Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
File:                     7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json)
Hash identifier:          pe6jBxpFBORja5JBwx4R+0D42fQHSiA+cgmMmjBKlqM=
Subject key identifier:   87:1A:FB:CC:0C:35:B7:6D:96:3A:D7:51:E2:A3:39:DA:7D:C3:CE:AC
Certificate issuer:       /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Certificate serial:       010D0C9F4328584CCBA753A76DF38972B849D770
Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     198949
IP address blocks:        198.177.154.0/24 maxlen: 24
                          204.52.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:53:a7:6d:f3:89:72:b8:49:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=0da2027d-c45a-45f2-b2d2-33747ad6c69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:20:3a:54:6c:06:0e:9c:78:c7:0b:7f:d8:
                    8f:54:15:5b:6e:49:10:d0:24:f0:9a:59:80:ff:b4:
                    1f:47:99:72:cc:a0:cd:54:4b:74:c9:07:15:b4:8d:
                    6d:87:37:81:11:54:fe:ec:9d:4a:68:17:09:51:ff:
                    3d:d0:b1:15:72:73:e2:f3:f4:39:e9:0e:12:48:7a:
                    f5:4f:57:0d:ce:a2:6b:8a:03:bb:3e:f1:5a:77:b6:
                    4b:71:99:f1:98:99:b4:4e:ef:db:1d:3f:e2:b6:b4:
                    df:c7:f5:72:35:0c:cc:fa:24:51:3c:a9:e3:94:0c:
                    8e:14:9e:a2:8f:06:cb:88:75:e3:81:ba:d8:46:cb:
                    56:26:7a:b9:e9:b1:d9:c5:c4:26:77:57:9a:a0:cd:
                    c6:fc:4c:26:c9:22:7e:2d:6e:f8:65:c6:09:5d:80:
                    04:02:ee:0d:8a:c9:f9:32:07:e4:e3:7a:f3:06:84:
                    bf:a7:f0:fa:a1:fb:a9:02:f3:3a:2d:5c:79:ca:45:
                    a9:a7:4d:74:8c:61:1b:b9:25:3a:66:52:fa:21:90:
                    cb:16:af:3c:44:9e:f7:37:81:56:ed:dc:df:07:04:
                    f3:76:ec:51:c4:b5:59:49:01:17:5d:ad:a2:1c:10:
                    bc:f4:31:dd:3b:48:c4:df:89:fd:20:d9:32:13:73:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:FB:CC:0C:35:B7:6D:96:3A:D7:51:E2:A3:39:DA:7D:C3:CE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl

            X509v3 Authority Key Identifier:
                keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.154.0/24
                  204.52.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:35:80:23:e9:38:a1:32:43:01:0e:80:c5:02:e5:06:ca:d1:
         47:6e:ee:0c:43:22:c1:7d:90:1d:7d:52:67:ab:f0:3a:49:fc:
         19:59:fb:3a:80:46:62:1d:d6:9f:cd:c3:35:21:ef:95:7e:0a:
         8a:61:d0:ad:e1:fd:67:87:d6:af:44:b6:a4:a9:0c:94:bb:6f:
         d6:6a:ab:54:fd:6b:df:f3:29:8d:aa:5f:c1:3d:a8:3c:4a:3b:
         1c:34:70:57:54:93:5c:0b:5b:9a:3a:70:5e:85:1a:12:f4:42:
         ff:98:a6:4b:2d:94:5d:36:36:be:ad:f0:19:7e:9b:1f:39:18:
         85:ab:3b:2b:86:ba:98:38:be:8a:9c:44:00:a1:e8:f7:6d:05:
         5c:91:2c:cc:80:00:e1:d0:57:97:03:e4:d1:b5:3c:7d:b4:42:
         9b:98:c1:75:5d:85:99:44:75:a9:9a:c8:d5:06:0f:dd:ea:84:
         e4:c8:75:9a:23:4c:98:cf:84:4a:40:15:a2:f2:64:26:b1:72:
         7a:9e:52:1d:c4:4c:1f:e0:d0:d4:73:35:63:b4:94:f9:73:c7:
         05:26:0c:ae:88:a9:89:07:5f:b4:d6:de:10:c9:42:fd:01:d0:
         4b:31:36:41:0b:c8:6f:1a:41:17:f9:37:76:cd:d2:2a:55:70:
         00:6f:f5:f0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzLp1OnbfOJcrhJ13AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdj
MmQxMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
MGRhMjAyN2QtYzQ1YS00NWYyLWIyZDItMzM3NDdhZDZjNjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz0gOlRsBg6ceMcLf9iPVBVbbkkQ0CTwmlmA
/7QfR5lyzKDNVEt0yQcVtI1thzeBEVT+7J1KaBcJUf890LEVcnPi8/Q56Q4SSHr1
T1cNzqJrigO7PvFad7ZLcZnxmJm0Tu/bHT/itrTfx/VyNQzM+iRRPKnjlAyOFJ6i
jwbLiHXjgbrYRstWJnq56bHZxcQmd1eaoM3G/EwmySJ+LW74ZcYJXYAEAu4Nisn5
Mgfk43rzBoS/p/D6ofupAvM6LVx5ykWpp010jGEbuSU6ZlL6IZDLFq88RJ73N4FW
7dzfBwTzduxRxLVZSQEXXa2iHBC89DHdO0jE34n9INkyE3PlXwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIca+8wMNbdtljrXUeKjOdp9w86sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Iw
YTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvNzUzOTQ1NmEtMWVkZS0z
MGRiLWE1Y2YtZmUxNjA0MDJmODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNiMGE1OTctZjZlYi00Yzk3LWFh
NmMtMzZkMDRiZDdjMmQxL2RjYjBhNTk3LWY2ZWItNGM5Ny1hYTZjLTM2ZDA0YmQ3
YzJkMS5jcmwwHwYDVR0jBBgwFoAUCk3RL4DlL9n5CrZdj//AsSxmWLUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQw
NGJkN2MyZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxrGaAwQA
zDT8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJg1gCPpOKEyQwEOgMUC5QbK0Udu7gxDIsF9kB19Umer8DpJ
/BlZ+zqARmId1p/NwzUh75V+Coph0K3h/WeH1q9EtqSpDJS7b9Zqq1T9a9/zKY2q
X8E9qDxKOxw0cFdUk1wLW5o6cF6FGhL0Qv+YpkstlF02Nr6t8Bl+mx85GIWrOyuG
upg4voqcRACh6PdtBVyRLMyAAOHQV5cD5NG1PH20QpuYwXVdhZlEdamayNUGD93q
hOTIdZojTJjPhEpAFaLyZCaxcnqeUh3ETB/g0NRzNWO0lPlzxwUmDK6IqYkHX7TW
3hDJQv0B0EsxNkELyG8aQRf5N3bN0ipVcABv9fA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:45 2026 by rpki-client