Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99d26857-bba0-3e67-be70-731e23c0666b.roa
File:                     99d26857-bba0-3e67-be70-731e23c0666b.roa (raw, json)
Hash identifier:          qSmiGIDsc5yrBu9VaRqwyNj9Ux6HaeI0qqDK+lSYgfU=
Subject key identifier:   1B:41:01:5A:35:5C:BC:10:4D:C8:7D:AB:AA:9D:A0:A0:00:A8:57:68
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF730AF2CED406883439480
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99d26857-bba0-3e67-be70-731e23c0666b.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:30:af:2c:ed:40:68:83:43:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=d03970ff-ab1e-41ee-b6bf-bdb9f7cbf25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:95:bf:0a:65:2e:c0:93:26:d1:c0:78:7f:
                    d0:c6:00:e4:a9:84:7b:0f:dc:2b:16:c1:94:48:08:
                    9b:ab:54:d9:de:75:d2:cb:fe:4a:35:5c:bf:2b:5b:
                    a0:06:d2:ab:cb:85:83:be:c1:43:06:f9:02:c0:d9:
                    cc:12:0b:9a:da:31:1a:e1:1e:e9:f1:54:ed:52:f9:
                    6b:b0:bf:82:47:01:b0:6a:45:aa:e2:67:b4:1f:ea:
                    6a:38:83:29:bb:c3:e4:b2:da:77:22:d3:09:e4:d5:
                    b0:22:43:3d:72:f0:d9:76:da:f0:e0:bb:4a:b5:d4:
                    46:75:06:81:33:d9:62:dc:04:14:8b:51:46:84:20:
                    f7:a4:30:a2:73:3d:c9:78:79:bd:50:f7:e0:d8:01:
                    3d:9e:0d:a7:e6:e7:f5:45:a2:bf:f8:30:b8:cf:16:
                    fb:e2:fd:7f:6f:3b:34:06:76:3c:2b:0e:c3:fc:19:
                    ae:9d:3d:f6:5c:ee:6f:5f:02:7e:c4:fb:b8:e5:db:
                    ae:1d:21:e0:98:e1:72:0a:8c:b9:61:5d:12:7a:24:
                    65:94:a7:6c:2a:29:86:e6:4e:42:4a:78:87:f7:97:
                    6a:1c:e7:7c:48:55:fb:b1:f1:f6:25:0e:00:4b:7f:
                    97:2e:82:e1:b4:31:4c:4f:02:d3:5e:24:69:a1:da:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:41:01:5A:35:5C:BC:10:4D:C8:7D:AB:AA:9D:A0:A0:00:A8:57:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99d26857-bba0-3e67-be70-731e23c0666b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c5:d3:91:13:0e:20:70:45:07:3b:0f:5d:3a:1f:a6:b2:14:
         97:d3:6b:08:27:7d:8b:21:63:9a:63:09:1e:f1:62:53:ad:73:
         26:32:5b:7d:a6:39:97:7b:77:a5:de:db:c8:7c:ec:23:2f:20:
         fe:c8:11:b5:b2:e6:e2:69:32:c1:dd:af:ba:0e:30:5d:58:eb:
         c5:16:05:76:d2:ca:3c:1a:97:a1:27:2d:e1:4f:07:20:c7:fa:
         bf:31:00:88:fd:11:94:ef:d0:85:26:c4:80:5b:7a:8e:f0:d5:
         71:c0:0f:1a:03:46:66:1c:e3:0e:8f:ae:e8:2e:26:fb:75:12:
         63:75:87:32:5e:2a:cc:25:b8:4e:96:ef:95:dd:33:69:70:aa:
         12:ca:01:2b:fd:db:8d:b7:8f:22:d8:ae:be:23:25:5a:48:45:
         20:0b:3d:46:16:b2:bf:0a:0e:df:a6:8b:15:0b:ef:14:17:22:
         61:18:65:fe:e4:45:15:e6:18:38:ae:61:01:bf:2a:14:1b:e6:
         ff:38:6b:c8:26:99:bc:d6:fb:00:4a:cc:e0:5b:87:d3:e7:ea:
         09:98:f4:dd:c8:4b:46:f2:92:88:5a:6a:29:d8:93:b6:f3:f7:
         e6:f0:2e:75:e9:9f:82:0d:9f:7a:6d:c6:42:af:74:57:2b:09:
         eb:05:8e:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zCvLO1AaINDlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
ZDAzOTcwZmYtYWIxZS00MWVlLWI2YmYtYmRiOWY3Y2JmMjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnaVvwplLsCTJtHAeH/QxgDkqYR7D9wrFsGU
SAibq1TZ3nXSy/5KNVy/K1ugBtKry4WDvsFDBvkCwNnMEgua2jEa4R7p8VTtUvlr
sL+CRwGwakWq4me0H+pqOIMpu8Pkstp3ItMJ5NWwIkM9cvDZdtrw4LtKtdRGdQaB
M9li3AQUi1FGhCD3pDCicz3JeHm9UPfg2AE9ng2n5uf1RaK/+DC4zxb74v1/bzs0
BnY8Kw7D/BmunT32XO5vXwJ+xPu45duuHSHgmOFyCoy5YV0SeiRllKdsKimG5k5C
SniH95dqHOd8SFX7sfH2JQ4AS3+XLoLhtDFMTwLTXiRpodr0yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtBAVo1XLwQTch9q6qdoKAAqFdoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTlkMjY4NTctYmJhMC0z
ZTY3LWJlNzAtNzMxZTIzYzA2NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlViMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/F05ETDiBwRQc7D106H6ayFJfTawgnfYshY5pjCR7xYlOtcyYyW32m
OZd7d6Xe28h87CMvIP7IEbWy5uJpMsHdr7oOMF1Y68UWBXbSyjwal6EnLeFPByDH
+r8xAIj9EZTv0IUmxIBbeo7w1XHADxoDRmYc4w6PruguJvt1EmN1hzJeKswluE6W
75XdM2lwqhLKASv92423jyLYrr4jJVpIRSALPUYWsr8KDt+mixUL7xQXImEYZf7k
RRXmGDiuYQG/KhQb5v84a8gmmbzW+wBKzOBbh9Pn6gmY9N3IS0bykohaainYk7bz
9+bwLnXpn4INn3ptxkKvdFcrCesFjl4=
-----END CERTIFICATE-----
Generated at Sun Sep 13 18:10:27 2026 by rpki-client