Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa
File:                     c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa (raw, json)
Hash identifier:          mZavsTlYc2lzcTvy8g63LQgMBF3SLQDv+/RL9lBUTq0=
Subject key identifier:   59:AA:9C:44:63:8D:4A:4A:34:EF:0D:2D:D1:FA:C9:FD:77:39:8A:8C
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584CD2A1E23DA5C4D6BC1E021380
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     14639
IP address blocks:        198.89.160.0/20 maxlen: 24
                          198.89.176.0/21 maxlen: 24
                          198.89.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:e2:3d:a5:c4:d6:bc:1e:02:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=0dd7a964-ef82-4d00-8b82-b89d6dd938c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:42:09:8e:c9:d0:3d:a2:57:13:01:89:ca:
                    f3:1b:55:85:0f:c3:2e:1c:8c:45:74:5c:de:5b:cb:
                    62:cd:0d:8e:4d:28:8e:f8:ee:ca:cf:92:01:18:86:
                    ba:9f:5f:c7:a7:97:8e:92:f4:08:8a:4f:ed:b6:3d:
                    de:b1:58:e1:77:64:01:38:c5:1e:83:9e:23:6e:fd:
                    1a:82:40:ac:29:7d:d1:8f:46:a8:c8:7a:03:57:cf:
                    26:0b:8b:30:08:ed:c6:35:2c:9e:df:c7:d8:57:fc:
                    2a:a5:44:51:49:90:00:d6:88:10:82:20:97:20:9a:
                    1c:50:60:6a:34:09:1e:cf:ef:a4:d4:79:c0:64:86:
                    24:d8:8f:c4:98:5c:58:af:46:e1:fa:27:a8:29:b7:
                    b4:ae:13:27:4e:be:32:79:ad:76:11:f0:37:e1:05:
                    a8:de:eb:3b:0f:ad:ad:5a:4f:6c:6a:37:db:41:2a:
                    03:06:0d:7a:90:91:68:6a:53:34:b9:86:8e:2d:33:
                    c4:8e:d7:bd:22:36:00:8d:93:98:0a:d6:35:55:a9:
                    11:71:63:34:b2:a3:f3:80:f5:47:97:14:13:29:e7:
                    d8:0a:3d:30:5a:e6:44:13:c9:dc:6f:f4:80:b5:06:
                    3f:5b:5e:9f:40:69:be:28:e3:55:c4:cd:7c:89:90:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AA:9C:44:63:8D:4A:4A:34:EF:0D:2D:D1:FA:C9:FD:77:39:8A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.160.0-198.89.185.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:da:08:17:af:6a:4e:4c:8c:72:bc:ef:73:4b:78:80:43:c7:
         f6:de:8b:3d:5f:79:ee:e1:8f:82:a6:fa:99:11:96:a7:b7:ff:
         12:77:56:11:44:42:56:cc:bd:23:4f:41:39:88:47:96:fd:ac:
         41:b8:6b:11:c3:69:56:d1:79:91:38:20:80:88:f7:af:c5:d0:
         06:74:cf:44:73:d2:fd:8d:b7:08:96:2b:96:34:99:63:8d:85:
         45:33:f4:23:71:cd:44:56:9a:a7:77:57:2a:6a:77:86:a8:18:
         a1:12:07:90:61:cc:e4:99:c6:87:e1:c0:35:00:bb:c4:9c:32:
         65:f7:f9:6f:8e:8a:a9:e1:46:7b:47:8e:87:61:3f:6f:fe:1b:
         64:10:a9:6a:b9:1d:69:5c:59:3d:ac:ae:4f:6e:07:7f:dd:dc:
         15:4e:27:e9:09:00:e6:b4:cb:37:f7:f8:43:ba:fb:c8:43:14:
         aa:dd:23:15:a9:86:eb:f6:ed:31:f4:44:de:83:03:95:18:1e:
         25:f8:0a:bd:c2:56:23:92:8a:db:41:bc:fd:78:f2:6c:59:21:
         68:60:ce:c3:04:c5:b8:21:74:58:8a:d9:0b:39:bd:d9:36:2b:
         32:f0:c5:b7:8c:43:b4:b2:d3:d8:01:a3:2a:36:c2:8e:30:4b:
         74:85:e8:79
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEzSoeI9pcTWvB4CE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh
ODU0MB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
MGRkN2E5NjQtZWY4Mi00ZDAwLThiODItYjg5ZDZkZDkzOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjThCCY7J0D2iVxMBicrzG1WFD8MuHIxFdFze
W8tizQ2OTSiO+O7Kz5IBGIa6n1/Hp5eOkvQIik/ttj3esVjhd2QBOMUeg54jbv0a
gkCsKX3Rj0aoyHoDV88mC4swCO3GNSye38fYV/wqpURRSZAA1ogQgiCXIJocUGBq
NAkez++k1HnAZIYk2I/EmFxYr0bh+ieoKbe0rhMnTr4yea12EfA34QWo3us7D62t
Wk9sajfbQSoDBg16kJFoalM0uYaOLTPEjte9IjYAjZOYCtY1VakRcWM0sqPzgPVH
lxQTKefYCj0wWuZEE8ncb/SAtQY/W16fQGm+KONVxM18iZDv6QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFFmqnERjjUpKNO8NLdH6yf13OYqMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx
ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvYzYxM2RiZGEtNTY1MS0z
YzM3LTgxZmItYzUyZmZhNzdhMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj
YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0
YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk
ZjlhNGE4NTQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXGWaAD
BAHGWbgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAVNoIF69qTkyMcrzvc0t4gEPH9t6LPV957uGPgqb6mRGW
p7f/EndWEURCVsy9I09BOYhHlv2sQbhrEcNpVtF5kTgggIj3r8XQBnTPRHPS/Y23
CJYrljSZY42FRTP0I3HNRFaap3dXKmp3hqgYoRIHkGHM5JnGh+HANQC7xJwyZff5
b46KqeFGe0eOh2E/b/4bZBCparkdaVxZPayuT24Hf93cFU4n6QkA5rTLN/f4Q7r7
yEMUqt0jFamG6/btMfRE3oMDlRgeJfgKvcJWI5KK20G8/XjybFkhaGDOwwTFuCF0
WIrZCzm92TYrMvDFt4xDtLLT2AGjKjbCjjBLdIXoeQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:33 2026 by rpki-client