Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0305513b-622f-3e36-b7c4-781d2039b99e.roa
File:                     0305513b-622f-3e36-b7c4-781d2039b99e.roa (raw, json)
Hash identifier:          KOWhVFyhppLiCoCotO1kZ9W7ZhbAfSniQr0Qij1qJPA=
Subject key identifier:   6A:CD:D9:CD:5D:C7:E0:BE:13:79:D9:A5:8B:1B:EB:16:C3:BB:CB:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78C22C15D8A8C637BA30A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0305513b-622f-3e36-b7c4-781d2039b99e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        98.40.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:22:c1:5d:8a:8c:63:7b:a3:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=26327154-cb50-4390-afff-f8056922a99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:34:7a:4f:f8:3a:1e:ee:15:a7:20:95:73:
                    8d:55:28:b0:1f:f7:ee:b1:4f:c2:aa:d4:f8:3c:80:
                    20:3a:39:63:cd:59:89:68:87:9e:94:23:81:2b:4c:
                    c3:f9:71:43:e0:71:29:6e:dc:de:fb:a7:ed:30:97:
                    c1:6e:e7:7f:94:7f:26:3a:b3:ce:7f:8a:85:0d:e7:
                    cc:a1:ab:fb:f6:ea:40:a3:81:53:e7:1f:55:c6:cb:
                    63:65:43:2d:e2:ec:fb:36:61:05:1a:4c:fa:22:50:
                    9f:e3:b6:7c:3d:ff:be:f4:02:d5:9b:12:bf:17:ed:
                    9c:d9:3e:0c:7e:33:6f:cf:e2:06:60:2d:62:25:a5:
                    d2:bc:4e:02:91:fb:2e:dd:4b:e0:98:89:a6:8a:f9:
                    a5:f9:c6:cf:fb:89:52:f8:ad:c8:44:c2:4c:14:a3:
                    bd:96:32:fc:ec:e9:91:dc:21:58:00:fa:ff:8c:26:
                    77:ea:6c:db:83:0b:f9:07:30:cf:2d:05:44:5b:84:
                    31:12:48:9f:bf:e5:92:c7:65:f0:28:b4:f5:59:f1:
                    21:29:0a:22:04:67:1c:96:77:a4:57:29:12:4a:e1:
                    bf:7e:94:5f:87:5a:04:3b:23:fe:45:4b:30:77:34:
                    a6:5e:9f:14:b2:48:f0:62:ab:3b:3d:a6:f3:7b:22:
                    7c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CD:D9:CD:5D:C7:E0:BE:13:79:D9:A5:8B:1B:EB:16:C3:BB:CB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0305513b-622f-3e36-b7c4-781d2039b99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:94:ce:dd:90:9d:cb:4c:d7:15:66:c0:73:06:15:ba:22:
         59:d8:75:3a:f3:90:67:71:5c:91:7e:23:ab:9f:65:be:3d:ce:
         b1:3d:51:f9:f1:7a:87:47:04:2c:8a:3e:b1:00:48:00:dd:1e:
         9b:9a:1b:c8:76:b6:f3:20:ae:2f:16:d6:3f:f0:74:d4:dc:6e:
         e0:f2:5d:a1:60:e4:57:c7:19:1a:46:3f:91:ef:66:22:9d:66:
         f9:b1:74:56:1e:7d:82:95:ed:b2:51:b2:d4:10:b5:e4:d3:ac:
         45:fb:7c:4b:eb:b0:6f:0c:87:ec:c8:1c:b1:a0:76:1e:cd:24:
         91:97:f4:20:b4:c1:05:c3:4c:5d:df:08:91:34:a0:e1:f6:53:
         3e:e0:70:8e:08:ab:25:28:5c:74:4b:31:4f:46:a8:d0:db:ec:
         e3:55:26:20:ec:60:1f:ad:5b:48:52:63:f8:29:1d:9a:d8:51:
         55:ad:73:15:b7:87:e5:84:6d:02:8b:49:9a:ec:e3:66:31:39:
         ba:da:5c:82:06:f9:71:cc:10:96:2e:0b:cb:48:f7:d3:48:07:
         db:c0:d4:8a:09:c9:2c:74:e9:a9:a3:1e:7a:62:23:1e:08:1b:
         b0:6d:a7:08:a4:d9:09:1d:1c:20:2e:82:e8:61:23:6d:d7:13:
         a9:7d:f2:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njCLBXYqMY3ujCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjYzMjcxNTQtY2I1MC00MzkwLWFmZmYtZjgwNTY5MjJhOTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgw0ek/4Oh7uFacglXONVSiwH/fusU/CqtT4
PIAgOjljzVmJaIeelCOBK0zD+XFD4HEpbtze+6ftMJfBbud/lH8mOrPOf4qFDefM
oav79upAo4FT5x9VxstjZUMt4uz7NmEFGkz6IlCf47Z8Pf++9ALVmxK/F+2c2T4M
fjNvz+IGYC1iJaXSvE4Ckfsu3UvgmImmivml+cbP+4lS+K3IRMJMFKO9ljL87OmR
3CFYAPr/jCZ36mzbgwv5BzDPLQVEW4QxEkifv+WSx2XwKLT1WfEhKQoiBGcclnek
VykSSuG/fpRfh1oEOyP+RUswdzSmXp8UskjwYqs7PabzeyJ8pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrN2c1dx+C+E3nZpYsb6xbDu8sHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDMwNTUxM2ItNjIyZi0z
ZTM2LWI3YzQtNzgxZDIwMzliOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYigJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhmlM7dkJ3LTNcVZsBzBhW6IlnYdTrzkGdxXJF+I6ufZb49zrE9Ufnx
eodHBCyKPrEASADdHpuaG8h2tvMgri8W1j/wdNTcbuDyXaFg5FfHGRpGP5HvZiKd
ZvmxdFYefYKV7bJRstQQteTTrEX7fEvrsG8Mh+zIHLGgdh7NJJGX9CC0wQXDTF3f
CJE0oOH2Uz7gcI4IqyUoXHRLMU9GqNDb7ONVJiDsYB+tW0hSY/gpHZrYUVWtcxW3
h+WEbQKLSZrs42YxObraXIIG+XHMEJYuC8tI99NIB9vA1IoJySx06amjHnpiIx4I
G7Btpwik2QkdHCAuguhhI23XE6l98qs=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:28:35 2026 by rpki-client