Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/fda1197d-28fd-321a-88c0-513108c381a6.roa
File:                     fda1197d-28fd-321a-88c0-513108c381a6.roa (raw, json)
Hash identifier:          nbuIGWGcVPpMQ28rdx5Ezxxa2urofbrC1NSigXAHBjk=
Subject key identifier:   A8:30:BF:04:FD:1C:B2:06:1F:BC:E8:DE:95:42:E9:BB:CF:52:88:04
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F4328584F4973E73454E2EA4A916E6A00
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/fda1197d-28fd-321a-88c0-513108c381a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23465
IP address blocks:        70.98.8.0/21 maxlen: 21
                          70.98.100.0/23 maxlen: 23
                          70.98.109.0/24 maxlen: 24
                          70.98.160.0/24 maxlen: 24
                          70.98.221.0/24 maxlen: 24
                          70.98.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e7:34:54:e2:ea:4a:91:6e:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=14060115-52bf-4a96-be2e-ad328d9431a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:d2:fa:85:c0:17:27:5d:c0:7e:28:12:9b:
                    e6:72:e5:e0:d1:69:79:69:c5:d8:18:9b:43:f6:50:
                    cc:d8:2e:2b:34:68:1a:5c:82:48:1d:c2:b6:b3:01:
                    64:74:3f:74:21:6f:c8:2a:62:29:db:91:a8:a1:a8:
                    0e:f7:40:af:86:21:af:26:07:75:c8:0c:80:80:16:
                    de:f0:32:c0:3e:d6:3c:a1:7b:65:87:70:1f:61:a0:
                    95:cd:48:a4:b3:64:e2:4a:74:8f:c7:92:dc:a4:f9:
                    6d:a3:ce:7b:3a:0b:27:be:bf:91:0f:70:6a:a5:68:
                    cf:ca:8a:3b:97:2a:cb:39:40:07:b3:3e:55:31:d0:
                    37:ca:89:cd:a6:3e:fa:f8:0b:80:d7:36:bc:4d:ed:
                    7d:52:dd:68:c7:c8:5e:49:04:0d:ef:98:17:2d:3a:
                    d0:57:56:58:9b:3b:9d:03:75:5b:1a:13:e3:63:ea:
                    73:ea:0c:f7:a3:15:ec:55:69:95:a3:8d:bc:80:87:
                    1f:f5:37:45:53:7a:89:15:e5:49:6c:52:fd:35:9a:
                    ec:00:ce:e4:db:a3:c1:7c:ed:ab:66:75:07:78:17:
                    f2:48:5e:37:79:30:95:2a:52:61:6f:e6:a2:ee:82:
                    31:24:9e:fb:8f:be:d7:15:be:81:f2:25:90:f0:30:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:BF:04:FD:1C:B2:06:1F:BC:E8:DE:95:42:E9:BB:CF:52:88:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/fda1197d-28fd-321a-88c0-513108c381a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.98.8.0/21
                  70.98.100.0/23
                  70.98.109.0/24
                  70.98.160.0/24
                  70.98.221.0-70.98.222.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:30:d1:4b:41:0b:f6:43:96:dc:d4:4b:3c:41:bd:db:2c:bb:
         3c:61:11:56:18:70:92:fb:45:a5:db:d9:4d:bc:42:2a:1e:5c:
         70:d4:7f:c9:d7:2b:4d:80:30:18:fc:62:d3:c9:48:06:9c:2f:
         25:96:3a:0b:4d:b8:f6:57:18:b9:a4:4a:30:51:6d:73:8b:74:
         e3:e9:87:42:37:ed:a4:47:27:2e:2b:b1:cd:05:23:4e:32:a7:
         fc:81:ab:31:e1:19:85:4f:b9:5b:c0:4a:63:d0:d5:d3:f2:80:
         9a:04:18:97:e1:df:90:dd:ce:7b:ef:ec:1c:c3:d8:56:91:f7:
         c6:f9:7e:ab:26:0e:00:36:f3:94:f1:41:e4:ee:4e:a9:87:f6:
         43:11:d2:1f:7c:3a:43:e6:bb:e8:01:34:aa:e7:3a:dc:91:fd:
         0a:b8:96:9c:fd:e0:50:55:25:f7:28:68:29:63:6c:da:7c:2e:
         bd:50:11:9e:3e:14:74:11:a6:7a:9e:0e:a0:6a:a5:02:77:cb:
         df:7d:a0:34:42:3c:b9:0c:be:09:a4:c8:88:2c:e0:68:a1:b5:
         21:09:df:8a:a7:7c:61:76:12:e0:ee:e8:17:dd:6f:9c:a6:64:
         4a:9b:63:68:15:b8:df:1c:09:0c:e0:c8:c0:e8:33:97:57:38:
         b6:b4:25:d2
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE9Jc+c0VOLqSpFuagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz
MDllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTQwNjAxMTUtNTJiZi00YTk2LWJlMmUtYWQzMjhkOTQzMWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbTS+oXAFyddwH4oEpvmcuXg0Wl5acXYGJtD
9lDM2C4rNGgaXIJIHcK2swFkdD90IW/IKmIp25GooagO90CvhiGvJgd1yAyAgBbe
8DLAPtY8oXtlh3AfYaCVzUiks2TiSnSPx5LcpPlto857Ogsnvr+RD3BqpWjPyoo7
lyrLOUAHsz5VMdA3yonNpj76+AuA1za8Te19Ut1ox8heSQQN75gXLTrQV1ZYmzud
A3VbGhPjY+pz6gz3oxXsVWmVo428gIcf9TdFU3qJFeVJbFL9NZrsAM7k26PBfO2r
ZnUHeBfySF43eTCVKlJhb+ai7oIxJJ77j77XFb6B8iWQ8DA3hwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFKgwvwT9HLIGH7zo3pVC6bvPUogEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx
ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvZmRhMTE5N2QtMjhmZC0z
MjFhLTg4YzAtNTEzMTA4YzM4MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4
ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1
MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw
MTY2NTMwOWUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDRmIIAwQB
RmJkAwQARmJtAwQARmKgMAwDBABGYt0DBABGYt4wVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA1DDRS0EL9kOW
3NRLPEG92yy7PGERVhhwkvtFpdvZTbxCKh5ccNR/ydcrTYAwGPxi08lIBpwvJZY6
C0249lcYuaRKMFFtc4t04+mHQjftpEcnLiuxzQUjTjKn/IGrMeEZhU+5W8BKY9DV
0/KAmgQYl+HfkN3Oe+/sHMPYVpH3xvl+qyYOADbzlPFB5O5OqYf2QxHSH3w6Q+a7
6AE0quc63JH9CriWnP3gUFUl9yhoKWNs2nwuvVARnj4UdBGmep4OoGqlAnfL332g
NEI8uQy+CaTIiCzgaKG1IQnfiqd8YXYS4O7oF91vnKZkSptjaBW43xwJDODIwOgz
l1c4trQl0g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:08:56 2026 by rpki-client