Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
File:                     a8529787-c060-33e4-86c6-8d72789c4686.roa (raw, json)
Hash identifier:          LqfenfRprHdJl+dme+42uZqm9QLgUBtmeWVw5lUQr8Y=
Subject key identifier:   07:E2:12:2C:28:6F:1A:72:AD:63:AA:5B:B0:36:EF:B0:5F:3F:6F:FD
Certificate issuer:       /CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
Certificate serial:       010D0C9F4328584CEFF23D8222E04DC53A117280
Authority key identifier: 64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     62647
IP address blocks:        198.49.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3d:82:22:e0:4d:c5:3a:11:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=90003ecc-8344-4e75-b679-f2a7e4ae1b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:4b:d3:05:0f:af:ce:31:7e:af:ca:5f:a3:
                    35:96:5d:91:24:e9:f9:92:fd:48:17:55:c6:24:73:
                    f0:5c:19:5d:43:68:88:dc:53:1a:6a:06:cd:db:be:
                    73:a0:8d:a7:ee:07:86:72:7d:00:7c:7d:c5:17:55:
                    06:e5:71:f3:33:c6:e5:b4:48:1d:1f:b6:d6:c1:bb:
                    45:a5:5f:cf:fa:38:a4:b0:24:1d:d5:49:06:dc:d4:
                    e0:b6:d0:03:8c:63:1a:71:41:d5:bb:ca:86:fa:9a:
                    7d:87:b6:4c:f1:9f:b3:cb:2b:a1:10:b3:27:33:cc:
                    e5:ac:48:cf:8f:1f:c8:2a:5c:eb:2c:a2:1d:48:3b:
                    d2:5d:ee:41:59:ff:f2:51:23:27:87:6e:10:c2:3e:
                    83:30:30:8e:0b:ea:ba:c6:36:f8:d3:a1:72:e3:47:
                    77:9d:ed:5f:32:38:9a:77:00:5d:0b:83:15:57:8f:
                    85:95:12:4a:3e:e3:75:39:e7:6f:0b:01:ca:2a:f5:
                    6e:53:e3:4f:c9:fb:bf:03:78:4a:aa:32:43:4f:39:
                    a3:2b:fc:81:8b:6c:86:bc:0b:00:98:87:58:88:c5:
                    4e:43:a9:8c:7a:02:8c:40:91:28:76:fe:57:33:9a:
                    e1:00:54:33:da:a2:ed:68:fc:f0:ee:ec:20:0c:7e:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E2:12:2C:28:6F:1A:72:AD:63:AA:5B:B0:36:EF:B0:5F:3F:6F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl

            X509v3 Authority Key Identifier:
                keyid:64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:28:7a:36:9d:5a:8d:cf:1d:25:f8:33:96:78:ae:33:b7:0c:
         14:a8:0c:85:11:78:1b:cd:c6:b9:15:2b:54:7c:4b:78:b1:f3:
         84:92:ab:ce:85:a1:f5:07:82:43:95:93:9d:0f:9b:13:85:92:
         8a:10:64:43:ab:65:c8:be:4b:07:0c:2b:b4:48:df:59:b4:99:
         8f:9f:38:5c:63:c8:27:ac:96:61:ab:b3:b5:43:c1:7b:0c:75:
         f1:ba:08:93:2f:ae:ad:15:1d:e7:78:46:4b:89:71:79:36:4a:
         1b:0d:c5:6c:b9:23:93:9c:3a:1d:eb:1b:06:c6:7b:15:25:2e:
         32:b0:27:d1:76:aa:23:53:fe:ff:f6:2f:5a:c8:c3:22:5f:ca:
         64:b2:39:e1:89:48:96:f6:da:f9:35:ab:88:fb:94:18:d7:fb:
         eb:45:81:54:a9:dd:8b:28:b9:c1:16:c7:c7:b6:55:10:c5:12:
         8f:37:6e:94:89:a7:be:a1:43:67:3c:c9:24:f0:2a:f3:2a:1f:
         c2:30:ee:3e:29:53:58:49:2c:ca:8b:31:dd:3c:f8:f9:15:cf:
         10:03:d1:ed:6e:62:a1:53:db:60:61:f6:2e:82:09:23:9b:0a:
         b7:a3:f1:76:c5:e3:13:04:c1:20:17:11:20:ef:de:8b:35:f1:
         50:3a:99:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8j2CIuBNxToRcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MxYjFhNGMtZGJjNy00MDM2LWIzOWUtYTRjODQ1ZmI3
YjFhMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
OTAwMDNlY2MtODM0NC00ZTc1LWI2NzktZjJhN2U0YWUxYjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHhL0wUPr84xfq/KX6M1ll2RJOn5kv1IF1XG
JHPwXBldQ2iI3FMaagbN275zoI2n7geGcn0AfH3FF1UG5XHzM8bltEgdH7bWwbtF
pV/P+jiksCQd1UkG3NTgttADjGMacUHVu8qG+pp9h7ZM8Z+zyyuhELMnM8zlrEjP
jx/IKlzrLKIdSDvSXe5BWf/yUSMnh24Qwj6DMDCOC+q6xjb406Fy40d3ne1fMjia
dwBdC4MVV4+FlRJKPuN1OedvCwHKKvVuU+NPyfu/A3hKqjJDTzmjK/yBi2yGvAsA
mIdYiMVOQ6mMegKMQJEodv5XM5rhAFQz2qLtaPzw7uwgDH6mWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfiEiwobxpyrWOqW7A277BfP2/9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzFi
MWE0Yy1kYmM3LTQwMzYtYjM5ZS1hNGM4NDVmYjdiMWEvYTg1Mjk3ODctYzA2MC0z
M2U0LTg2YzYtOGQ3Mjc4OWM0Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MxYjFhNGMtZGJjNy00MDM2LWIz
OWUtYTRjODQ1ZmI3YjFhL2NjMWIxYTRjLWRiYzctNDAzNi1iMzllLWE0Yzg0NWZi
N2IxYS5jcmwwHwYDVR0jBBgwFoAUZMVCiygFPxh/ZBgbuV0c5VIt0NowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYzFiMWE0Yy1kYmM3LTQwMzYtYjM5ZS1hNGM4
NDVmYjdiMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxjEuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8oejadWo3PHSX4M5Z4rjO3DBSoDIUReBvNxrkVK1R8S3ix84SSq86F
ofUHgkOVk50PmxOFkooQZEOrZci+SwcMK7RI31m0mY+fOFxjyCeslmGrs7VDwXsM
dfG6CJMvrq0VHed4RkuJcXk2ShsNxWy5I5OcOh3rGwbGexUlLjKwJ9F2qiNT/v/2
L1rIwyJfymSyOeGJSJb22vk1q4j7lBjX++tFgVSp3YsoucEWx8e2VRDFEo83bpSJ
p76hQ2c8ySTwKvMqH8Iw7j4pU1hJLMqLMd08+PkVzxAD0e1uYqFT22Bh9i6CCSOb
Crej8XbF4xMEwSAXESDv3os18VA6mYQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:29 2026 by rpki-client