Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa
File:                     ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa (raw, json)
Hash identifier:          ydRRL0Zwmp1Yf/jlAEKf3L59ojVNEn7p67/lEc5CHt0=
Subject key identifier:   2D:27:77:A5:26:4F:81:84:B2:31:B8:9E:24:CA:42:4F:5A:66:7A:2D
Certificate issuer:       /CN=5f4c623c-0d0c-4995-9560-0507df4828e8
Certificate serial:       010D0C9F4328584FC4667E6BF7896828BFBA0500
Authority key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa
Signing time:             Sun 08 Nov 2026 02:00:13 +0000
ROA not before:           Sun 08 Nov 2026 02:00:13 +0000
ROA not after:            Sat 06 Feb 2027 02:00:13 +0000
asID:                     54900
IP address blocks:        198.204.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c4:66:7e:6b:f7:89:68:28:bf:ba:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4c623c-0d0c-4995-9560-0507df4828e8
        Validity
            Not Before: Nov  8 02:00:13 2026 GMT
            Not After : Feb  6 02:00:13 2027 GMT
        Subject: CN=7e7e267c-e966-499b-9f3e-73ee13639381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:4d:fd:26:1d:cd:e0:0a:78:71:33:ff:ee:
                    28:fe:9c:b9:bc:c1:d0:80:c4:91:9a:5d:23:36:e7:
                    60:44:d7:97:87:a2:49:b4:1c:54:5d:f7:c5:24:bd:
                    30:12:c2:e6:73:e0:55:cd:2f:43:de:56:c5:83:7b:
                    19:22:87:77:56:26:7c:e0:7d:60:2f:ad:77:1d:fa:
                    16:08:0e:4a:7e:70:4b:65:fc:e0:94:67:86:c3:f3:
                    79:c2:1d:ed:ff:62:84:09:ff:c9:7a:75:06:95:36:
                    52:6d:69:19:10:b8:a8:6e:67:3e:4e:53:44:fd:7d:
                    7d:dd:77:f3:08:95:97:20:e6:73:ae:7f:92:47:a0:
                    49:b0:31:fb:97:00:56:38:af:c5:3e:65:fd:6f:25:
                    5c:00:28:e8:30:fa:d1:b3:7d:9c:fd:03:7b:f0:75:
                    c2:3e:cf:72:45:01:e6:82:23:2c:a6:e5:fe:44:d1:
                    0a:84:76:b2:ac:1c:9c:57:be:87:b8:f8:cf:bf:15:
                    df:ac:19:b4:13:28:9d:c2:47:33:c0:d5:37:c3:01:
                    ba:7e:7e:78:88:85:b2:ee:d2:53:fc:5d:3a:ad:dd:
                    c2:ff:4a:47:f4:5b:a3:bf:e6:40:09:b2:0a:eb:40:
                    86:de:28:2b:c9:c7:0e:f9:92:1c:4e:70:b4:e6:bd:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:77:A5:26:4F:81:84:B2:31:B8:9E:24:CA:42:4F:5A:66:7A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl

            X509v3 Authority Key Identifier:
                keyid:0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:ce:40:05:87:3e:a6:d1:6e:5c:88:4e:05:9c:4f:a3:d6:
         7d:0a:db:c2:94:03:74:d1:89:80:bf:79:21:2f:b5:d5:ce:1e:
         14:d6:af:4d:4f:ec:8f:f8:ed:34:cd:64:f8:13:4c:a5:54:11:
         2b:94:a9:32:39:85:65:13:ca:52:eb:8a:57:ba:7d:71:56:5b:
         8a:ac:ef:26:3f:6c:c8:ae:a9:11:79:d4:0c:b8:e7:18:d1:6b:
         46:17:90:28:b5:cf:8d:e2:49:2a:25:2c:de:0d:98:b9:e8:4c:
         b1:7d:dc:ff:ed:27:be:e8:72:0a:1e:ab:45:1d:c9:29:e3:a0:
         d9:9e:3f:ce:52:06:56:56:59:96:c1:0a:52:e0:00:22:0f:11:
         72:b6:08:a3:7c:e8:ee:72:36:bb:5b:cd:3b:ee:ee:46:4d:cb:
         4f:8c:ee:19:c5:c8:c4:32:86:3e:42:b6:03:96:b0:81:ad:c5:
         d9:eb:62:10:a6:b6:52:18:c0:18:87:91:24:4c:a9:06:a2:cd:
         d3:cf:00:ed:63:7f:46:5e:f5:11:88:cc:24:bc:27:25:ac:ab:
         56:8e:c0:41:a9:f4:c5:b2:7c:0c:e4:e1:68:e0:fe:0d:c8:b3:
         0d:2c:56:e9:aa:51:18:33:84:a4:15:88:82:ae:1e:24:b9:cb:
         81:8f:96:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZn5r94loKL+6BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY0YzYyM2MtMGQwYy00OTk1LTk1NjAtMDUwN2RmNDgy
OGU4MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk
N2U3ZTI2N2MtZTk2Ni00OTliLTlmM2UtNzNlZTEzNjM5MzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxJN/SYdzeAKeHEz/+4o/py5vMHQgMSRml0j
NudgRNeXh6JJtBxUXffFJL0wEsLmc+BVzS9D3lbFg3sZIod3ViZ84H1gL613HfoW
CA5KfnBLZfzglGeGw/N5wh3t/2KECf/JenUGlTZSbWkZELiobmc+TlNE/X193Xfz
CJWXIOZzrn+SR6BJsDH7lwBWOK/FPmX9byVcACjoMPrRs32c/QN78HXCPs9yRQHm
giMspuX+RNEKhHayrBycV76HuPjPvxXfrBm0EyidwkczwNU3wwG6fn54iIWy7tJT
/F06rd3C/0pH9Fujv+ZACbIK60CG3igryccO+ZIcTnC05r2AkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0nd6UmT4GEsjG4niTKQk9aZnotMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRj
NjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0ODI4ZTgvZWNiYTJjZjAtOTA5ZS0z
ZjM1LWJmYmQtZmY2NDViZGI0OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWY0YzYyM2MtMGQwYy00OTk1LTk1
NjAtMDUwN2RmNDgyOGU4LzVmNGM2MjNjLTBkMGMtNDk5NS05NTYwLTA1MDdkZjQ4
MjhlOC5jcmwwHwYDVR0jBBgwFoAUCgchVVWtwwY0D+sfIO2yvzQTZ3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3
ZGY0ODI4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxsw+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqEzkAFhz6m0W5ciE4FnE+j1n0K28KUA3TRiYC/eSEvtdXOHhTWr01P
7I/47TTNZPgTTKVUESuUqTI5hWUTylLrile6fXFWW4qs7yY/bMiuqRF51Ay45xjR
a0YXkCi1z43iSSolLN4NmLnoTLF93P/tJ77ocgoeq0UdySnjoNmeP85SBlZWWZbB
ClLgACIPEXK2CKN86O5yNrtbzTvu7kZNy0+M7hnFyMQyhj5CtgOWsIGtxdnrYhCm
tlIYwBiHkSRMqQaizdPPAO1jf0Ze9RGIzCS8JyWsq1aOwEGp9MWyfAzk4Wjg/g3I
sw0sVumqURgzhKQViIKuHiS5y4GPluo=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:32 2026 by rpki-client