Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa
File:                     ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa (raw, json)
Hash identifier:          kt6f0RN+ftVKxAZ5g/P6wkha6xICN/LB+JIIIVEzIig=
Subject key identifier:   B1:09:45:A8:D4:E9:D4:59:D9:3D:94:88:C5:9D:DF:49:34:C6:EF:7E
Certificate issuer:       /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
Certificate serial:       010D0C9F4328584CDC6787B8EC4E947FB3E0B700
Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     14860
IP address blocks:        198.36.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:87:b8:ec:4e:94:7f:b3:e0:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=44909834-db6f-4258-9409-4b1e63c073d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:66:6c:fb:d5:ab:87:56:5d:af:67:59:56:
                    12:8c:eb:0d:fd:eb:88:67:bd:66:fa:4c:ed:79:c5:
                    81:24:5b:f6:42:76:2f:b0:5d:6c:f6:44:2b:69:96:
                    0c:8f:02:73:b9:c5:a5:d5:68:d8:e6:96:81:62:be:
                    a3:97:5e:20:18:e0:16:a0:ce:db:6c:39:3d:8c:58:
                    d8:35:69:28:74:b3:af:a3:8a:88:84:0b:d4:b5:95:
                    82:85:10:f5:a1:0f:12:ae:47:07:3b:58:20:cb:d2:
                    59:7d:72:6b:db:25:00:df:b9:22:d0:43:96:dd:96:
                    e7:5f:da:a2:86:4b:7c:91:49:38:e5:de:2e:b4:e3:
                    51:85:1b:e5:13:10:cd:f8:9f:55:57:c1:ba:e5:84:
                    98:47:1b:7a:a1:4c:42:02:e6:e4:51:01:45:98:fc:
                    c9:bc:fc:2b:b6:ec:61:ca:2b:f0:3d:9f:9a:86:70:
                    0a:27:f3:bb:af:22:a6:52:dd:8c:d2:10:8e:bb:1c:
                    00:d5:29:dc:31:a2:5c:e4:f7:21:6b:2b:17:b7:5e:
                    2f:ea:8b:16:e5:90:85:76:e1:d4:dc:ea:4b:70:19:
                    a3:96:8e:ee:a9:d0:0b:a3:75:47:a6:40:88:11:c1:
                    9d:c7:04:8b:06:c6:b9:dc:79:95:a3:9f:27:99:8b:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:45:A8:D4:E9:D4:59:D9:3D:94:88:C5:9D:DF:49:34:C6:EF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl

            X509v3 Authority Key Identifier:
                keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.36.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:e5:e2:4f:c3:fa:29:a9:d5:f6:33:d9:4b:d9:2a:e2:af:
         d5:be:be:e9:08:15:d2:bf:9f:41:20:cb:b1:a5:07:27:69:6e:
         af:24:74:e3:1d:01:90:19:21:69:6b:3e:08:41:1a:b7:98:2a:
         61:80:1c:43:6b:de:f5:41:be:ac:87:dd:16:92:b8:fa:ad:c6:
         3a:be:63:c5:cc:02:10:7c:1d:0a:99:6a:29:06:d5:5a:27:2e:
         89:7d:92:a1:bb:39:1f:39:6f:1c:27:11:7d:b2:69:3c:ef:37:
         66:81:33:67:92:d1:12:8c:9c:60:27:da:5f:da:14:69:26:0b:
         03:9d:77:2b:9d:bb:74:2c:ce:08:44:d9:06:d2:b9:9d:b3:8f:
         5f:1d:9e:2b:cc:03:28:16:a9:86:61:4e:2c:89:ae:c0:45:c2:
         ea:23:87:73:4d:4f:05:56:59:7f:f4:a6:69:fb:3b:cc:ad:39:
         d9:58:e7:10:ff:e9:02:96:1f:1a:1c:28:ad:f7:01:1c:17:30:
         f6:bc:2a:0c:0b:a2:8a:d0:dc:14:38:97:97:23:a1:df:5d:b3:
         cf:5e:4f:c3:cf:31:7a:67:0d:1a:23:01:d7:09:ee:a4:83:c8:
         40:15:0c:d3:65:c7:e3:82:00:cc:15:52:40:a1:0a:82:43:03:
         db:91:29:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4e47E6Uf7PgtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw
YWFjMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
NDQ5MDk4MzQtZGI2Zi00MjU4LTk0MDktNGIxZTYzYzA3M2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKtmbPvVq4dWXa9nWVYSjOsN/euIZ71m+kzt
ecWBJFv2QnYvsF1s9kQraZYMjwJzucWl1WjY5paBYr6jl14gGOAWoM7bbDk9jFjY
NWkodLOvo4qIhAvUtZWChRD1oQ8SrkcHO1ggy9JZfXJr2yUA37ki0EOW3ZbnX9qi
hkt8kUk45d4utONRhRvlExDN+J9VV8G65YSYRxt6oUxCAubkUQFFmPzJvPwrtuxh
yivwPZ+ahnAKJ/O7ryKmUt2M0hCOuxwA1SncMaJc5PchaysXt14v6osW5ZCFduHU
3OpLcBmjlo7uqdALo3VHpkCIEcGdxwSLBsa53HmVo58nmYugiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEJRajU6dRZ2T2UiMWd30k0xu9+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm
MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvY2U4OWYzNGQtMzg1MC0z
Y2YzLWI2ZjAtYjNjMDc1ZTE4NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk
MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2
MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz
YmFlNjBhYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExiQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9s5eJPw/opqdX2M9lL2Srir9W+vukIFdK/n0Egy7GlBydpbq8kdOMd
AZAZIWlrPghBGreYKmGAHENr3vVBvqyH3RaSuPqtxjq+Y8XMAhB8HQqZaikG1Von
Lol9kqG7OR85bxwnEX2yaTzvN2aBM2eS0RKMnGAn2l/aFGkmCwOddyudu3QszghE
2QbSuZ2zj18dnivMAygWqYZhTiyJrsBFwuojh3NNTwVWWX/0pmn7O8ytOdlY5xD/
6QKWHxocKK33ARwXMPa8KgwLoorQ3BQ4l5cjod9ds89eT8PPMXpnDRojAdcJ7qSD
yEAVDNNlx+OCAMwVUkChCoJDA9uRKWo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:57 2026 by rpki-client