Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/796421fa-3367-375a-a8d6-4772d5e6ab65.roa
File:                     796421fa-3367-375a-a8d6-4772d5e6ab65.roa (raw, json)
Hash identifier:          9MIUtK+Q3brZiulrvw9X/Tyv5otK7IP+sw1qEPOZ2b8=
Subject key identifier:   2F:F3:AF:38:19:CE:A8:FD:EC:62:DB:19:73:7A:92:D9:EF:4E:8A:7F
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584D3F64DDB653E2FCEB3F5EA600
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/796421fa-3367-375a-a8d6-4772d5e6ab65.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     2495
IP address blocks:        198.248.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:dd:b6:53:e2:fc:eb:3f:5e:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=02690c94-7f08-4456-8f05-6e5f2fbc0d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:aa:ea:3b:53:54:48:b2:47:f9:86:f4:2c:
                    ed:ff:c3:66:88:54:98:19:01:fd:55:b0:c6:90:a6:
                    43:7b:a0:5c:2c:f1:5c:06:aa:ce:db:8c:f3:d4:1c:
                    d4:0f:47:0c:c0:21:34:ad:6e:88:24:bb:6e:0e:34:
                    b4:31:d0:83:b7:d6:55:8b:57:dd:83:a4:e0:a2:ee:
                    67:28:43:06:6e:8c:bb:64:fb:09:76:73:08:d3:00:
                    81:95:26:e0:cc:44:e8:c7:04:c9:d9:0a:bf:d9:b8:
                    42:a6:1e:20:2d:26:25:5d:51:99:71:3d:06:2f:47:
                    ed:2e:4a:0c:18:c9:d7:a3:d7:e4:c4:f8:4c:b1:fc:
                    3d:ce:cb:1b:6c:35:5b:28:d6:cf:3a:f2:9b:9c:6a:
                    c8:d4:a1:f6:5a:d3:73:c4:d4:fa:66:a3:ce:f8:e6:
                    53:1e:a7:27:6d:8d:14:83:33:5c:93:31:b5:a3:71:
                    59:ad:39:1d:6d:9b:f8:7d:31:7a:3a:3d:eb:a8:21:
                    77:58:2d:3f:55:bb:9f:5c:62:46:e1:88:da:da:a8:
                    12:2d:8e:c6:b2:90:a7:98:4f:95:27:df:01:83:20:
                    2c:a6:3f:d5:88:b9:df:99:c9:14:41:31:52:d0:0e:
                    82:be:66:71:1b:b4:04:85:7f:32:d2:01:07:b0:ac:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:AF:38:19:CE:A8:FD:EC:62:DB:19:73:7A:92:D9:EF:4E:8A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/796421fa-3367-375a-a8d6-4772d5e6ab65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:17:24:1e:c4:13:87:05:75:90:b4:f4:27:30:fd:de:05:04:
         f4:79:a0:e1:0b:f2:5d:c6:59:40:38:70:59:e3:aa:db:c6:7d:
         60:9b:3c:51:ac:fb:fa:6f:6f:34:aa:7a:e4:27:2a:49:43:86:
         ce:88:4e:65:33:4a:5c:b5:d0:67:ca:6c:0c:e0:6e:7b:9c:4c:
         37:fb:08:06:f4:79:04:df:3c:df:d3:26:23:c8:4f:0e:01:f3:
         c2:83:67:74:02:a4:6a:8d:bf:39:a9:8a:9b:05:68:0c:e5:9a:
         04:e4:eb:d7:9c:ce:8c:09:57:ad:0e:49:18:b2:bc:b0:83:5b:
         31:b6:9f:3c:cb:c8:2c:76:26:c1:b5:5b:e0:c4:11:0d:6f:ca:
         67:a9:8a:c3:93:14:70:16:30:fe:c3:48:d2:44:0a:1b:cb:4d:
         a7:e6:3f:73:3d:c1:a9:d5:de:e4:b3:63:7c:a2:a1:f6:9b:51:
         83:71:5d:be:ff:cd:69:1b:23:88:2d:4a:c4:bc:9d:d8:70:17:
         27:14:23:c2:48:88:25:a6:fd:3f:79:fc:9b:62:d5:1f:9e:1f:
         cf:66:0d:30:a4:d4:02:f5:33:54:18:23:33:0e:68:b2:13:36:
         6e:a4:43:2f:14:e4:96:1f:63:f3:50:5d:ae:e9:09:86:19:dd:
         3c:53:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:59 2026 by rpki-client