Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa
File:                     d8ec290c-925e-31d6-8996-1edd8ee927ed.roa (raw, json)
Hash identifier:          jcHlZysV5UqW3zTDZdnhEnN10DjLNgIPEFaQPcLrRoM=
Subject key identifier:   EC:66:F1:DC:EA:91:70:40:A6:7A:86:A7:30:C8:D6:69:C6:CD:AC:0F
Certificate issuer:       /CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
Certificate serial:       010D0C9F4328584D2644C7900C67970BE3EE7300
Authority key identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     19189
IP address blocks:        198.148.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c7:90:0c:67:97:0b:e3:ee:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=87043b3e-ff6e-48c4-ac50-0be8cc6c4c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:c5:ee:2d:9c:81:2f:20:89:e1:6f:c8:20:
                    be:75:93:9e:61:12:c1:d6:53:48:f1:89:18:b8:09:
                    9b:d8:ad:94:c8:21:65:5e:18:d3:b0:63:02:e0:9c:
                    16:f1:29:c2:c1:c0:23:44:fa:30:49:ec:cf:86:23:
                    98:65:6d:f0:cf:b5:32:56:30:eb:d5:8f:6d:67:4b:
                    c7:dc:13:4b:69:5b:61:78:7d:d1:ab:b6:58:a3:33:
                    61:20:84:81:01:2b:0d:61:91:ab:cc:53:40:c0:a6:
                    e9:72:18:ab:da:1d:b1:7b:ca:8a:e5:d9:0d:89:a0:
                    f5:61:d6:b5:c0:d4:13:80:07:11:8c:fe:d0:bd:f5:
                    32:9b:b6:aa:d0:c7:3b:a0:dd:9e:56:f5:1a:35:dc:
                    8f:dd:68:80:d2:9a:0e:f2:69:45:e4:ed:9c:a1:0b:
                    dd:92:72:97:b4:20:0d:5f:f8:26:0d:a8:0d:b1:59:
                    0e:d1:d6:21:73:0b:da:b4:29:38:7d:af:85:4d:3d:
                    38:d2:da:d2:7c:06:ad:d8:07:4d:9c:94:1f:99:2e:
                    c6:79:46:12:53:fd:47:f9:0c:ba:19:29:49:95:34:
                    73:c9:58:f0:1c:6a:7d:05:fd:db:b4:a4:69:15:52:
                    2d:ae:7a:3e:ed:ef:c2:01:3a:d0:4e:4e:53:d4:a2:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:66:F1:DC:EA:91:70:40:A6:7A:86:A7:30:C8:D6:69:C6:CD:AC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:73:46:62:01:5a:ab:66:e3:eb:34:1e:65:b1:29:e6:6c:69:
         a6:f9:be:a2:7b:ed:76:8c:4b:09:d1:8a:02:a1:aa:92:38:f0:
         e0:df:98:b5:d5:36:ce:08:ae:8c:be:2d:be:ae:e9:bc:85:0a:
         e6:ce:ff:e8:68:2b:4e:b8:33:ef:a8:f9:de:9e:e0:fd:1a:d3:
         a1:68:c8:16:00:58:b7:db:2f:64:e7:8a:78:2f:e0:60:e9:ba:
         12:4d:b8:92:96:61:00:94:97:c1:cb:65:88:5b:a3:dc:b1:38:
         78:a8:9f:2d:86:32:16:7a:da:51:3c:6a:23:2e:f8:a3:02:b8:
         10:f6:b0:64:f5:99:01:ba:72:23:c7:60:6d:3c:a9:89:0b:91:
         8c:92:ae:e8:58:d5:24:a7:f5:86:c9:7a:1b:ad:6c:8a:04:4c:
         da:1a:0c:ed:39:b1:7e:30:60:09:72:41:3e:13:fc:9d:72:a4:
         9a:96:8c:5b:04:ae:f1:75:29:cd:41:c0:dc:fe:fa:4d:a3:53:
         59:6a:63:7b:d6:43:bd:5b:7f:ea:cc:fd:98:0c:64:fc:c6:c9:
         26:e6:6c:cb:de:d2:0c:b9:a8:3e:79:bd:a2:23:c8:5a:23:a1:
         9e:cd:7c:e4:f7:f3:9e:5b:b7:f7:a7:34:f4:8a:9c:79:b2:30:
         7e:3b:9e:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMeQDGeXC+PucwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNjNDlkMmYtMzNmMC00MmY3LWJjNjEtYjQxODdkZDE1
NWE4MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ODcwNDNiM2UtZmY2ZS00OGM0LWFjNTAtMGJlOGNjNmM0YzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJPF7i2cgS8gieFvyCC+dZOeYRLB1lNI8YkY
uAmb2K2UyCFlXhjTsGMC4JwW8SnCwcAjRPowSezPhiOYZW3wz7UyVjDr1Y9tZ0vH
3BNLaVtheH3Rq7ZYozNhIISBASsNYZGrzFNAwKbpchir2h2xe8qK5dkNiaD1Yda1
wNQTgAcRjP7QvfUym7aq0Mc7oN2eVvUaNdyP3WiA0poO8mlF5O2coQvdknKXtCAN
X/gmDagNsVkO0dYhcwvatCk4fa+FTT040trSfAat2AdNnJQfmS7GeUYSU/1H+Qy6
GSlJlTRzyVjwHGp9Bf3btKRpFVItrno+7e/CATrQTk5T1KKsYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxm8dzqkXBApnqGpzDI1mnGzawPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iY2M0
OWQyZi0zM2YwLTQyZjctYmM2MS1iNDE4N2RkMTU1YTgvZDhlYzI5MGMtOTI1ZS0z
MWQ2LTg5OTYtMWVkZDhlZTkyN2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmNjNDlkMmYtMzNmMC00MmY3LWJj
NjEtYjQxODdkZDE1NWE4L2JjYzQ5ZDJmLTMzZjAtNDJmNy1iYzYxLWI0MTg3ZGQx
NTVhOC5jcmwwHwYDVR0jBBgwFoAU1B7WMnAssvAh8aCR/IgOcmJyThYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iY2M0OWQyZi0zM2YwLTQyZjctYmM2MS1iNDE4
N2RkMTU1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpQaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdzRmIBWqtm4+s0HmWxKeZsaab5vqJ77XaMSwnRigKhqpI48ODfmLXV
Ns4Iroy+Lb6u6byFCubO/+hoK064M++o+d6e4P0a06FoyBYAWLfbL2Tningv4GDp
uhJNuJKWYQCUl8HLZYhbo9yxOHiony2GMhZ62lE8aiMu+KMCuBD2sGT1mQG6ciPH
YG08qYkLkYySruhY1SSn9YbJehutbIoETNoaDO05sX4wYAlyQT4T/J1ypJqWjFsE
rvF1Kc1BwNz++k2jU1lqY3vWQ71bf+rM/ZgMZPzGySbmbMve0gy5qD55vaIjyFoj
oZ7NfOT3855bt/enNPSKnHmyMH47nu4=
-----END CERTIFICATE-----
Generated at Tue Mar 17 00:43:47 2026 by rpki-client