Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ead2a773-fde3-377f-8da5-a58361b3468c.roa
File:                     ead2a773-fde3-377f-8da5-a58361b3468c.roa (raw, json)
Hash identifier:          J3WZN5kaPkFLKyPhINlo6saDSNRuDQ7vhnwjY0b6YhA=
Subject key identifier:   BE:81:0A:53:41:BE:D8:A5:C6:C6:71:CB:4C:72:AA:06:6D:AE:30:03
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584DA6B013C4113D9406E8D24CD0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ead2a773-fde3-377f-8da5-a58361b3468c.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     2495
IP address blocks:        198.248.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:13:c4:11:3d:94:06:e8:d2:4c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3299b434-3025-4649-846d-559064cfb264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:0c:eb:99:b1:ba:d7:1f:71:4c:2f:bc:6b:
                    ab:88:3f:1f:c5:74:66:92:8a:08:36:d5:4d:5a:9c:
                    3d:ed:07:ce:59:c0:f9:32:3c:89:ef:a6:f3:50:a7:
                    fe:09:c8:08:fa:34:0d:db:42:7f:fd:76:70:08:5c:
                    66:7e:14:82:b0:b6:3b:8b:da:51:77:1f:8f:7c:5c:
                    ca:b8:cc:fa:8b:03:77:b5:35:68:fc:8d:82:fc:01:
                    8c:34:5e:00:3a:87:50:57:6e:69:ee:bd:78:29:1c:
                    27:92:14:75:2b:cb:d3:3a:38:6c:02:c8:a6:07:9d:
                    b8:ef:7d:89:26:b8:1d:3b:b6:76:b6:15:a3:a9:ae:
                    97:e1:e9:2f:a2:8c:8d:e6:6f:2f:2b:ce:dd:84:05:
                    fb:94:5c:3e:1a:b4:45:b1:92:36:01:64:57:02:c3:
                    51:3a:3e:19:6d:7a:3b:cf:ea:c0:9b:b7:d7:d4:02:
                    5c:fa:76:51:e4:b5:d4:fd:63:b5:5b:bd:cb:37:95:
                    72:f1:1c:eb:98:87:c1:30:88:32:86:cb:96:31:aa:
                    a9:20:14:f4:ed:af:ca:6a:67:93:08:22:38:76:4d:
                    f7:08:59:d3:85:3c:aa:d7:f0:23:fd:db:3d:45:ff:
                    88:87:c9:db:c1:07:2c:a6:f3:68:6f:15:cd:a9:ec:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:0A:53:41:BE:D8:A5:C6:C6:71:CB:4C:72:AA:06:6D:AE:30:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ead2a773-fde3-377f-8da5-a58361b3468c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:11:21:15:e7:18:9e:6e:09:ad:f6:3d:db:9a:0a:07:1a:f2:
         ea:9a:7d:df:cc:ef:5b:4b:9d:e2:c4:2c:31:11:e3:40:d6:23:
         28:e3:5c:65:f3:5d:77:0c:bf:d0:e9:d7:ac:21:34:46:cc:67:
         b5:b6:27:3a:38:e9:92:9a:56:c4:58:cd:0c:d7:1b:d7:d4:ed:
         4e:1d:32:43:74:87:39:79:2f:ac:eb:80:67:b3:92:2e:6c:b6:
         7e:91:18:57:6e:aa:e6:f6:41:7c:6b:14:7d:5e:e7:b8:52:ba:
         53:06:a8:51:6e:f5:a1:ab:ee:31:7e:d0:1a:fd:d8:26:d4:1d:
         ba:b5:31:bc:f5:32:46:23:34:b6:85:35:d3:38:49:b6:0a:88:
         20:62:48:83:7c:6f:00:50:0d:ff:ef:82:bb:10:08:4b:72:51:
         6b:1d:51:23:d4:f2:05:cf:d9:23:b6:38:b1:3a:34:62:6c:f0:
         f2:db:2a:16:93:5d:f0:81:32:dd:da:86:d9:9f:fb:81:53:5c:
         92:33:71:53:07:c9:2d:7d:f5:87:c0:43:b9:ea:bc:b9:84:cc:
         d5:30:d7:52:c4:e9:d8:f5:50:6e:e5:3e:9a:55:05:a8:ad:6f:
         2d:f5:8a:a6:4e:32:2c:ef:d5:48:61:54:c1:8e:52:da:49:51:
         c6:e4:23:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBPEET2UBujSTNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
MzI5OWI0MzQtMzAyNS00NjQ5LTg0NmQtNTU5MDY0Y2ZiMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4YM65mxutcfcUwvvGuriD8fxXRmkooINtVN
Wpw97QfOWcD5MjyJ76bzUKf+CcgI+jQN20J//XZwCFxmfhSCsLY7i9pRdx+PfFzK
uMz6iwN3tTVo/I2C/AGMNF4AOodQV25p7r14KRwnkhR1K8vTOjhsAsimB524732J
JrgdO7Z2thWjqa6X4ekvooyN5m8vK87dhAX7lFw+GrRFsZI2AWRXAsNROj4ZbXo7
z+rAm7fX1AJc+nZR5LXU/WO1W73LN5Vy8RzrmIfBMIgyhsuWMaqpIBT07a/KameT
CCI4dk33CFnThTyq1/Aj/ds9Rf+Ih8nbwQcspvNobxXNqexWGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6BClNBvtilxsZxy0xyqgZtrjADMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZWFkMmE3NzMtZmRlMy0z
NzdmLThkYTUtYTU4MzYxYjM0NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALERIRXnGJ5uCa32PduaCgca8uqafd/M71tLneLELDER40DWIyjjXGXz
XXcMv9Dp16whNEbMZ7W2Jzo46ZKaVsRYzQzXG9fU7U4dMkN0hzl5L6zrgGezki5s
tn6RGFduqub2QXxrFH1e57hSulMGqFFu9aGr7jF+0Br92CbUHbq1Mbz1MkYjNLaF
NdM4SbYKiCBiSIN8bwBQDf/vgrsQCEtyUWsdUSPU8gXP2SO2OLE6NGJs8PLbKhaT
XfCBMt3ahtmf+4FTXJIzcVMHyS199YfAQ7nqvLmEzNUw11LE6dj1UG7lPppVBait
by31iqZOMizv1UhhVMGOUtpJUcbkI0Q=
-----END CERTIFICATE-----
Generated at Wed Apr 29 19:24:32 2026 by rpki-client