Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d58a2b-5922-31bc-84bb-b31f6f255e2e.roa
File:                     76d58a2b-5922-31bc-84bb-b31f6f255e2e.roa (raw, json)
Hash identifier:          +9nNyIUg23uJTsTFtQexCDyQLh5yhxE4pXn6WTf3Mnk=
Subject key identifier:   24:3D:8B:57:76:6D:9D:25:81:40:E4:91:0D:B7:AB:EC:63:AE:8C:B6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CEFF25031A9096E903A62AF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d58a2b-5922-31bc-84bb-b31f6f255e2e.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397232
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:50:31:a9:09:6e:90:3a:62:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=62b477fe-41bc-4aa7-9fe4-4ba913927695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:79:f3:6b:91:64:db:3e:eb:3c:4e:44:e3:
                    84:d1:ac:d9:28:c9:82:a0:83:a6:8e:7e:d1:84:dc:
                    98:6b:df:8b:06:ea:f5:1c:2d:70:e5:b5:93:a4:c5:
                    f6:c6:56:2c:08:34:57:2b:0d:d4:12:bb:6f:75:05:
                    8c:17:41:12:44:bd:db:ca:be:07:7f:4d:d7:31:7b:
                    25:4d:af:aa:d4:cd:7c:dd:40:5b:61:a2:f0:e3:33:
                    52:34:a6:33:54:88:98:78:bb:cd:7a:ac:ea:a9:11:
                    e4:9c:31:4b:30:4d:48:63:5b:ea:0c:37:70:8e:08:
                    8a:98:4d:18:72:a1:db:ac:5e:45:38:2d:cb:4a:ee:
                    bd:bc:7c:67:b8:38:25:99:8b:75:af:56:26:b0:c3:
                    4d:83:65:18:9d:dc:d5:45:a5:78:8c:c7:15:a5:50:
                    dc:ac:48:ac:a2:cc:24:5c:ad:8f:52:93:ee:dc:56:
                    e1:e5:33:48:42:cf:b7:59:5d:82:75:3f:b9:44:a8:
                    0d:69:82:63:11:fb:12:11:df:7d:98:42:1c:c6:55:
                    6b:68:c5:fe:88:39:b9:c1:75:fc:cb:dc:19:d3:b6:
                    02:c7:2b:97:6d:e5:06:62:d3:98:25:7c:62:6f:ed:
                    74:60:fa:f9:bf:f4:15:81:1e:d0:97:3e:15:60:d2:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:8B:57:76:6D:9D:25:81:40:E4:91:0D:B7:AB:EC:63:AE:8C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d58a2b-5922-31bc-84bb-b31f6f255e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a3:5d:88:59:17:f8:44:34:b1:8e:9c:a4:fb:5e:68:08:20:
         29:3d:58:55:9c:7e:46:5a:c8:56:fe:33:89:58:29:4b:98:64:
         df:7a:20:78:28:7c:80:0b:0f:3d:7f:a0:ff:85:8a:ad:6d:77:
         1c:8e:2c:f8:45:93:83:76:fd:18:99:46:56:94:f0:9b:c9:4b:
         94:fe:54:18:79:0f:03:1a:4f:01:ed:01:4d:2a:55:e7:a3:94:
         ed:c7:3f:51:39:ec:5e:ad:a7:e8:18:c1:e1:2c:a2:a7:e8:35:
         3c:73:d3:b1:64:ac:cc:cf:4c:38:1f:5c:b0:7b:9b:1c:4f:04:
         dc:7f:72:56:14:69:66:16:7a:12:e0:95:1a:31:06:9f:51:b7:
         16:5a:e2:d0:a0:7d:65:4e:fa:0e:b8:51:51:da:5b:27:f1:ef:
         c9:1d:c7:a0:b4:9d:9c:82:e8:04:fa:42:6d:ec:00:86:3a:fd:
         9b:86:6c:b6:ea:00:22:a5:67:4f:31:51:21:70:ae:f2:1e:d9:
         9f:2d:11:42:56:c9:b4:4f:f2:ca:d1:9c:22:f2:9f:63:aa:ab:
         74:e4:2d:8a:14:6e:6b:8f:d4:2d:8e:57:12:30:b2:80:9c:69:
         8a:a3:49:5f:0a:55:87:cf:ee:44:4e:c1:f0:ea:c8:de:7d:99:
         2d:90:8e:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8lAxqQlukDpirwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
NjJiNDc3ZmUtNDFiYy00YWE3LTlmZTQtNGJhOTEzOTI3Njk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4B582uRZNs+6zxOROOE0azZKMmCoIOmjn7R
hNyYa9+LBur1HC1w5bWTpMX2xlYsCDRXKw3UErtvdQWMF0ESRL3byr4Hf03XMXsl
Ta+q1M183UBbYaLw4zNSNKYzVIiYeLvNeqzqqRHknDFLME1IY1vqDDdwjgiKmE0Y
cqHbrF5FOC3LSu69vHxnuDglmYt1r1YmsMNNg2UYndzVRaV4jMcVpVDcrEisoswk
XK2PUpPu3Fbh5TNIQs+3WV2CdT+5RKgNaYJjEfsSEd99mEIcxlVraMX+iDm5wXX8
y9wZ07YCxyuXbeUGYtOYJXxib+10YPr5v/QVgR7Qlz4VYNIUPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQ9i1d2bZ0lgUDkkQ23q+xjroy2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzZkNThhMmItNTkyMi0z
MWJjLTg0YmItYjMxZjZmMjU1ZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFijXYhZF/hENLGOnKT7XmgIICk9WFWcfkZayFb+M4lYKUuYZN96IHgo
fIALDz1/oP+Fiq1tdxyOLPhFk4N2/RiZRlaU8JvJS5T+VBh5DwMaTwHtAU0qVeej
lO3HP1E57F6tp+gYweEsoqfoNTxz07FkrMzPTDgfXLB7mxxPBNx/clYUaWYWehLg
lRoxBp9RtxZa4tCgfWVO+g64UVHaWyfx78kdx6C0nZyC6AT6Qm3sAIY6/ZuGbLbq
ACKlZ08xUSFwrvIe2Z8tEUJWybRP8srRnCLyn2Oqq3TkLYoUbmuP1C2OVxIwsoCc
aYqjSV8KVYfP7kROwfDqyN59mS2Qjl8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:58 2026 by rpki-client