Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/8bb8c4e4-6a32-3f4a-8f71-fc3f45c42f88.roa
File:                     8bb8c4e4-6a32-3f4a-8f71-fc3f45c42f88.roa (raw, json)
Hash identifier:          Pc3pmOSD7T41clfb6vjLPgwmghk3b8Xvdb4/H9/2U94=
Subject key identifier:   B4:4B:C6:8F:FC:9B:D7:82:5A:1A:9F:2B:1F:A8:0C:9E:3B:12:3D:D4
Certificate issuer:       /CN=2f4d7166-541c-4452-8f3e-02dd3cd83b9c
Certificate serial:       010D0C9F4328584CF17572D421BCC740BA00E440
Authority key identifier: C4:58:50:7D:E2:F0:C8:75:B8:FA:1F:D5:43:DE:77:2A:E2:7A:3B:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/8bb8c4e4-6a32-3f4a-8f71-fc3f45c42f88.roa
Signing time:             Sun 22 Feb 2026 03:01:06 +0000
ROA not before:           Sun 22 Feb 2026 03:01:06 +0000
ROA not after:            Sat 23 May 2026 02:01:06 +0000
asID:                     36354
IP address blocks:        199.244.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:75:72:d4:21:bc:c7:40:ba:00:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4d7166-541c-4452-8f3e-02dd3cd83b9c
        Validity
            Not Before: Feb 22 03:01:06 2026 GMT
            Not After : May 23 02:01:06 2026 GMT
        Subject: CN=cc5b32b9-5b01-4d34-b66c-d4f2e60ae1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:a3:e7:9c:05:58:2c:36:3e:9c:f2:a0:62:
                    59:93:ce:33:51:69:70:c1:7a:7d:45:26:9d:aa:77:
                    0f:1b:7d:4a:82:a1:38:e3:a4:15:75:15:87:ee:89:
                    be:5c:87:3f:6b:5c:59:66:3d:e5:8c:6b:c5:ea:e3:
                    de:dd:c8:60:55:49:87:2a:28:5b:a5:62:a4:c2:2b:
                    46:8d:e5:39:b3:78:b8:f5:e2:2f:8a:34:7c:e4:ba:
                    5b:f2:15:c8:a9:c6:09:b3:b9:6f:97:0e:45:29:7c:
                    6d:71:e1:35:fd:80:b6:fc:28:89:80:c7:92:d4:20:
                    79:5e:29:f4:71:09:f1:4e:22:10:23:0f:e1:d5:c4:
                    fc:01:6c:d4:1e:8a:a4:ff:3b:8b:a0:ed:df:4c:f5:
                    e9:95:f3:02:a9:34:be:ed:dc:8c:33:25:a5:e7:40:
                    98:55:ad:c2:b4:ab:44:bf:45:bf:38:49:c7:b9:f6:
                    59:25:0f:51:d5:5a:37:c6:9e:02:bf:2f:ee:8d:7e:
                    7f:b8:44:d4:c9:81:97:c7:d8:50:0a:36:66:da:35:
                    43:14:28:4c:37:92:4e:96:89:7f:9d:ab:64:ec:63:
                    29:7a:ef:cd:07:21:f6:60:5b:fd:9a:e2:94:a4:37:
                    5a:3d:e7:5b:4a:62:b5:ad:ce:22:81:c1:95:09:70:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:C6:8F:FC:9B:D7:82:5A:1A:9F:2B:1F:A8:0C:9E:3B:12:3D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/8bb8c4e4-6a32-3f4a-8f71-fc3f45c42f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:58:50:7D:E2:F0:C8:75:B8:FA:1F:D5:43:DE:77:2A:E2:7A:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:89:8c:3a:80:b7:93:60:3f:74:c8:86:f7:85:02:ca:b3:
