Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa
File:                     8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa (raw, json)
Hash identifier:          A05RoZreFPtWPwmeNXrul43MiGxVnXRHvSJ/tetig20=
Subject key identifier:   11:25:E5:3D:20:0B:5E:8D:6A:6B:81:21:4F:45:56:0B:92:E1:0E:5F
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584CC611E730D02D806756C061F0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     2495
IP address blocks:        198.248.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:e7:30:d0:2d:80:67:56:c0:61:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=17ddc103-c524-4084-906d-75b7afb16962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:d3:df:4c:cc:29:4b:f8:b0:e6:0f:4d:f3:
                    da:2c:d3:ca:53:25:53:60:8b:c8:db:3c:be:1d:e8:
                    d1:cb:98:ae:a9:55:c6:9b:42:f8:8f:c2:78:cd:27:
                    40:15:e5:4e:d6:5f:94:9b:ce:57:73:d4:17:aa:10:
                    c3:45:73:7c:79:15:7f:e7:25:34:61:dc:6b:f0:74:
                    a0:53:53:d2:25:d8:ea:a1:0a:ca:9e:2c:8a:99:a2:
                    35:7c:9c:74:34:69:c5:fb:ca:3c:56:5d:95:c9:12:
                    54:af:df:03:5f:73:50:b0:80:05:4e:11:bd:f3:63:
                    b8:17:5c:43:ed:c2:62:bc:15:cf:05:b2:d1:2d:05:
                    f9:2b:3a:47:74:f5:d6:09:2b:3d:80:13:11:86:3d:
                    b8:5a:cd:8d:e0:6e:70:10:17:36:0b:53:85:37:ba:
                    5e:63:c6:39:89:6e:c5:ab:fc:10:25:91:6d:70:81:
                    60:dc:17:d7:53:fe:da:de:82:ec:07:d2:6c:94:90:
                    45:16:7d:28:01:f8:c9:3a:fc:ee:a4:2e:73:dd:48:
                    d5:a1:6a:c5:50:5b:9f:ca:92:c3:ac:29:bb:fd:4d:
                    31:73:ef:9d:e3:62:27:9a:82:a4:cd:f8:12:e6:5a:
                    ef:07:dc:e8:f4:b0:3c:1f:e6:7b:c6:57:6d:b9:2b:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:25:E5:3D:20:0B:5E:8D:6A:6B:81:21:4F:45:56:0B:92:E1:0E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:cc:dc:4f:e0:65:c3:9f:1e:7f:b2:2f:18:ba:15:22:3d:
         5f:70:2c:8b:8b:ea:80:a4:17:41:37:47:b1:9c:9d:92:ef:38:
         05:ad:25:29:cf:03:c4:f9:bf:b9:61:f1:03:34:01:d9:3d:af:
         dc:72:50:e7:db:88:83:7e:21:31:ae:36:ab:4a:35:8a:76:3a:
         a4:75:66:22:e2:ed:d6:f5:6b:2b:93:98:13:7f:32:91:d2:23:
         83:d4:29:b3:da:51:8a:7f:29:10:e6:b2:bd:2c:bc:d7:09:78:
         d6:b8:d0:6d:f5:1e:f9:c8:b9:54:b4:43:2a:8b:76:02:5e:a0:
         30:3f:95:a5:03:79:a8:00:42:49:8a:30:ba:4a:81:16:f3:b8:
         26:fc:6e:86:7f:87:d9:c4:e8:7a:fb:12:87:ae:95:d0:11:49:
         85:60:dc:f9:0c:a1:e2:a0:35:8d:13:64:e6:89:21:82:96:19:
         e7:87:8b:69:80:10:2f:4b:ba:54:5b:8d:2c:6e:e3:1b:1e:d9:
         9c:7f:1c:3c:45:90:6e:f2:47:a9:65:0d:5f:bd:d6:38:62:ee:
         7c:aa:35:af:18:5a:4d:18:43:94:1e:ed:3d:fa:c1:25:3b:cc:
         85:12:e4:85:17:95:54:34:a2:ac:9b:4e:66:44:97:21:91:2b:
         73:af:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:06 2026 by rpki-client