Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f610859-2de3-3d76-99d4-d3cc0be4546d.roa
File:                     0f610859-2de3-3d76-99d4-d3cc0be4546d.roa (raw, json)
Hash identifier:          U3PN/UvZrtKWgVQ4rBJ3KcWOTp+BWBK1glsmNVSPAmo=
Subject key identifier:   DD:3A:62:89:56:19:6B:AD:18:DD:50:E9:91:C8:52:9B:61:67:BB:EE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CEBBB130AE835B025CF00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f610859-2de3-3d76-99d4-d3cc0be4546d.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        199.250.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:eb:bb:13:0a:e8:35:b0:25:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=7a159fe3-94cb-4b2d-a9a4-4f35cfa52b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:48:bb:f8:12:7b:c9:26:bd:0c:d1:d8:5a:
                    fc:8a:f7:2a:b4:df:44:dd:5d:64:14:39:55:45:85:
                    29:83:36:2e:fb:16:fa:90:60:54:44:f2:c4:54:7c:
                    d8:f1:cf:4e:7c:2b:43:34:fa:da:67:39:1e:7e:cf:
                    8b:ee:fa:28:a8:89:8e:fc:af:77:be:7b:19:b0:4e:
                    fc:24:63:c9:44:01:72:b5:3e:25:29:e7:d7:26:71:
                    5c:60:c0:5c:70:ae:58:8f:97:bb:5c:08:05:1f:33:
                    51:4c:e2:bf:4c:ed:33:fc:b7:e2:8f:7b:a3:55:74:
                    80:b1:d2:21:4d:5b:9a:51:26:ce:1a:b1:35:42:fc:
                    75:db:ef:ba:3d:15:86:29:ae:1d:ff:3f:7b:8c:e6:
                    1e:e0:da:b9:ac:fe:d2:66:b4:a1:db:f3:cf:e9:52:
                    a7:82:76:87:27:e4:0f:8e:e9:aa:ce:df:51:42:7b:
                    8d:97:66:d4:35:28:39:c6:14:99:4d:5d:e3:a5:e4:
                    8b:22:7e:08:15:56:4b:4c:29:6b:1e:d9:c5:2f:c0:
                    70:be:e6:6d:b5:22:c5:ad:bb:5b:8c:13:d5:24:fb:
                    03:76:29:fd:f8:18:bb:35:5b:34:05:92:38:67:48:
                    40:9e:89:3d:58:f4:e7:fa:20:85:ca:c6:b2:f3:a4:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:62:89:56:19:6B:AD:18:DD:50:E9:91:C8:52:9B:61:67:BB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f610859-2de3-3d76-99d4-d3cc0be4546d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:a3:42:31:84:24:e5:3b:0c:d0:2c:47:0b:ee:dc:d4:2d:
         7b:b3:fc:f2:97:8b:c5:bd:07:f5:0d:96:36:e3:0d:49:37:69:
         76:dc:a7:3a:62:41:b5:ac:14:e4:2c:19:fc:5a:ca:b8:f6:20:
         a5:57:19:df:e5:5b:99:64:34:da:b9:19:a3:c8:23:ee:9b:a5:
         a9:22:2b:25:15:82:27:aa:51:84:a4:75:9e:29:ed:3b:8b:43:
         eb:01:a0:47:78:b4:30:94:24:97:47:50:af:3c:d1:87:a4:14:
         1a:e1:6d:e0:48:51:f6:06:15:8a:c0:f5:2b:a3:b7:a4:65:33:
         9e:5f:6a:96:5e:34:c9:a1:fd:a3:b7:80:e5:a5:90:29:36:c5:
         51:1c:7c:19:90:4c:6d:9b:80:3f:a9:fe:79:f5:a2:9d:38:73:
         ae:4b:a8:3b:db:f9:a3:a2:d5:3e:6a:15:a3:64:3a:5d:2c:b4:
         3f:4b:76:54:fb:45:d2:2c:0a:7c:47:59:65:8c:39:76:a8:eb:
         05:84:d9:7e:df:bf:17:d0:1a:27:32:f8:67:14:e8:60:a5:6e:
         9a:9a:00:d8:fc:e4:79:34:cb:28:3a:f9:1a:70:62:a8:aa:d7:
         4c:99:9f:cd:44:cc:de:6f:32:1e:a2:cb:dd:37:fc:c0:2e:1e:
         7e:7b:e4:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXOu7EwroNbAlzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
N2ExNTlmZTMtOTRjYi00YjJkLWE5YTQtNGYzNWNmYTUyYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqlIu/gSe8kmvQzR2Fr8ivcqtN9E3V1kFDlV
RYUpgzYu+xb6kGBURPLEVHzY8c9OfCtDNPraZzkefs+L7vooqImO/K93vnsZsE78
JGPJRAFytT4lKefXJnFcYMBccK5Yj5e7XAgFHzNRTOK/TO0z/Lfij3ujVXSAsdIh
TVuaUSbOGrE1Qvx12++6PRWGKa4d/z97jOYe4Nq5rP7SZrSh2/PP6VKngnaHJ+QP
jumqzt9RQnuNl2bUNSg5xhSZTV3jpeSLIn4IFVZLTClrHtnFL8BwvuZttSLFrbtb
jBPVJPsDdin9+Bi7NVs0BZI4Z0hAnok9WPTn+iCFysay86R2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN06YolWGWutGN1Q6ZHIUpthZ7vuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGY2MTA4NTktMmRlMy0z
ZDc2LTk5ZDQtZDNjYzBiZTQ1NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqXo0IxhCTlOwzQLEcL7tzULXuz/PKXi8W9B/UNljbjDUk3aXbcpzpi
QbWsFOQsGfxayrj2IKVXGd/lW5lkNNq5GaPII+6bpakiKyUVgieqUYSkdZ4p7TuL
Q+sBoEd4tDCUJJdHUK880YekFBrhbeBIUfYGFYrA9Sujt6RlM55fapZeNMmh/aO3
gOWlkCk2xVEcfBmQTG2bgD+p/nn1op04c65LqDvb+aOi1T5qFaNkOl0stD9LdlT7
RdIsCnxHWWWMOXao6wWE2X7fvxfQGicy+GcU6GClbpqaANj85Hk0yyg6+RpwYqiq
10yZn81EzN5vMh6iy903/MAuHn575Fs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:59 2026 by rpki-client