         53:ca:ab:96:4d:47:cf:d3:76:68:68:c7:8c:ed:02:f4:b6:ec:
         37:97:80:59:ff:6c:83:96:03:e6:06:cd:4c:97:2a:7b:cf:86:
         76:bf:88:f9:02:42:09:2b:80:1a:d9:8a:42:3d:6d:12:7b:29:
         c8:13:87:14:23:1f:58:40:90:0c:81:d7:c9:b1:40:8c:29:86:
         12:43:db:78:80:ba:84:5c:3d:a6:4b:ef:80:f8:6d:eb:ec:72:
         35:de:9f:7e:c0:f1:b6:2b:24:fa:d3:18:05:e1:7e:32:b3:b8:
         68:43:83:35:12:da:09:ca:77:ce:62:02:e5:41:9f:0d:e0:b3:
         ba:97:51:b6:16:3c:75:fe:02:75:68:cf:96:b9:97:d4:53:0a:
         05:a1:83:57:6c:fd:40:34:b9:a3:44:f3:82:25:ce:e3:c9:29:
         5d:ab:f4:1e:95:13:fd:7a:62:4c:ae:6f:70:44:17:cf:0e:21:
         c7:27:58:f5:33:b3:be:49:b8:3d:70:3c:ba:bc:ba:25:e8:86:
         45:5e:76:43:38:96:52:a8:30:73:3e:38:47:5e:c2:ee:c6:73:
         f8:a8:75:67:68:4a:11:93:2d:64:52:04:23:64:14:02:cc:a5:
         13:f7:68:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxdXLUIbzHQLoA5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0ZDcxNjYtNTQxYy00NDUyLThmM2UtMDJkZDNjZDgz
YjljMB4XDTI2MDIyMjAzMDEwNloXDTI2MDUyMzAyMDEwNlowLzEtMCsGA1UEAxMk
Y2M1YjMyYjktNWIwMS00ZDM0LWI2NmMtZDRmMmU2MGFlMWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL+j55wFWCw2PpzyoGJZk84zUWlwwXp9RSad
qncPG31KgqE446QVdRWH7om+XIc/a1xZZj3ljGvF6uPe3chgVUmHKihbpWKkwitG
jeU5s3i49eIvijR85Lpb8hXIqcYJs7lvlw5FKXxtceE1/YC2/CiJgMeS1CB5Xin0
cQnxTiIQIw/h1cT8AWzUHoqk/zuLoO3fTPXplfMCqTS+7dyMMyWl50CYVa3CtKtE
v0W/OEnHufZZJQ9R1Vo3xp4Cvy/ujX5/uETUyYGXx9hQCjZm2jVDFChMN5JOlol/
natk7GMpeu/NByH2YFv9muKUpDdaPedbSmK1rc4igcGVCXA8vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRLxo/8m9eCWhqfKx+oDJ47Ej3UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZjRk
NzE2Ni01NDFjLTQ0NTItOGYzZS0wMmRkM2NkODNiOWMvOGJiOGM0ZTQtNmEzMi0z
ZjRhLThmNzEtZmMzZjQ1YzQyZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmY0ZDcxNjYtNTQxYy00NDUyLThm
M2UtMDJkZDNjZDgzYjljLzJmNGQ3MTY2LTU0MWMtNDQ1Mi04ZjNlLTAyZGQzY2Q4
M2I5Yy5jcmwwHwYDVR0jBBgwFoAUxFhQfeLwyHW4+h/VQ953KuJ6O0EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZjRkNzE2Ni01NDFjLTQ0NTItOGYzZS0wMmRk
M2NkODNiOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/RPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4diYw6gLeTYD90yIb3hQLKs1PKq5ZNR8/Tdmhox4ztAvS27DeXgFn/
bIOWA+YGzUyXKnvPhna/iPkCQgkrgBrZikI9bRJ7KcgThxQjH1hAkAyB18mxQIwp
hhJD23iAuoRcPaZL74D4bevscjXen37A8bYrJPrTGAXhfjKzuGhDgzUS2gnKd85i
AuVBnw3gs7qXUbYWPHX+AnVoz5a5l9RTCgWhg1ds/UA0uaNE84IlzuPJKV2r9B6V
E/16Ykyub3BEF88OIccnWPUzs75JuD1wPLq8uiXohkVedkM4llKoMHM+OEdewu7G
c/iodWdoShGTLWRSBCNkFALMpRP3aJ4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:48 2026 by rpki-client