Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
File:                     9f8ef9be-15b7-3961-a979-22278b9141cc.roa (raw, json)
Hash identifier:          AASKNUICoOxQwcFsMwlkiCurPCKoJLzwnJD9PRRctRE=
Subject key identifier:   84:0A:9B:22:A1:28:AD:7E:4F:AE:8A:BB:AF:7B:E5:EC:10:77:4F:65
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584CFB1CED47ABE8C00FF8178540
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     2559
IP address blocks:        198.241.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:ed:47:ab:e8:c0:0f:f8:17:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=fe6b36b4-1350-43f5-88a3-9f5b1c587157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:ec:05:ba:99:4a:8d:5f:90:06:f2:78:05:
                    e2:a7:2a:4b:aa:9f:fa:b8:5e:fb:89:ba:5a:1e:15:
                    b4:06:bd:b8:91:7f:51:1a:4e:d6:dc:6c:49:ad:ad:
                    cf:30:97:2a:44:bf:e1:6e:83:bf:8e:84:dd:c8:05:
                    0d:f1:73:35:9c:98:48:7e:c9:9b:b4:4e:58:6a:ae:
                    d9:36:1c:8c:fd:8f:dc:1c:31:2f:84:ce:9e:c0:c8:
                    ea:c2:1e:90:91:23:f4:ca:da:3b:fe:c5:57:15:fd:
                    9e:1f:92:f5:4f:ca:a3:98:1b:80:b9:40:b6:b6:79:
                    aa:d8:91:eb:d9:4e:2a:53:40:82:76:8c:e3:91:a3:
                    43:f0:16:76:40:e4:c9:5f:09:60:37:5f:c9:b2:e0:
                    40:3a:bc:ff:e9:20:4a:94:e2:29:06:4b:ba:95:c6:
                    d3:c6:df:a6:de:fb:33:40:7c:72:14:b8:d5:ab:1e:
                    5a:22:14:42:c2:3a:5a:83:70:4b:f3:f3:06:ee:91:
                    1c:ba:7a:53:ff:08:53:2e:39:e7:fa:17:41:63:f9:
                    8f:9c:c8:1f:13:fa:c6:d0:cf:37:7a:cb:11:2a:74:
                    35:49:7c:e4:d9:66:c6:a3:06:0e:24:51:8b:6c:e0:
                    74:d7:32:85:a0:a8:95:09:46:50:97:57:ed:19:e6:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:9B:22:A1:28:AD:7E:4F:AE:8A:BB:AF:7B:E5:EC:10:77:4F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:71:86:5c:5d:cf:a5:96:8c:75:ef:49:62:dc:f1:47:d2:
         31:b5:a4:de:de:99:05:7c:96:f9:ea:a1:95:fa:99:26:68:51:
         e8:b0:9a:20:86:8d:1b:2f:f5:b2:f5:c4:34:cc:e4:98:36:a6:
         93:99:fb:54:02:42:20:0e:20:13:f2:a5:36:c1:66:9d:68:69:
         f2:2b:9a:74:0e:d2:cc:8c:e3:48:75:b9:4a:55:de:72:3b:f8:
         b3:57:c7:a8:7a:d0:d6:c1:6d:bb:50:a8:f4:eb:c7:9d:50:3f:
         a6:34:a0:09:19:94:e9:cc:ce:88:34:3e:d3:e1:0d:c1:ba:94:
         67:e4:c6:9a:16:03:37:7b:dd:7f:87:93:11:d2:4b:9c:97:53:
         c0:8c:b1:df:90:85:8a:85:ee:b6:7b:1d:17:66:28:d6:b3:06:
         9e:a8:27:bc:d5:25:5f:04:27:80:19:26:5a:dd:26:fa:78:c4:
         aa:fb:c6:bb:05:a2:95:1c:bf:0c:29:36:93:9e:50:3c:22:74:
         8d:c6:8d:89:0f:c8:54:5c:73:8f:a1:00:fc:c8:c5:f8:4d:0b:
         bc:9e:bc:8a:b2:ac:96:dd:62:20:88:3a:af:cd:32:2a:6b:e1:
         09:9d:38:b1:2e:ac:0d:cb:65:2f:be:1c:b2:41:ba:64:27:1d:
         02:e7:ba:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HO1Hq+jAD/gXhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk
ZmU2YjM2YjQtMTM1MC00M2Y1LTg4YTMtOWY1YjFjNTg3MTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVXsBbqZSo1fkAbyeAXipypLqp/6uF77ibpa
HhW0Br24kX9RGk7W3GxJra3PMJcqRL/hboO/joTdyAUN8XM1nJhIfsmbtE5Yaq7Z
NhyM/Y/cHDEvhM6ewMjqwh6QkSP0yto7/sVXFf2eH5L1T8qjmBuAuUC2tnmq2JHr
2U4qU0CCdozjkaND8BZ2QOTJXwlgN1/JsuBAOrz/6SBKlOIpBku6lcbTxt+m3vsz
QHxyFLjVqx5aIhRCwjpag3BL8/MG7pEcunpT/whTLjnn+hdBY/mPnMgfE/rG0M83
essRKnQ1SXzk2WbGowYOJFGLbOB01zKFoKiVCUZQl1ftGeYvWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQKmyKhKK1+T66Ku6975ewQd09lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvOWY4ZWY5YmUtMTViNy0z
OTYxLWE5NzktMjIyNzhiOTE0MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxScYZcXc+llox170li3PFH0jG1pN7emQV8lvnqoZX6mSZoUeiwmiCG
jRsv9bL1xDTM5Jg2ppOZ+1QCQiAOIBPypTbBZp1oafIrmnQO0syM40h1uUpV3nI7
+LNXx6h60NbBbbtQqPTrx51QP6Y0oAkZlOnMzog0PtPhDcG6lGfkxpoWAzd73X+H
kxHSS5yXU8CMsd+QhYqF7rZ7HRdmKNazBp6oJ7zVJV8EJ4AZJlrdJvp4xKr7xrsF
opUcvwwpNpOeUDwidI3GjYkPyFRcc4+hAPzIxfhNC7yevIqyrJbdYiCIOq/NMipr
4QmdOLEurA3LZS++HLJBumQnHQLnulk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:28 2026 by rpki-client