Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa
File:                     be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (raw, json)
Hash identifier:          8UagXMmo4Rqkttzi4j3ENEN8YToyQL2UIYiNmkXWXu4=
Subject key identifier:   51:BB:D1:89:76:8E:96:7E:73:7B:21:9A:E9:95:FF:76:29:22:67:38
Certificate issuer:       /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial:       010D0C9F4328584CEFF242D24407CF64EC2D8EA8
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     14041
IP address blocks:        198.59.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:42:d2:44:07:cf:64:ec:2d:8e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=1c9c7bff-9144-46f2-a985-6166e1dcaf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:a1:5a:7d:e5:a7:c1:75:b1:de:36:d1:08:
                    fa:75:a6:f9:90:88:1a:ca:5d:4c:b2:45:26:71:d1:
                    f5:dd:73:ef:f3:e7:11:5e:45:09:f6:75:d1:ca:01:
                    fd:61:96:68:54:70:08:0b:9a:4f:1b:c9:88:b2:25:
                    5f:64:e7:2e:05:d9:19:a3:bd:4d:58:77:55:a8:cc:
                    48:55:4b:a6:a9:fa:d6:2d:cf:dc:a0:26:25:9a:2d:
                    f8:95:f5:05:8f:dd:6c:f8:ca:49:cb:c7:13:ca:a7:
                    fb:21:6a:cc:6b:c2:10:7b:68:57:19:89:e4:cd:24:
                    a5:a6:ce:71:c9:ed:0d:89:20:f6:07:d6:50:84:4e:
                    c8:de:4c:f4:1b:51:27:f3:41:33:ef:a2:86:5a:9f:
                    d4:22:51:58:29:75:ca:c8:25:81:62:5f:79:5a:fe:
                    5b:3b:be:65:60:57:a2:b3:f8:d1:a8:7f:89:d6:4d:
                    72:3a:c6:33:c5:b8:1f:1e:ae:cc:6e:2a:1b:bd:3a:
                    2b:f5:36:5d:f2:d3:38:e1:f2:b9:11:59:da:30:e6:
                    ca:6d:06:d4:6c:9c:16:d3:34:1b:f4:1a:9f:12:9e:
                    5b:fd:79:7b:32:f5:ab:8a:e5:f0:29:84:18:94:fa:
                    61:ac:f3:2e:e9:b9:3b:9d:90:f8:15:d5:5e:13:3b:
                    9c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:D1:89:76:8E:96:7E:73:7B:21:9A:E9:95:FF:76:29:22:67:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl

            X509v3 Authority Key Identifier:
                keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:47:fc:30:cf:d4:5b:6f:12:a4:d6:fe:70:a9:55:9a:48:ff:
         ab:bc:d1:c6:db:d6:3e:5c:17:85:50:c4:81:a4:56:97:e9:ea:
         a3:4a:5e:de:d9:d6:27:23:c8:bd:3d:cf:ee:ca:9b:e9:e3:7d:
         ad:34:8c:5a:fc:49:df:05:23:6d:1f:59:b4:a6:22:3a:d6:3a:
         f6:5c:05:18:9a:6b:a6:2e:18:e8:1c:c2:40:ff:4b:4b:0d:35:
         16:2b:6c:33:8f:c5:8a:05:fd:8c:71:2d:79:88:17:d9:b6:25:
         fa:6f:fc:a0:f0:29:df:3f:97:98:c2:48:9f:98:03:00:65:3e:
         d7:91:c4:c0:79:15:9b:99:b4:31:2d:96:6d:0f:eb:59:6c:67:
         17:8c:d6:b9:dd:b5:23:40:b1:75:7c:25:34:0c:65:d3:e8:1a:
         bd:4e:13:65:94:17:af:5e:3c:42:7f:69:8a:40:60:49:bd:3f:
         4f:8a:76:f3:11:f9:b9:39:11:05:fa:55:4e:ee:7f:05:78:a8:
         60:dd:1b:89:40:d5:e4:cc:27:95:e1:62:ab:42:ef:36:a1:ba:
         09:d0:77:c8:f3:07:b5:68:7b:f8:a8:4f:78:3c:fd:f0:87:d8:
         40:ee:69:bc:a1:40:7f:0f:47:81:b4:91:9e:e3:94:d1:2d:aa:
         a4:ac:70:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8kLSRAfPZOwtjqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4
N2Y1MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
MWM5YzdiZmYtOTE0NC00NmYyLWE5ODUtNjE2NmUxZGNhZjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3OhWn3lp8F1sd420Qj6dab5kIgayl1MskUm
cdH13XPv8+cRXkUJ9nXRygH9YZZoVHAIC5pPG8mIsiVfZOcuBdkZo71NWHdVqMxI
VUumqfrWLc/coCYlmi34lfUFj91s+MpJy8cTyqf7IWrMa8IQe2hXGYnkzSSlps5x
ye0NiSD2B9ZQhE7I3kz0G1En80Ez76KGWp/UIlFYKXXKyCWBYl95Wv5bO75lYFei
s/jRqH+J1k1yOsYzxbgfHq7MbiobvTor9TZd8tM44fK5EVnaMObKbQbUbJwW0zQb
9BqfEp5b/Xl7MvWriuXwKYQYlPphrPMu6bk7nZD4FdVeEzucuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFG70Yl2jpZ+c3shmumV/3YpImc4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5
NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmU0MDA1NDQtMTlmMC0z
ZWQxLWJmM2MtZTVmOWFiMzczMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl
YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl
ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5
NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxjvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFH/DDP1FtvEqTW/nCpVZpI/6u80cbb1j5cF4VQxIGkVpfp6qNKXt7Z
1icjyL09z+7Km+njfa00jFr8Sd8FI20fWbSmIjrWOvZcBRiaa6YuGOgcwkD/S0sN
NRYrbDOPxYoF/YxxLXmIF9m2Jfpv/KDwKd8/l5jCSJ+YAwBlPteRxMB5FZuZtDEt
lm0P61lsZxeM1rndtSNAsXV8JTQMZdPoGr1OE2WUF69ePEJ/aYpAYEm9P0+KdvMR
+bk5EQX6VU7ufwV4qGDdG4lA1eTMJ5XhYqtC7zahugnQd8jzB7Voe/ioT3g8/fCH
2EDuabyhQH8PR4G0kZ7jlNEtqqSscHo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:43 2026 by rpki-client