Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/eb86de88-6f75-3376-898d-f900ed22d5e4.roa
File:                     eb86de88-6f75-3376-898d-f900ed22d5e4.roa (raw, json)
Hash identifier:          X+E6S6G24zw8k0X78kedKd+DpcvgX44fkpHyE36pQSw=
Subject key identifier:   DF:78:7C:78:A3:16:DC:D4:A5:12:88:85:65:7A:62:A5:04:30:DF:BA
Certificate issuer:       /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
Certificate serial:       010D0C9F4328584CC8DC9AF85ECC7F8F78898E20
Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/eb86de88-6f75-3376-898d-f900ed22d5e4.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     4150
IP address blocks:        162.218.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:9a:f8:5e:cc:7f:8f:78:89:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=8c57d9e9-b3fb-46cb-b5e3-79e81cf58bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:ef:a7:b2:56:a0:6c:a8:70:55:37:ae:ac:
                    71:04:09:ce:db:b4:13:90:88:19:ce:b5:15:c3:1d:
                    d0:86:dd:a4:04:48:cb:da:95:ee:78:9f:31:fb:47:
                    8d:a4:32:94:fc:cf:b4:5c:88:c0:8f:e9:8c:80:cc:
                    8b:28:07:9b:06:80:a7:94:36:2d:9f:31:fe:4e:8d:
                    c2:49:9d:dd:5a:8a:a8:ab:b2:85:7c:32:2d:d4:d6:
                    30:18:6d:bb:7b:79:94:26:39:bd:90:06:a1:de:cb:
                    b8:c4:c6:e8:e8:d4:66:de:06:d7:4f:1d:a4:6b:22:
                    ff:02:4e:64:19:0f:13:4b:9c:3e:aa:3a:41:b1:4b:
                    7a:e2:57:2f:14:b5:17:b7:3f:53:ab:5f:c3:69:47:
                    a3:7f:90:ef:5c:4a:70:0c:c0:1a:12:a5:a1:a0:1e:
                    4e:a9:c4:03:d5:0b:28:73:46:c7:a4:c6:f2:7a:6e:
                    03:67:52:10:8b:b3:10:36:50:c5:d4:84:56:22:72:
                    bb:5b:a5:99:a0:0b:a7:38:5c:5b:b7:03:ad:b7:5e:
                    31:3f:31:02:aa:f9:e3:c0:ec:ec:b4:18:c2:ef:a5:
                    78:04:9e:99:ae:93:b3:f8:fc:54:e1:bc:40:0f:ca:
                    c5:5b:d2:9c:ef:6f:8d:d7:21:7f:fb:0f:96:4a:b2:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:78:7C:78:A3:16:DC:D4:A5:12:88:85:65:7A:62:A5:04:30:DF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/eb86de88-6f75-3376-898d-f900ed22d5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:77:2a:b6:d8:7e:61:8d:ee:42:fa:d7:16:87:55:95:92:
         a8:b3:f2:6c:6a:fb:c5:b4:3b:93:b3:81:fe:c1:e3:b1:9e:43:
         7f:fd:db:6e:90:91:4d:6d:8b:d3:5c:6c:ac:7d:68:7c:a8:ce:
         8c:e5:4a:38:89:24:df:3b:9c:18:6b:cb:c2:94:cb:13:09:12:
         bd:b0:03:98:bc:9e:fe:b1:66:45:0c:ed:ba:8a:13:7b:57:ac:
         0b:8a:18:27:3f:fe:d9:c7:af:5c:e6:a1:00:c1:43:b6:15:b2:
         e6:b1:5a:88:3a:26:ca:de:d8:69:ed:90:c7:a3:95:c7:97:3a:
         68:7f:76:e5:03:a6:d3:0f:c8:b1:89:70:e6:36:19:b6:8b:14:
         38:b8:bd:ff:8b:e5:6a:73:94:c1:04:4b:ec:2e:be:50:06:a5:
         c4:0e:a8:02:b4:23:f9:62:a3:df:47:67:28:40:2c:9d:7e:54:
         e9:5d:50:d2:df:53:82:ea:8c:63:94:2d:4f:0f:0e:38:43:87:
         cb:c8:8b:a8:b6:f2:98:b1:9d:65:69:a8:d4:eb:ab:59:8a:a4:
         63:6a:1b:b1:68:2f:43:c9:59:7c:73:4e:eb:17:94:54:71:a5:
         bd:ef:3e:98:ca:cb:20:28:63:98:9d:7c:c9:93:f3:0b:c6:70:
         e3:a5:ff:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzI3Jr4Xsx/j3iJjiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY0NzllMTMtNTVhMS00YTVkLWEwMDItMTE3MGEwZmY1
ZmQyMB4XDTI2MDIwNzE0MDA0MVoXDTI2MDUwODEzMDA0MVowLzEtMCsGA1UEAxMk
OGM1N2Q5ZTktYjNmYi00NmNiLWI1ZTMtNzllODFjZjU4YmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBHvp7JWoGyocFU3rqxxBAnO27QTkIgZzrUV
wx3Qht2kBEjL2pXueJ8x+0eNpDKU/M+0XIjAj+mMgMyLKAebBoCnlDYtnzH+To3C
SZ3dWoqoq7KFfDIt1NYwGG27e3mUJjm9kAah3su4xMbo6NRm3gbXTx2kayL/Ak5k
GQ8TS5w+qjpBsUt64lcvFLUXtz9Tq1/DaUejf5DvXEpwDMAaEqWhoB5OqcQD1Qso
c0bHpMbyem4DZ1IQi7MQNlDF1IRWInK7W6WZoAunOFxbtwOtt14xPzECqvnjwOzs
tBjC76V4BJ6ZrpOz+PxU4bxAD8rFW9Kc72+N1yF/+w+WSrJ+8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN94fHijFtzUpRKIhWV6YqUEMN+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3
OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBmZjVmZDIvZWI4NmRlODgtNmY3NS0z
Mzc2LTg5OGQtZjkwMGVkMjJkNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWY0NzllMTMtNTVhMS00YTVkLWEw
MDItMTE3MGEwZmY1ZmQyLzFmNDc5ZTEzLTU1YTEtNGE1ZC1hMDAyLTExNzBhMGZm
NWZkMi5jcmwwHwYDVR0jBBgwFoAUqLXSOrVPs0AvMi4sLER4Y/pWWLAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcw
YTBmZjVmZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqudyq22H5hje5C+tcWh1WVkqiz8mxq+8W0O5Ozgf7B47GeQ3/9226Q
kU1ti9NcbKx9aHyozozlSjiJJN87nBhry8KUyxMJEr2wA5i8nv6xZkUM7bqKE3tX
rAuKGCc//tnHr1zmoQDBQ7YVsuaxWog6Jsre2GntkMejlceXOmh/duUDptMPyLGJ
cOY2GbaLFDi4vf+L5WpzlMEES+wuvlAGpcQOqAK0I/lio99HZyhALJ1+VOldUNLf
U4LqjGOULU8PDjhDh8vIi6i28pixnWVpqNTrq1mKpGNqG7FoL0PJWXxzTusXlFRx
pb3vPpjKyyAoY5idfMmT8wvGcOOl/4g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:58:55 2026 by rpki-client