Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa
File:                     889a674f-b7ab-3a50-94db-75ada2818b38.roa (raw, json)
Hash identifier:          U7wZZwhzJMmTXqk8vQIUBj9z4SFxWneY9mqqOzI1QUA=
Subject key identifier:   D3:2D:55:72:B1:6C:35:7F:AF:AA:51:63:F3:E8:9B:3A:D6:DC:32:FD
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584CD4076808C2C3B97A6B6694A8
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     2920
IP address blocks:        198.188.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:68:08:c2:c3:b9:7a:6b:66:94:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=c2c97981-ecd5-44f3-a4a3-3da3b938510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:24:ad:72:0a:bb:11:ba:79:31:3d:73:2d:
                    4c:7c:c3:74:93:2e:89:5f:1e:24:91:3b:ed:0d:be:
                    2e:90:03:52:ae:19:00:00:58:cf:6f:8a:4b:fb:c1:
                    5a:4a:3a:86:e2:09:7e:42:12:c3:96:f7:11:6b:1c:
                    ae:e1:b1:4c:26:6d:74:6d:2c:27:00:61:f9:44:3e:
                    f5:12:b4:5e:62:74:58:9d:27:5e:20:3c:74:e0:5e:
                    e7:91:c0:91:b9:53:f5:b2:44:0c:4c:1e:35:63:1b:
                    ef:50:7d:40:ff:69:71:a4:8d:72:85:38:07:fb:8a:
                    67:ea:e5:5d:f3:1a:5b:bb:b1:06:6e:a5:28:e9:f8:
                    e1:53:98:9f:77:30:8b:45:d4:44:0b:5e:15:5a:e1:
                    5a:95:bd:08:da:d3:f9:28:1d:dc:3d:86:dc:4f:ad:
                    b2:10:ee:65:9f:77:0b:c2:2b:da:74:a9:ee:76:f7:
                    ec:ba:f0:f4:e2:3e:e1:c0:d7:0a:a7:b7:04:e5:0f:
                    dc:0f:cd:68:c4:0d:e2:f6:66:69:88:75:b1:50:71:
                    2e:56:23:ce:ec:a7:f8:22:a4:8e:46:9d:dd:a4:e8:
                    ad:0a:78:f3:b3:5f:56:be:61:39:85:37:5d:8d:08:
                    ea:90:53:8f:8f:9c:92:ce:c8:e3:70:9c:ff:ef:f6:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2D:55:72:B1:6C:35:7F:AF:AA:51:63:F3:E8:9B:3A:D6:DC:32:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.188.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:53:51:c7:8e:6b:6b:f7:ee:b4:09:fc:3b:52:9c:fa:d3:80:
         de:83:d4:ac:09:2f:71:75:7b:dd:b2:dc:04:85:e0:82:62:d0:
         bc:f7:aa:08:1f:2a:0e:1e:23:5a:22:07:cd:7a:c0:be:ed:1f:
         1e:9e:ae:a6:19:77:c8:8f:57:84:26:18:b8:5b:d7:aa:e0:60:
         a7:0b:b7:bc:74:5b:f1:9c:a3:80:1e:f6:f5:4c:01:72:b2:7d:
         84:e5:c2:b3:2e:a0:f6:bd:8d:a0:18:ad:72:77:96:4d:73:1d:
         d6:b9:5c:a1:49:d5:f4:4b:1e:6c:dd:52:61:76:53:88:82:0e:
         0f:8b:3b:b3:37:e6:95:a8:91:e6:2e:5d:b2:5d:d5:6e:da:ba:
         e1:83:5b:cd:4c:fc:99:48:19:9d:df:5d:61:cf:85:22:64:be:
         b1:17:52:5a:f8:ba:07:30:c3:36:73:e0:60:62:f1:2a:51:15:
         44:4e:7b:44:51:5f:bd:5d:2f:0f:6c:6e:87:f2:c6:2e:98:4b:
         3c:1b:04:24:13:17:05:cd:7e:eb:47:53:3c:79:0b:0d:13:cb:
         53:9c:5c:e0:1c:76:77:11:c8:c8:d9:4e:f0:90:fb:f3:af:ad:
         47:25:70:47:f9:68:41:c1:69:72:f5:a9:78:a9:24:dd:95:bc:
         94:a9:cf:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2gIwsO5emtmlKgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
YzJjOTc5ODEtZWNkNS00NGYzLWE0YTMtM2RhM2I5Mzg1MTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsockrXIKuxG6eTE9cy1MfMN0ky6JXx4kkTvt
Db4ukANSrhkAAFjPb4pL+8FaSjqG4gl+QhLDlvcRaxyu4bFMJm10bSwnAGH5RD71
ErReYnRYnSdeIDx04F7nkcCRuVP1skQMTB41YxvvUH1A/2lxpI1yhTgH+4pn6uVd
8xpbu7EGbqUo6fjhU5ifdzCLRdREC14VWuFalb0I2tP5KB3cPYbcT62yEO5ln3cL
wivadKnudvfsuvD04j7hwNcKp7cE5Q/cD81oxA3i9mZpiHWxUHEuViPO7Kf4IqSO
Rp3dpOitCnjzs19WvmE5hTddjQjqkFOPj5ySzsjjcJz/7/bZewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMtVXKxbDV/r6pRY/PomzrW3DL9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvODg5YTY3NGYtYjdhYi0z
YTUwLTk0ZGItNzVhZGEyODE4YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARTUceOa2v37rQJ/DtSnPrTgN6D1KwJL3F1e92y3ASF4IJi0Lz3qggf
Kg4eI1oiB816wL7tHx6erqYZd8iPV4QmGLhb16rgYKcLt7x0W/Gco4Ae9vVMAXKy
fYTlwrMuoPa9jaAYrXJ3lk1zHda5XKFJ1fRLHmzdUmF2U4iCDg+LO7M35pWokeYu
XbJd1W7auuGDW81M/JlIGZ3fXWHPhSJkvrEXUlr4ugcwwzZz4GBi8SpRFUROe0RR
X71dLw9sbofyxi6YSzwbBCQTFwXNfutHUzx5Cw0Ty1OcXOAcdncRyMjZTvCQ+/Ov
rUclcEf5aEHBaXL1qXipJN2VvJSpzz0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:09 2026 by rpki-client