls8un39
0rJxHi8KP7du5toHXfdyF+GAQKOHsX9lEa7Vws8RazUS9fw9BDqvYb4nyTS5WWTC
GTA3McAX6l/cwFSciuFZ/ETyGm8lLoI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:51 2026 by rpki-client