Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa
File:                     ad3baf08-80ff-383c-bc9e-4c7090cee332.roa (raw, json)
Hash identifier:          oKuUeD2s+blFDJYrwozcUXTsj5mwaD0VnhzNkv03peo=
Subject key identifier:   43:E3:DA:D9:F1:AE:5F:C0:C7:02:C0:A2:C4:55:88:0B:C8:E0:B8:47
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584CC611E6DC4350BCDD748B0C40
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     2495
IP address blocks:        198.248.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:e6:dc:43:50:bc:dd:74:8b:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=e7b2882c-806d-4b56-9bdb-a976402758a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:2f:6a:27:32:64:56:9c:ec:9b:3e:cb:6a:
                    f3:7f:52:a9:d8:4e:02:bb:39:5b:0a:cc:4e:36:1b:
                    f7:ee:df:b9:51:3d:03:d2:f7:ee:40:1a:ac:e0:6e:
                    16:44:04:a5:77:32:8d:aa:58:6d:70:dc:55:47:8a:
                    12:ba:b9:34:c7:c9:89:9f:7a:58:9b:92:f0:c1:c0:
                    de:77:09:4e:48:11:ca:9d:83:00:ea:7a:d8:79:20:
                    46:02:d6:46:6d:5a:7a:1c:66:ae:e4:25:22:f0:dc:
                    74:fd:74:98:a4:cd:2a:23:c4:31:63:53:b1:91:dd:
                    1c:c0:d0:a3:30:74:a4:c3:fc:c5:05:93:04:4d:4a:
                    e1:9a:d4:09:06:6d:9b:6d:e4:fe:b7:86:e5:b4:e4:
                    f3:84:92:14:a4:61:51:91:f8:98:f5:8f:f8:0a:51:
                    c6:e1:9b:c2:31:ca:03:d6:34:a0:f3:f7:56:ac:3d:
                    52:b8:ac:e0:f7:28:9c:22:82:16:be:28:27:49:cd:
                    f6:0b:66:e0:da:41:74:f3:c7:94:d8:3e:11:8f:4e:
                    ce:e0:c9:32:37:dc:e8:1c:08:fe:00:a7:c3:b6:78:
                    b3:7e:59:8b:0b:e6:b7:70:3e:29:2d:9b:f7:c4:32:
                    80:6e:bc:8c:75:f4:9a:6c:8f:28:d8:fa:19:c1:8d:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E3:DA:D9:F1:AE:5F:C0:C7:02:C0:A2:C4:55:88:0B:C8:E0:B8:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:07:01:3f:0a:03:05:b3:67:16:87:e1:55:63:90:74:a1:69:
         cd:88:7e:0a:ed:7a:46:f2:7c:0b:56:09:93:d5:08:ec:99:ed:
         88:d6:26:d7:e5:4c:5d:1a:b1:65:35:0b:fe:cc:f3:a6:3d:b4:
         8f:8a:74:d0:37:c9:96:b4:70:12:b7:2d:2e:0e:58:aa:bf:63:
         8b:09:12:64:65:73:1e:72:76:3e:6b:44:6f:bc:3c:6c:4e:a7:
         eb:94:3c:4d:3a:5d:76:73:57:a4:ac:b3:07:ef:e3:d5:92:9f:
         7b:d5:03:f3:44:d3:58:4a:e8:fe:b2:cd:2d:ab:20:eb:d3:eb:
         9c:e8:94:4c:66:f9:54:19:3d:82:f3:19:e2:b3:70:69:35:da:
         9e:2d:de:3f:21:ff:8b:c8:74:e7:9b:2d:8f:96:8c:a5:a7:73:
         15:3f:4d:b5:be:3d:89:5c:31:bd:c6:b7:7f:9f:fe:96:53:e8:
         b8:96:ab:64:f2:2f:68:df:69:3a:0b:b5:2b:ff:a9:91:7e:34:
         b0:ed:c1:79:3b:73:3d:d0:7d:ee:17:e9:2f:e7:39:5c:99:a3:
         a9:73:d4:af:21:bc:20:b4:4d:d4:d9:c0:14:d2:fa:3d:7f:39:
         cf:9e:4d:9b:4d:b3:8d:52:6f:6f:90:1d:48:59:a5:30:8f:2c:
         4b:f3:ab:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEebcQ1C83XSLDEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZTdiMjg4MmMtODA2ZC00YjU2LTliZGItYTk3NjQwMjc1OGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYsvaicyZFac7Js+y2rzf1Kp2E4CuzlbCsxO
Nhv37t+5UT0D0vfuQBqs4G4WRASldzKNqlhtcNxVR4oSurk0x8mJn3pYm5LwwcDe
dwlOSBHKnYMA6nrYeSBGAtZGbVp6HGau5CUi8Nx0/XSYpM0qI8QxY1Oxkd0cwNCj
MHSkw/zFBZMETUrhmtQJBm2bbeT+t4bltOTzhJIUpGFRkfiY9Y/4ClHG4ZvCMcoD
1jSg8/dWrD1SuKzg9yicIoIWvignSc32C2bg2kF088eU2D4Rj07O4MkyN9zoHAj+
AKfDtnizflmLC+a3cD4pLZv3xDKAbryMdfSabI8o2PoZwY1pnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPj2tnxrl/AxwLAosRViAvI4LhHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYWQzYmFmMDgtODBmZi0z
ODNjLWJjOWUtNGM3MDkwY2VlMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEHAT8KAwWzZxaH4VVjkHShac2IfgrtekbyfAtWCZPVCOyZ7YjWJtfl
TF0asWU1C/7M86Y9tI+KdNA3yZa0cBK3LS4OWKq/Y4sJEmRlcx5ydj5rRG+8PGxO
p+uUPE06XXZzV6Ssswfv49WSn3vVA/NE01hK6P6yzS2rIOvT65zolExm+VQZPYLz
GeKzcGk12p4t3j8h/4vIdOebLY+WjKWncxU/TbW+PYlcMb3Gt3+f/pZT6LiWq2Ty
L2jfaToLtSv/qZF+NLDtwXk7cz3Qfe4X6S/nOVyZo6lz1K8hvCC0TdTZwBTS+j1/
Oc+eTZtNs41Sb2+QHUhZpTCPLEvzqwo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:06 2026 by rpki-client