Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa
File:                     d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa (raw, json)
Hash identifier:          k4j+Tqdq69mE0tEuOyw8mBCXGm/zPkCHrEU35eE1N3Y=
Subject key identifier:   D6:97:0E:DE:AB:85:CD:E1:7B:E9:E6:7C:CB:EF:EB:CC:41:D7:25:F2
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584E86F4EF914D7682AC611ADD8D
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     2495
IP address blocks:        198.248.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ef:91:4d:76:82:ac:61:1a:dd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=eea20c34-b9e7-414b-9581-ae33c9ac39a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:c4:3f:2f:87:f1:c0:2f:19:8a:60:df:e1:
                    36:64:0e:f2:89:b7:8f:f8:ef:15:02:93:88:45:48:
                    13:95:48:7e:56:99:f9:de:e4:ec:3a:70:75:9a:bd:
                    02:1c:32:47:5a:1a:fc:ac:dc:4a:85:52:f2:bb:56:
                    ad:6c:9f:e9:01:d5:08:79:2f:61:07:3a:cb:00:76:
                    66:95:2a:a0:e2:79:f2:5a:ad:c0:51:4c:5f:5f:3e:
                    54:10:7b:ad:9d:42:02:75:71:06:8a:97:43:61:f5:
                    bb:83:d7:d2:39:2b:6e:d3:14:b1:de:b3:b3:06:da:
                    c1:43:d1:98:99:67:9b:2c:7d:19:4c:69:d8:4c:d4:
                    7c:25:0f:71:34:39:52:29:05:f4:f0:12:86:1f:58:
                    bc:63:ae:d1:42:c1:ea:00:a0:53:19:2a:4b:f4:e2:
                    6c:26:ce:b9:74:36:61:84:6b:cc:a6:94:3e:b4:92:
                    12:df:02:94:c1:18:87:aa:fe:2c:10:e6:79:7e:e7:
                    8b:06:6a:be:49:cb:7a:5c:27:cf:bf:c1:45:f6:67:
                    c5:aa:bd:60:ac:14:e3:02:13:90:d5:fc:04:d0:25:
                    03:48:21:6f:60:a5:37:7b:f4:e0:de:19:fb:8c:94:
                    b3:1e:31:ce:52:7a:18:38:eb:58:37:aa:47:72:69:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:0E:DE:AB:85:CD:E1:7B:E9:E6:7C:CB:EF:EB:CC:41:D7:25:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:32:fa:a5:4c:cd:47:35:c4:7b:eb:8c:0c:8a:d7:c4:02:
         24:6d:76:59:59:3e:03:92:3e:ca:09:14:9d:e9:a3:95:18:bb:
         c8:c8:7a:5a:cd:cc:b5:93:a6:75:52:9d:8a:61:12:e7:ca:6b:
         33:fc:79:6e:ce:22:59:ea:04:29:22:ac:ca:28:c7:41:f6:8c:
         df:fc:70:73:71:51:87:a1:0b:67:ab:15:da:fd:88:c3:34:f0:
         6a:ff:62:97:ca:a3:23:20:a7:51:a5:22:ef:61:8d:3a:22:2f:
         6b:c3:33:5e:9b:20:28:81:db:d3:28:67:c0:1e:cb:06:3f:3f:
         10:a6:36:a3:1b:65:dd:d6:cb:70:d0:4f:ab:2d:ab:8b:d4:0f:
         20:96:cb:69:4e:ef:d5:5b:9e:a6:cc:ea:59:bd:c0:1b:ec:8b:
         bc:f1:e2:a4:7a:02:e9:56:55:9f:86:9a:77:fa:f6:70:8b:87:
         57:6b:c6:0a:5d:46:da:35:95:41:5f:5c:94:2f:e7:c6:9f:e2:
         17:3a:16:13:28:8c:95:e4:06:00:34:28:20:6b:db:55:38:cd:
         e4:0f:c0:2d:6a:81:7d:b6:6c:67:1e:85:99:57:37:32:c8:e2:
         b7:a8:1e:97:a8:07:4c:83:23:17:2d:ce:ee:b0:4b:5c:ab:d4:
         83:ec:c0:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9O+RTXaCrGEa3Y0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
ZWVhMjBjMzQtYjllNy00MTRiLTk1ODEtYWUzM2M5YWMzOWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0HEPy+H8cAvGYpg3+E2ZA7yibeP+O8VApOI
RUgTlUh+Vpn53uTsOnB1mr0CHDJHWhr8rNxKhVLyu1atbJ/pAdUIeS9hBzrLAHZm
lSqg4nnyWq3AUUxfXz5UEHutnUICdXEGipdDYfW7g9fSOStu0xSx3rOzBtrBQ9GY
mWebLH0ZTGnYTNR8JQ9xNDlSKQX08BKGH1i8Y67RQsHqAKBTGSpL9OJsJs65dDZh
hGvMppQ+tJIS3wKUwRiHqv4sEOZ5fueLBmq+Sct6XCfPv8FF9mfFqr1grBTjAhOQ
1fwE0CUDSCFvYKU3e/Tg3hn7jJSzHjHOUnoYOOtYN6pHcmkyvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaXDt6rhc3he+nmfMvv68xB1yXyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZDAyNjY2YTYtNjVjZS0z
Y2E1LWI0NDktN2MwYzJmNjNkZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxviYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4sMvqlTM1HNcR764wMitfEAiRtdllZPgOSPsoJFJ3po5UYu8jIelrN
zLWTpnVSnYphEufKazP8eW7OIlnqBCkirMoox0H2jN/8cHNxUYehC2erFdr9iMM0
8Gr/YpfKoyMgp1GlIu9hjToiL2vDM16bICiB29MoZ8AeywY/PxCmNqMbZd3Wy3DQ
T6stq4vUDyCWy2lO79VbnqbM6lm9wBvsi7zx4qR6AulWVZ+Gmnf69nCLh1drxgpd
Rto1lUFfXJQv58af4hc6FhMojJXkBgA0KCBr21U4zeQPwC1qgX22bGcehZlXNzLI
4reoHpeoB0yDIxctzu6wS1yr1IPswF8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:25 2026 by rpki-client