Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa
File:                     557b0708-0206-328f-92e4-7aa700401b12.roa (raw, json)
Hash identifier:          3qMokGuaFLHFxSZq3J5xUyEwNvGov7ZXMvz+i8AYaLY=
Subject key identifier:   12:EF:07:5E:DD:A3:F8:CA:10:53:1A:37:80:93:27:1D:67:98:A2:4E
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584F7E7DAE3EF6158CDC04EC14C0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     2495
IP address blocks:        198.248.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:ae:3e:f6:15:8c:dc:04:ec:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=eea9e875-c99b-4dc1-b312-da334d379bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:93:9f:e2:c7:11:94:0f:7b:77:f9:97:35:
                    e6:a1:fb:f4:17:1c:9b:54:59:4c:16:d2:66:b8:d1:
                    63:01:2c:5f:d2:eb:e5:77:6e:de:12:14:0c:70:1c:
                    b2:d6:4c:f0:4c:a2:bd:87:3c:2f:97:91:31:d8:6e:
                    56:15:66:0e:9c:c0:62:e0:b8:c0:58:e1:9a:3f:77:
                    0a:71:11:de:70:cc:37:b8:c4:72:09:63:a7:f0:c8:
                    ef:06:96:e4:3f:65:84:13:42:8c:b4:c4:1f:88:e1:
                    26:be:24:22:9e:45:43:ad:35:57:61:1c:b8:39:99:
                    47:81:ce:51:2d:d5:89:97:59:a7:fc:5f:9d:ab:cd:
                    9a:6c:40:43:d2:83:5c:c6:39:cb:70:25:1f:08:d2:
                    20:7d:a7:94:91:f9:58:ad:2b:0a:88:33:e7:f7:0b:
                    18:07:51:44:36:47:b8:29:09:a8:01:db:80:17:c3:
                    18:92:8a:3e:e5:a6:50:86:a7:5f:47:f7:52:21:13:
                    8c:b7:ae:7a:18:90:4a:a6:56:ea:bd:a3:05:33:36:
                    5c:13:ac:ab:a6:c6:39:1a:9e:98:f9:e0:90:95:c1:
                    0e:f1:1e:d7:4a:14:38:d1:12:a7:27:e7:a0:c2:e2:
                    ee:06:f5:a8:8a:33:a1:a7:88:13:56:e0:91:07:a8:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EF:07:5E:DD:A3:F8:CA:10:53:1A:37:80:93:27:1D:67:98:A2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:78:b1:a1:1a:25:82:34:32:bc:88:38:ff:2a:c0:73:78:b5:
         40:00:37:86:0e:14:11:cf:36:0d:80:04:71:74:d7:93:1a:52:
         37:52:53:7a:c7:20:16:9a:cc:d8:38:7a:b2:0a:3f:28:33:be:
         08:2c:0a:ba:a9:8d:37:64:6e:f8:55:e5:26:b0:45:2d:8d:b0:
         a3:5b:3d:0a:ba:47:80:84:14:d8:d4:a0:db:3a:3f:c4:e5:38:
         e6:8f:38:61:5a:7c:61:52:6d:48:5d:72:31:ff:4e:7d:fe:ab:
         72:0e:f7:e2:88:c0:e2:ca:fd:7b:f9:bf:14:65:55:bf:5a:e7:
         44:fb:91:45:2f:df:dc:c4:11:93:c4:38:8b:fe:1f:e6:c9:5b:
         76:02:78:5b:5a:cd:30:ee:ea:0e:81:eb:4d:4e:9b:48:a0:6c:
         b7:63:ab:6c:e8:62:c4:c1:41:17:f1:f9:7b:01:e2:ed:e5:ad:
         52:ac:47:17:7e:ee:a6:1e:a0:a8:43:68:2b:83:6f:ec:a0:2a:
         86:87:b2:b7:09:eb:65:93:04:a6:26:ff:06:71:cb:5b:3e:0f:
         0a:1b:be:58:21:41:e2:28:4f:71:b6:7a:9d:66:46:33:98:fc:
         a5:06:c7:44:18:fe:7e:76:e2:15:59:87:48:ff:c9:c2:97:c9:
         18:65:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:14:16 2026 by rpki-client