Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/515eefd5-5f69-3f8a-9572-de7b1013f0fa.roa
File:                     515eefd5-5f69-3f8a-9572-de7b1013f0fa.roa (raw, json)
Hash identifier:          Mxae2TTZK3+UatafDtWJYRP5QcTA66kjdHIGG6psX1Q=
Subject key identifier:   1B:42:B0:B4:52:05:0D:45:CC:16:D3:2A:63:D9:8F:A5:E9:F2:16:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A873CDC55474155AF9280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/515eefd5-5f69-3f8a-9572-de7b1013f0fa.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        198.226.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:87:3c:dc:55:47:41:55:af:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=10a88f88-0027-4251-bd6e-0c744513d58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:e4:2a:b3:c3:0d:23:d6:2e:3c:5b:e9:43:
                    ee:8b:14:be:19:17:41:ab:07:98:e4:91:5e:ba:9b:
                    82:22:06:4e:d6:c4:1c:1b:4c:25:f9:00:df:95:b1:
                    f9:d4:f3:b4:29:c3:f1:87:c0:c1:bb:ea:c1:37:b3:
                    d1:aa:7f:2f:f0:38:b0:24:7f:20:2b:33:42:8b:0b:
                    11:57:9c:fe:d5:59:9b:ab:ff:87:4f:01:6c:c8:4f:
                    5a:76:23:5c:89:4c:3d:f1:12:9a:de:34:93:6c:7a:
                    70:38:08:95:e6:08:5e:aa:91:95:e4:54:df:61:5a:
                    3d:a8:f2:24:1f:39:31:72:b9:04:de:a1:1c:d8:72:
                    cd:cb:3e:f6:54:8d:17:89:67:cf:ba:a2:7c:97:ed:
                    f7:a5:35:60:7e:53:e1:f3:78:7c:18:d0:e0:fb:d3:
                    49:61:fe:3c:51:f9:86:83:c1:db:f5:20:fc:2a:45:
                    39:1c:6b:f8:68:ee:88:32:09:68:e2:de:01:7a:aa:
                    af:27:4d:66:f9:de:21:d0:bb:dc:08:50:7f:6e:81:
                    26:93:6e:c8:b4:06:09:21:c5:fa:00:ab:95:b9:e9:
                    ac:4d:bc:b3:84:6e:71:1a:0a:36:3f:52:57:78:75:
                    32:e2:ce:97:3b:6d:eb:12:4e:84:5c:df:3a:b9:13:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:B0:B4:52:05:0D:45:CC:16:D3:2A:63:D9:8F:A5:E9:F2:16:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/515eefd5-5f69-3f8a-9572-de7b1013f0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:07:65:9a:03:f0:4f:73:5c:38:2c:58:0c:63:56:7d:e0:23:
         d9:7f:be:7c:60:32:ac:79:75:f7:d5:35:a0:67:d0:ff:4f:74:
         75:d3:86:e9:c1:76:91:76:9a:ef:54:3b:a2:d2:6a:c9:51:b8:
         6e:4a:21:18:99:94:93:b1:69:30:99:0a:0c:bd:a9:e8:54:02:
         a8:4a:0b:ef:36:5b:f3:04:f5:52:26:2f:22:e4:f9:56:54:8c:
         63:86:29:24:cb:0b:59:97:fb:30:35:b3:fa:36:52:60:2a:e2:
         56:17:5f:e6:25:18:b7:41:94:e8:9c:e8:0e:47:9e:ea:4c:f4:
         2e:a8:f6:c1:b8:17:8c:fe:4e:06:d6:1c:77:b4:cb:56:d6:f2:
         ff:0a:2c:00:e9:6f:99:85:41:fb:37:dd:a9:ca:28:92:bb:39:
         a7:51:14:7a:6c:08:5a:e2:5d:73:13:17:59:48:05:7c:a8:b2:
         fb:94:63:2e:02:99:ef:c5:b5:05:f6:9e:20:1d:00:49:05:85:
         4d:8a:00:dc:6e:10:9e:72:a2:0c:47:be:72:6d:1d:a6:00:32:
         5a:7f:d1:49:26:2f:50:94:40:65:15:82:24:be:df:11:49:ac:
         ce:41:ce:fd:0f:6b:0a:e2:5d:f7:2b:a0:f8:9e:63:91:1e:8f:
         f4:76:bf:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoc83FVHQVWvkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MTBhODhmODgtMDAyNy00MjUxLWJkNmUtMGM3NDQ1MTNkNThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHbkKrPDDSPWLjxb6UPuixS+GRdBqweY5JFe
upuCIgZO1sQcG0wl+QDflbH51PO0KcPxh8DBu+rBN7PRqn8v8DiwJH8gKzNCiwsR
V5z+1Vmbq/+HTwFsyE9adiNciUw98RKa3jSTbHpwOAiV5gheqpGV5FTfYVo9qPIk
HzkxcrkE3qEc2HLNyz72VI0XiWfPuqJ8l+33pTVgflPh83h8GNDg+9NJYf48UfmG
g8Hb9SD8KkU5HGv4aO6IMglo4t4BeqqvJ01m+d4h0LvcCFB/boEmk27ItAYJIcX6
AKuVuemsTbyzhG5xGgo2P1JXeHUy4s6XO23rEk6EXN86uROEpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtCsLRSBQ1FzBbTKmPZj6Xp8hYeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTE1ZWVmZDUtNWY2OS0z
ZjhhLTk1NzItZGU3YjEwMTNmMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuIvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAHZZoD8E9zXDgsWAxjVn3gI9l/vnxgMqx5dffVNaBn0P9PdHXThunB
dpF2mu9UO6LSaslRuG5KIRiZlJOxaTCZCgy9qehUAqhKC+82W/ME9VImLyLk+VZU
jGOGKSTLC1mX+zA1s/o2UmAq4lYXX+YlGLdBlOic6A5HnupM9C6o9sG4F4z+TgbW
HHe0y1bW8v8KLADpb5mFQfs33anKKJK7OadRFHpsCFriXXMTF1lIBXyosvuUYy4C
me/FtQX2niAdAEkFhU2KANxuEJ5yogxHvnJtHaYAMlp/0UkmL1CUQGUVgiS+3xFJ
rM5Bzv0PawriXfcroPieY5Eej/R2v8s=
-----END CERTIFICATE-----
Generated at Mon Apr 13 19:34:14 2026 by rpki-client