Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa
File:                     d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa (raw, json)
Hash identifier:          GIGqxk1obeT9DIRY4i0IIupg8bZczlnDzhtjC1qSSlY=
Subject key identifier:   BD:23:46:02:78:AD:02:73:0E:33:2B:BB:30:28:A1:61:F4:1E:11:D9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CE0978D21872671C0A3CE4700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     401398
IP address blocks:        198.89.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:8d:21:87:26:71:c0:a3:ce:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=263c4c48-c981-4e6a-af1b-b4154d4b8057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:a4:c7:71:37:ca:0d:c3:fd:9e:de:ac:c4:
                    2e:51:fe:7b:9c:37:f1:f9:bc:1c:5a:18:94:f2:84:
                    88:8b:e7:1d:1f:1a:89:aa:2f:f2:db:dd:16:5a:90:
                    85:04:18:fc:c3:bb:21:19:87:cd:2f:89:d4:46:5b:
                    e9:bf:b0:4e:71:e0:b6:59:64:6a:22:2e:fd:62:30:
                    d1:55:f3:ff:76:ed:c5:92:65:28:4f:29:b3:f0:03:
                    1c:d2:9c:99:11:af:91:c9:5a:22:4f:b9:17:82:96:
                    91:45:55:b0:f1:89:eb:ca:16:b5:d5:3c:09:bf:93:
                    89:8c:eb:61:c7:1f:95:80:8c:1a:22:17:3b:c8:6c:
                    69:a4:df:73:b7:65:bc:3e:b5:49:c1:e8:9f:de:84:
                    aa:29:aa:22:70:fd:a0:79:06:37:71:07:92:ef:65:
                    44:d0:24:55:8f:9d:c0:35:09:b3:bc:da:ec:7e:74:
                    c4:84:08:0a:c0:1f:49:ae:d0:33:72:a3:b8:d2:dc:
                    c1:a8:83:19:8d:31:c6:e2:7e:87:7f:92:48:20:ac:
                    e8:67:67:f9:4c:2b:a5:72:62:b4:21:6a:23:c0:94:
                    ab:9b:10:a3:d4:23:5f:17:80:c7:45:7c:e6:90:91:
                    f1:18:85:5a:f3:bf:14:f4:41:f4:f8:17:1f:be:fc:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:46:02:78:AD:02:73:0E:33:2B:BB:30:28:A1:61:F4:1E:11:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:49:11:e2:79:c2:6c:51:25:e7:84:1c:9e:55:46:25:62:
         fe:d7:74:7e:1f:d4:ab:d4:47:5b:2a:9d:b9:cd:3e:97:c9:18:
         1b:fe:10:ab:52:20:4e:9a:19:ef:aa:c9:6b:55:2a:d8:82:e4:
         8a:09:66:be:2f:0f:56:2b:7d:30:a1:80:61:80:63:13:ee:ce:
         42:45:cc:3b:3e:da:39:ce:98:92:ff:93:f3:00:84:fd:86:d9:
         61:ea:6e:cc:04:77:21:5a:7d:cf:2e:c3:93:bb:e8:09:dc:44:
         0b:e4:6c:56:c0:ef:a6:80:0a:29:3c:43:71:7a:d4:63:cb:5d:
         85:f4:67:56:bc:f2:99:d1:9a:31:03:17:2a:ec:35:fc:b4:c6:
         af:85:7e:76:ce:6a:b1:af:8d:eb:9c:be:29:4a:e0:63:96:ac:
         0f:9a:a8:47:d4:49:73:eb:cf:71:b5:3e:6f:50:0b:07:2d:da:
         85:05:2c:0a:92:4f:0e:c2:75:b5:95:72:f8:ab:33:e3:e2:9c:
         e9:b8:a0:38:3b:46:28:7d:9a:7d:da:1e:36:0a:20:69:6d:79:
         ae:94:7c:9c:4e:58:81:ed:50:a6:e0:a5:e5:04:d3:9b:2b:fb:
         f9:75:d8:0b:e5:59:d7:b4:68:6e:13:cc:65:e0:8b:38:f8:6e:
         63:1b:61:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl40hhyZxwKPORwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
MjYzYzRjNDgtYzk4MS00ZTZhLWFmMWItYjQxNTRkNGI4MDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUekx3E3yg3D/Z7erMQuUf57nDfx+bwcWhiU
8oSIi+cdHxqJqi/y290WWpCFBBj8w7shGYfNL4nURlvpv7BOceC2WWRqIi79YjDR
VfP/du3FkmUoTymz8AMc0pyZEa+RyVoiT7kXgpaRRVWw8Ynryha11TwJv5OJjOth
xx+VgIwaIhc7yGxppN9zt2W8PrVJweif3oSqKaoicP2geQY3cQeS72VE0CRVj53A
NQmzvNrsfnTEhAgKwB9JrtAzcqO40tzBqIMZjTHG4n6Hf5JIIKzoZ2f5TCulcmK0
IWojwJSrmxCj1CNfF4DHRXzmkJHxGIVa878U9EH0+BcfvvzWMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0jRgJ4rQJzDjMruzAooWH0HhHZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDRhMTFlN2EtODdhNy0z
MjU5LWI1ZjgtMGQ5OGE3YzVjZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlliMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB56SRHiecJsUSXnhByeVUYlYv7XdH4f1KvUR1sqnbnNPpfJGBv+EKtS
IE6aGe+qyWtVKtiC5IoJZr4vD1YrfTChgGGAYxPuzkJFzDs+2jnOmJL/k/MAhP2G
2WHqbswEdyFafc8uw5O76AncRAvkbFbA76aACik8Q3F61GPLXYX0Z1a88pnRmjED
FyrsNfy0xq+FfnbOarGvjeucvilK4GOWrA+aqEfUSXPrz3G1Pm9QCwct2oUFLAqS
Tw7CdbWVcvirM+PinOm4oDg7Rih9mn3aHjYKIGltea6UfJxOWIHtUKbgpeUE05sr
+/l12AvlWde0aG4TzGXgizj4bmMbYQw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:34 2026 by rpki-client