Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa
File:                     ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa (raw, json)
Hash identifier:          wEbFA7TO7yDgteymoXtl9w8i9J5k589tK8/ch+datgI=
Subject key identifier:   B5:55:29:02:AB:C1:0D:CD:B2:5C:78:A9:98:1B:19:64:A6:31:91:99
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584CC611ED734A475474FDB48D00
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     2495
IP address blocks:        198.248.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ed:73:4a:47:54:74:fd:b4:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=4f7bc7d7-62e3-4fba-ade8-7ccfe7e309f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:74:73:ae:c6:ae:eb:98:2d:3e:53:0f:e9:
                    49:23:be:34:3a:46:a2:7e:8e:4d:cf:39:e5:8e:8c:
                    ec:19:8c:01:e7:21:f2:85:36:67:f0:41:b1:ee:6e:
                    17:67:e7:d7:3e:70:e1:c1:52:b3:5d:c4:1b:43:8d:
                    c6:ce:12:9f:14:b0:39:d1:0f:4d:d0:b6:77:b3:98:
                    60:cc:fc:cc:08:da:00:2e:05:42:6c:e5:94:0c:2b:
                    54:62:27:26:2b:76:11:30:90:a9:df:f5:75:f5:ab:
                    54:97:7e:b1:03:6b:ef:ae:98:8c:c7:c6:e8:40:eb:
                    16:f8:1d:d7:80:c2:59:a9:08:96:36:52:0c:a4:37:
                    6a:d7:18:fa:e7:cb:1c:4f:ee:c5:23:c1:d3:e5:c7:
                    fe:34:6f:d5:c9:e9:c9:e2:7c:8c:9d:36:57:2a:76:
                    14:d3:6c:dd:1e:86:9f:06:b9:b3:01:92:ca:ae:14:
                    3f:dd:96:01:e0:bb:c2:16:28:0b:4d:07:b5:1d:b9:
                    f2:48:12:f8:a8:d9:2b:28:3d:ac:f6:14:25:1f:ec:
                    4b:c3:4e:31:9a:af:56:a1:5e:ed:fc:e7:56:50:d8:
                    2e:59:9a:73:0d:cd:df:36:aa:9e:ce:20:87:f4:02:
                    7c:38:4b:55:cd:fb:29:6c:e9:d3:49:8f:9a:59:2c:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:29:02:AB:C1:0D:CD:B2:5C:78:A9:98:1B:19:64:A6:31:91:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:5c:10:f4:40:df:f8:6a:25:31:9c:f0:72:58:46:4a:5f:48:
         e4:6d:56:f9:fd:47:ea:02:39:75:94:a1:e2:30:35:2f:d1:10:
         c2:9b:6d:2a:14:c2:f9:c1:c1:66:f9:c1:e3:a4:4e:35:42:04:
         cc:c9:71:5b:69:a4:d0:10:04:35:44:88:5f:90:b8:f2:bf:20:
         2f:b4:e5:5c:90:1d:b3:e7:5b:72:49:7b:3a:d9:8c:6f:81:f5:
         80:5e:ff:27:1f:ca:6a:ae:ae:65:5b:ab:21:e4:96:88:ad:1b:
         cc:f9:8c:fc:85:99:4d:fe:f8:06:c8:56:49:25:60:6b:cb:89:
         1d:83:15:7a:8e:e5:98:a6:0c:c7:21:f6:69:37:ee:68:2e:73:
         76:81:7a:e7:d3:7c:fb:ca:c5:90:73:0c:2b:9e:61:33:f8:9f:
         4c:7d:5f:74:31:de:c0:0e:91:bb:4a:95:c0:3f:17:ce:5d:ad:
         7f:9c:a1:88:f0:50:ef:24:7d:81:be:06:5d:c7:4d:87:99:bb:
         f8:07:67:2c:fd:fa:39:c2:90:bc:9e:e9:06:1d:c2:57:4f:d1:
         75:56:7c:3a:f6:21:34:c4:33:69:56:0a:9f:06:5a:ec:1e:21:
         0c:2d:dc:e6:92:33:b8:de:d1:5d:4f:f9:1b:81:1a:4c:d3:d6:
         98:ea:5b:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEe1zSkdUdP20jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
NGY3YmM3ZDctNjJlMy00ZmJhLWFkZTgtN2NjZmU3ZTMwOWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg150c67GruuYLT5TD+lJI740Okaifo5Nzznl
jozsGYwB5yHyhTZn8EGx7m4XZ+fXPnDhwVKzXcQbQ43GzhKfFLA50Q9N0LZ3s5hg
zPzMCNoALgVCbOWUDCtUYicmK3YRMJCp3/V19atUl36xA2vvrpiMx8boQOsW+B3X
gMJZqQiWNlIMpDdq1xj658scT+7FI8HT5cf+NG/VyenJ4nyMnTZXKnYU02zdHoaf
BrmzAZLKrhQ/3ZYB4LvCFigLTQe1HbnySBL4qNkrKD2s9hQlH+xLw04xmq9WoV7t
/OdWUNguWZpzDc3fNqqeziCH9AJ8OEtVzfspbOnTSY+aWSzZVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVVKQKrwQ3Nslx4qZgbGWSmMZGZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZmYzMzg3MDItMWM5Yy0z
N2E0LTk5YzUtYzJlZmJmMWM4MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvh8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALpcEPRA3/hqJTGc8HJYRkpfSORtVvn9R+oCOXWUoeIwNS/REMKbbSoU
wvnBwWb5weOkTjVCBMzJcVtppNAQBDVEiF+QuPK/IC+05VyQHbPnW3JJezrZjG+B
9YBe/ycfymqurmVbqyHkloitG8z5jPyFmU3++AbIVkklYGvLiR2DFXqO5ZimDMch
9mk37mguc3aBeufTfPvKxZBzDCueYTP4n0x9X3Qx3sAOkbtKlcA/F85drX+coYjw
UO8kfYG+Bl3HTYeZu/gHZyz9+jnCkLye6QYdwldP0XVWfDr2ITTEM2lWCp8GWuwe
IQwt3OaSM7je0V1P+RuBGkzT1pjqWyA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:07 2026 by rpki-client