Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa
File:                     0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa (raw, json)
Hash identifier:          Lh1FS4dVJqESFnYMB7hPM3dsOLMiiYh9Z6+ufgL6/OY=
Subject key identifier:   F6:3B:41:2C:D7:D6:9B:A9:EC:2A:83:83:76:01:DF:6E:80:33:3D:CE
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584CD99CC57C768A0BFA2CECBC80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        208.85.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c5:7c:76:8a:0b:fa:2c:ec:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=f785a660-88ab-458b-bebf-e2095e26eef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:71:0e:d5:c0:c3:34:25:eb:da:be:d6:48:
                    7e:53:bf:65:6b:05:8b:c0:cd:2c:47:6e:c2:cc:77:
                    90:6b:ff:32:41:59:e4:c7:b9:c0:8d:84:8c:2a:1b:
                    7a:5b:6a:14:76:a2:cc:fe:c7:68:8b:0f:a8:be:87:
                    83:51:24:13:2d:93:d9:6e:21:f3:b7:26:79:20:81:
                    a1:0d:b9:3c:3c:25:87:36:37:a6:1d:43:c5:1a:bf:
                    11:03:03:4a:02:4b:4e:e5:6c:37:68:e0:25:4c:a6:
                    cd:45:7f:1b:b5:31:b1:95:86:cf:fb:0c:a7:eb:e0:
                    94:b4:ea:77:87:24:97:32:51:7d:43:d1:5d:8a:9d:
                    98:9f:e0:03:e8:38:d3:62:ea:b9:22:d3:82:54:b5:
                    b0:79:f8:6e:4d:fa:bd:f3:9f:a0:ad:6e:d3:c1:49:
                    ac:47:49:26:84:f9:7f:e3:19:25:65:7e:11:d8:21:
                    61:c2:39:10:f1:bb:6d:f1:86:15:78:10:9a:21:37:
                    b5:e7:64:e9:c8:ba:72:fe:00:83:5b:36:2a:fa:3b:
                    2e:ce:09:91:50:1c:26:98:21:f7:0b:de:21:41:b7:
                    83:13:50:b3:f8:1f:e6:35:d5:d7:19:d7:69:f5:91:
                    00:e5:50:26:a9:7c:79:46:cf:3e:25:38:68:f8:aa:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3B:41:2C:D7:D6:9B:A9:EC:2A:83:83:76:01:DF:6E:80:33:3D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:54:47:37:31:8a:94:9c:0b:80:52:5a:69:52:0e:52:7e:
         6c:c7:d1:78:9d:d6:e2:be:37:c7:f2:2a:9f:14:93:65:cf:a1:
         c6:09:84:e2:ba:e9:6c:20:25:c4:8d:d3:71:77:e4:b7:2d:12:
         6f:b7:30:3e:1f:4d:ec:41:7c:6b:bf:2e:4d:4c:13:22:96:ce:
         f8:2e:b8:48:8e:d3:92:70:79:ac:91:c2:85:d5:a9:ec:01:b4:
         a1:20:4a:c4:82:3f:a4:65:df:2a:24:70:ca:7e:14:6b:19:5d:
         d3:8a:66:a1:c5:a2:2a:8c:10:3c:0c:ee:b6:af:61:db:8a:71:
         b9:e4:af:f5:b3:80:5a:ce:25:d8:56:d8:09:6b:4f:b1:62:fd:
         a6:34:59:e5:bd:88:ba:6b:ce:5a:07:9d:98:bf:62:ce:21:c8:
         7a:e0:30:77:1f:ed:5e:5c:fb:80:a3:b4:80:a9:6a:48:21:f3:
         0a:9d:d9:67:a8:78:68:4e:4b:f8:e4:e4:2a:c4:ed:7a:59:50:
         ea:8c:53:27:6e:81:9f:af:3f:d0:28:28:29:68:4d:a6:f8:0c:
         59:e5:62:5e:ed:a0:52:1e:b6:dd:e6:b5:13:db:f0:71:57:ce:
         d5:4a:a6:c9:d8:b8:4a:53:a7:1a:0d:58:6e:74:eb:ad:87:b7:
         ea:9c:bb:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnMV8dooL+izsvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
Zjc4NWE2NjAtODhhYi00NThiLWJlYmYtZTIwOTVlMjZlZWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXtxDtXAwzQl69q+1kh+U79lawWLwM0sR27C
zHeQa/8yQVnkx7nAjYSMKht6W2oUdqLM/sdoiw+ovoeDUSQTLZPZbiHztyZ5IIGh
Dbk8PCWHNjemHUPFGr8RAwNKAktO5Ww3aOAlTKbNRX8btTGxlYbP+wyn6+CUtOp3
hySXMlF9Q9Fdip2Yn+AD6DjTYuq5ItOCVLWwefhuTfq985+grW7TwUmsR0kmhPl/
4xklZX4R2CFhwjkQ8btt8YYVeBCaITe152TpyLpy/gCDWzYq+jsuzgmRUBwmmCH3
C94hQbeDE1Cz+B/mNdXXGddp9ZEA5VAmqXx5Rs8+JTho+KrWuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPY7QSzX1pup7CqDg3YB326AMz3OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMGE3Y2U4YTEtOWI2Ni0z
YjE3LTlhMjQtYWMwMmRiNmQ1Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKLVEc3MYqUnAuAUlppUg5SfmzH0Xid1uK+N8fyKp8Uk2XPocYJhOK6
6WwgJcSN03F35LctEm+3MD4fTexBfGu/Lk1MEyKWzvguuEiO05JweayRwoXVqewB
tKEgSsSCP6Rl3yokcMp+FGsZXdOKZqHFoiqMEDwM7ravYduKcbnkr/WzgFrOJdhW
2AlrT7Fi/aY0WeW9iLprzloHnZi/Ys4hyHrgMHcf7V5c+4CjtICpakgh8wqd2Weo
eGhOS/jk5CrE7XpZUOqMUydugZ+vP9AoKCloTab4DFnlYl7toFIett3mtRPb8HFX
ztVKpsnYuEpTpxoNWG50662Ht+qcu1g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:33 2026 by rpki-client