Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ab468f01-1c04-3417-bee7-0e937144b123.roa
File:                     ab468f01-1c04-3417-bee7-0e937144b123.roa (raw, json)
Hash identifier:          ZvshiQlnZpXPsWiyCITzFNrn7NhXr7ldKRdn81mqifI=
Subject key identifier:   90:6E:9C:CA:A1:EF:A7:C3:34:04:31:74:4A:19:64:2D:47:C7:3A:40
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4079F51F6A91C7DA3B58C00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ab468f01-1c04-3417-bee7-0e937144b123.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        199.232.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:9f:51:f6:a9:1c:7d:a3:b5:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=6fee34d8-e4b1-41f0-964b-5cd977a4ecdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:0d:d2:fd:b9:3e:ff:b9:10:28:53:82:4b:
                    27:db:9c:ef:b2:36:b4:61:7c:21:f4:4a:c3:8d:67:
                    56:89:d3:7d:21:c2:6c:7f:c9:1b:b4:8e:40:dd:6a:
                    0a:05:bc:5c:51:3b:50:c4:b2:8c:e4:c5:91:ac:cf:
                    ca:1d:ef:4d:14:05:bc:5e:bc:c9:04:52:be:a3:b5:
                    93:78:a4:5f:9b:9a:50:49:82:23:9e:5d:c3:44:0b:
                    72:f8:10:cf:4f:a9:c6:be:01:9c:f7:37:12:fb:77:
                    71:30:2f:ea:36:f2:73:08:28:47:6d:89:3d:cc:6d:
                    9c:1d:f4:44:46:c4:f7:eb:78:f8:07:c7:e7:f7:ae:
                    59:42:20:11:18:95:a8:07:ff:43:04:d2:47:75:68:
                    9e:f0:d2:b1:39:0b:79:52:50:f1:10:7c:86:c3:a3:
                    91:9c:4a:67:cf:db:74:1f:39:23:fd:32:c5:14:10:
                    28:70:ce:f9:7d:4a:d3:49:9c:33:ea:b6:1b:b9:1c:
                    20:6a:22:39:c7:87:7f:6f:57:95:a0:20:95:a6:ec:
                    52:89:5e:c1:7e:8f:a4:2c:54:40:52:9b:9d:b8:34:
                    bd:d7:84:16:87:9a:ff:28:a4:72:40:47:aa:40:82:
                    04:37:c3:75:5d:e0:94:20:e5:ed:e5:a3:69:b0:10:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:9C:CA:A1:EF:A7:C3:34:04:31:74:4A:19:64:2D:47:C7:3A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ab468f01-1c04-3417-bee7-0e937144b123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b3:69:f0:ab:d7:66:b5:1a:7b:9b:c2:88:ea:65:e3:1f:3b:
         b1:dc:45:6a:ed:16:40:d0:c9:62:98:1b:f7:50:29:eb:e4:01:
         e6:71:d3:47:c8:b2:13:c0:01:b5:28:21:7e:66:c6:fa:39:ac:
         25:94:36:a3:d4:d6:41:02:da:6c:51:de:b5:16:48:23:42:a0:
         ab:2c:2a:38:13:57:cb:ac:42:01:b0:ee:66:fb:16:7b:00:70:
         4f:50:36:17:b1:ce:8f:c2:89:50:17:1c:4a:93:49:0e:3b:50:
         73:3e:53:ce:d0:fe:4a:40:8e:90:89:87:e5:9a:91:41:55:67:
         ee:01:cf:8d:bb:21:f7:c3:40:10:ed:35:6e:9c:bd:f4:fa:81:
         70:f6:e6:5c:6d:0e:a4:3b:dd:d6:e0:eb:09:18:6c:0c:79:36:
         5d:c7:77:c2:14:55:ce:69:42:e0:11:97:5c:7f:d1:ec:eb:e7:
         f1:53:df:42:82:9c:2c:83:01:a6:d6:1a:c4:e1:ab:a8:dd:3c:
         25:d3:73:45:d6:09:0d:a2:a8:98:75:8f:b1:f1:7c:a8:1f:7d:
         d5:28:ed:dc:de:95:59:77:3c:ee:3e:2d:72:97:e4:0d:47:d4:
         5a:0c:ab:be:01:6f:34:02:e6:4a:d7:18:e9:97:30:33:dd:19:
         c0:6f:b8:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB59R9qkcfaO1jAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
NmZlZTM0ZDgtZTRiMS00MWYwLTk2NGItNWNkOTc3YTRlY2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVQN0v25Pv+5EChTgksn25zvsja0YXwh9ErD
jWdWidN9IcJsf8kbtI5A3WoKBbxcUTtQxLKM5MWRrM/KHe9NFAW8XrzJBFK+o7WT
eKRfm5pQSYIjnl3DRAty+BDPT6nGvgGc9zcS+3dxMC/qNvJzCChHbYk9zG2cHfRE
RsT363j4B8fn965ZQiARGJWoB/9DBNJHdWie8NKxOQt5UlDxEHyGw6ORnEpnz9t0
Hzkj/TLFFBAocM75fUrTSZwz6rYbuRwgaiI5x4d/b1eVoCCVpuxSiV7Bfo+kLFRA
UpuduDS914QWh5r/KKRyQEeqQIIEN8N1XeCUIOXt5aNpsBB7EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBunMqh76fDNAQxdEoZZC1HxzpAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWI0NjhmMDEtMWMwNC0z
NDE3LWJlZTctMGU5MzcxNDRiMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSzafCr12a1GnubwojqZeMfO7HcRWrtFkDQyWKYG/dQKevkAeZx00fI
shPAAbUoIX5mxvo5rCWUNqPU1kEC2mxR3rUWSCNCoKssKjgTV8usQgGw7mb7FnsA
cE9QNhexzo/CiVAXHEqTSQ47UHM+U87Q/kpAjpCJh+WakUFVZ+4Bz427IffDQBDt
NW6cvfT6gXD25lxtDqQ73dbg6wkYbAx5Nl3Hd8IUVc5pQuARl1x/0ezr5/FT30KC
nCyDAabWGsThq6jdPCXTc0XWCQ2iqJh1j7HxfKgffdUo7dzelVl3PO4+LXKX5A1H
1FoMq74BbzQC5krXGOmXMDPdGcBvuAU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:36 2026 by rpki-client