Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa
File:                     5ff297e9-0b93-336f-a807-5fd81fc10453.roa (raw, json)
Hash identifier:          KT1Im3emcSXj29A0JsQcxmEgV/MCW4PvWhcIuISOMw0=
Subject key identifier:   5E:6B:B5:B5:40:78:D4:A4:9D:29:BC:90:B2:1F:51:6D:9D:3C:6F:38
Certificate issuer:       /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial:       010D0C9F4328584CDB021467A0A68FF1DCBFBB80
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     40788
IP address blocks:        198.2.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:14:67:a0:a6:8f:f1:dc:bf:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=9c1c1971-c2d5-410b-9054-f617ce865b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:70:f2:28:a4:6c:68:9b:fe:7b:6d:02:fd:
                    f1:6f:d7:0e:3d:57:31:95:6e:38:0b:a6:50:aa:f1:
                    dc:93:e3:1a:33:fc:dd:bf:95:16:8b:b9:df:38:10:
                    48:0b:14:6e:48:bc:9d:67:bf:96:16:00:ad:1c:b0:
                    97:db:70:b5:05:b5:49:28:c6:b8:86:63:7d:a4:6c:
                    4b:f3:08:bd:f6:f0:53:c5:55:e7:82:2d:04:37:68:
                    c7:2a:e9:0e:5d:79:7e:43:f7:28:93:ef:45:5a:89:
                    0c:f9:14:f9:8b:e8:c9:64:35:e5:f8:63:89:42:45:
                    47:87:ac:e9:fd:3b:71:80:f7:f0:d2:79:fa:4e:48:
                    37:7c:44:4c:87:2f:9f:8e:8a:a5:27:b7:cd:0b:ee:
                    60:b5:78:95:09:70:07:ef:3e:14:76:8f:df:81:9d:
                    d5:7d:b2:fa:44:9c:37:7f:46:1e:96:d5:a5:3e:0f:
                    7c:fd:8c:85:3a:f6:06:bd:c9:53:b8:c1:bf:06:d3:
                    06:ac:53:58:0d:db:c3:23:53:13:8b:0a:5d:80:47:
                    68:cb:d5:ba:30:8e:2b:2b:82:37:78:76:17:a8:16:
                    f2:6c:e5:cc:46:a1:30:dc:88:73:64:5d:7e:b7:28:
                    08:e4:a0:f3:17:4c:3a:05:76:7e:e6:9d:54:ce:43:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:B5:B5:40:78:D4:A4:9D:29:BC:90:B2:1F:51:6D:9D:3C:6F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.2.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cb:04:99:12:17:9d:dc:18:75:ba:9b:a8:f4:06:b4:4d:92:
         f7:cb:30:a6:67:34:74:fc:00:43:65:dc:17:7c:22:92:34:8f:
         8c:3a:a0:e4:11:68:a5:c8:ae:e0:c9:9f:94:e4:5f:51:05:41:
         69:5c:72:90:ee:36:9b:a4:a9:02:0c:f1:9e:6e:5a:e1:50:49:
         5f:1d:f8:1d:97:46:20:f6:c1:4b:d2:3f:ca:f7:4e:99:2c:26:
         bc:02:d8:54:f7:05:3d:b2:18:83:cd:ef:80:02:ce:cf:33:bb:
         21:08:71:0e:82:c5:62:84:c3:7a:27:56:bd:30:66:b1:d8:94:
         58:db:61:bc:47:b2:4e:23:d7:9e:c6:ee:75:5c:73:6c:28:e9:
         71:6e:6b:8b:ff:1a:1d:3e:0f:c2:dc:14:1c:01:b1:c2:dc:a4:
         0b:d7:eb:f3:33:4e:2a:a2:63:17:97:36:37:bd:ae:06:7c:64:
         ad:19:bd:52:e9:5d:4c:ca:4d:76:7e:b5:42:8a:7b:96:9a:07:
         f4:e4:45:69:d8:cc:77:72:7a:d3:03:c4:eb:7b:f8:ca:dd:61:
         3f:c5:f9:74:37:00:b4:30:b2:d1:d4:b9:07:e1:95:6c:29:e9:
         f9:e0:4e:20:f4:f8:a0:7f:01:13:26:c9:d3:33:30:b3:b4:ca:
         67:60:ad:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAhRnoKaP8dy/u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl
MDU5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
OWMxYzE5NzEtYzJkNS00MTBiLTkwNTQtZjYxN2NlODY1Yjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Bw8iikbGib/nttAv3xb9cOPVcxlW44C6ZQ
qvHck+MaM/zdv5UWi7nfOBBICxRuSLydZ7+WFgCtHLCX23C1BbVJKMa4hmN9pGxL
8wi99vBTxVXngi0EN2jHKukOXXl+Q/cok+9FWokM+RT5i+jJZDXl+GOJQkVHh6zp
/TtxgPfw0nn6Tkg3fERMhy+fjoqlJ7fNC+5gtXiVCXAH7z4Udo/fgZ3VfbL6RJw3
f0YeltWlPg98/YyFOvYGvclTuMG/BtMGrFNYDdvDI1MTiwpdgEdoy9W6MI4rK4I3
eHYXqBbybOXMRqEw3IhzZF1+tygI5KDzF0w6BXZ+5p1UzkNvQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5rtbVAeNSknSm8kLIfUW2dPG84MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5
YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvNWZmMjk3ZTktMGI5My0z
MzZmLWE4MDctNWZkODFmYzEwNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj
MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh
ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy
NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxgJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/LBJkSF53cGHW6m6j0BrRNkvfLMKZnNHT8AENl3Bd8IpI0j4w6oOQR
aKXIruDJn5TkX1EFQWlccpDuNpukqQIM8Z5uWuFQSV8d+B2XRiD2wUvSP8r3Tpks
JrwC2FT3BT2yGIPN74ACzs8zuyEIcQ6CxWKEw3onVr0wZrHYlFjbYbxHsk4j157G
7nVcc2wo6XFua4v/Gh0+D8LcFBwBscLcpAvX6/MzTiqiYxeXNje9rgZ8ZK0ZvVLp
XUzKTXZ+tUKKe5aaB/TkRWnYzHdyetMDxOt7+MrdYT/F+XQ3ALQwstHUuQfhlWwp
6fngTiD0+KB/ARMmydMzMLO0ymdgrQw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:13 2026 by rpki-client