Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16622784-ab72-3b33-b29c-8126b800c2ab.roa
File:                     16622784-ab72-3b33-b29c-8126b800c2ab.roa (raw, json)
Hash identifier:          NXMrofWj1ZaFcg6H6msChvi3VO3UjqYoNyC64SJw6Ks=
Subject key identifier:   78:2B:5F:53:29:1F:C0:6F:C4:13:6C:A3:8A:02:DF:43:72:0B:99:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF94B837ADEA68DD229DC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16622784-ab72-3b33-b29c-8126b800c2ab.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        98.42.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:4b:83:7a:de:a6:8d:d2:29:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3c5fd1be-0386-410e-ba0f-b17e240954f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:d0:37:7c:b0:1f:17:b8:06:78:c2:cb:54:
                    63:74:bc:d4:05:5b:7e:95:2a:ec:6c:c3:40:43:62:
                    fd:29:af:58:0b:e5:6d:88:35:a1:3e:1b:4d:1c:5d:
                    06:92:5f:ef:2c:1d:23:b9:e2:57:48:b3:fd:7e:1d:
                    be:9e:97:68:8b:06:f3:da:33:db:20:3e:6c:34:3c:
                    47:84:78:2e:9f:9e:f9:29:12:5e:d0:fb:f9:91:0d:
                    35:7c:ac:3b:bd:6d:40:e8:e0:8d:4f:49:c4:86:6a:
                    9d:59:06:76:7d:29:80:1f:ba:02:c4:05:d4:53:f5:
                    bb:d6:5a:c7:90:cc:5d:bc:dd:44:fd:ae:34:db:4c:
                    ed:c2:54:ec:13:64:69:aa:9c:55:d4:a3:4a:85:32:
                    61:80:82:0b:89:f5:85:d2:72:2e:2f:40:cd:7a:92:
                    3f:3a:75:ce:4e:80:f0:bc:bd:0b:90:4c:1e:77:9c:
                    bb:4e:4c:45:84:16:a0:ce:75:3a:4d:28:7b:a2:17:
                    08:89:e9:42:af:7f:00:7b:17:a4:1d:53:59:0a:67:
                    da:76:d2:30:aa:de:97:df:9d:89:bb:83:4e:b6:a9:
                    2f:ac:ed:12:de:65:90:e2:86:d5:f4:da:b3:bd:7b:
                    a1:ea:3c:0e:4b:23:d8:b1:9b:aa:f4:b9:83:fe:ba:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2B:5F:53:29:1F:C0:6F:C4:13:6C:A3:8A:02:DF:43:72:0B:99:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16622784-ab72-3b33-b29c-8126b800c2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:77:83:38:72:fd:c6:cb:88:b7:f5:55:ad:db:09:e5:bf:ef:
         1c:54:9a:a9:e9:84:00:63:80:f3:7f:32:c4:cc:e2:11:61:7e:
         1f:9c:e1:a7:36:db:01:1c:8e:6d:44:28:06:c2:c0:b2:e3:15:
         0a:6f:76:7b:a8:f3:a1:59:de:5e:1c:1e:72:63:bb:89:3e:04:
         c7:96:f2:3c:18:f7:16:61:e5:6e:a6:c1:d0:47:a9:0d:e2:6f:
         4a:93:73:c2:db:b2:3a:d0:cd:36:70:3d:14:41:00:66:ab:72:
         d5:6d:02:29:95:08:4c:d1:95:a5:9a:df:f0:a0:0b:88:e3:a4:
         70:3f:30:ca:ec:19:18:65:d3:f3:13:3c:41:11:df:bd:30:81:
         a7:09:2f:8a:82:6c:af:56:d5:05:4e:06:dd:cc:5c:31:56:7c:
         e0:fc:1f:43:a5:a7:35:bc:12:1f:a8:4b:c5:b0:43:ca:6b:a3:
         ec:2c:83:8e:1a:bb:a9:44:ff:4a:d1:1c:b1:c6:19:08:7b:24:
         67:aa:45:67:d4:b4:62:63:80:0d:6e:6d:f3:30:96:7b:49:8b:
         e5:bf:8f:52:97:08:af:3c:da:08:82:af:ea:dc:eb:72:dc:bb:
         97:b8:48:3e:37:08:c9:a6:33:d2:e7:59:e3:86:d1:5b:be:a7:
         07:49:59:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+UuDet6mjdIp3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
M2M1ZmQxYmUtMDM4Ni00MTBlLWJhMGYtYjE3ZTI0MDk1NGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwTQN3ywHxe4BnjCy1RjdLzUBVt+lSrsbMNA
Q2L9Ka9YC+VtiDWhPhtNHF0Gkl/vLB0jueJXSLP9fh2+npdoiwbz2jPbID5sNDxH
hHgun575KRJe0Pv5kQ01fKw7vW1A6OCNT0nEhmqdWQZ2fSmAH7oCxAXUU/W71lrH
kMxdvN1E/a4020ztwlTsE2RpqpxV1KNKhTJhgIILifWF0nIuL0DNepI/OnXOToDw
vL0LkEwed5y7TkxFhBagznU6TSh7ohcIielCr38AexekHVNZCmfadtIwqt6X352J
u4NOtqkvrO0S3mWQ4obV9NqzvXuh6jwOSyPYsZuq9LmD/ro1ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgrX1MpH8BvxBNso4oC30NyC5leMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY2MjI3ODQtYWI3Mi0z
YjMzLWIyOWMtODEyNmI4MDBjMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYipQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANt3gzhy/cbLiLf1Va3bCeW/7xxUmqnphABjgPN/MsTM4hFhfh+c4ac2
2wEcjm1EKAbCwLLjFQpvdnuo86FZ3l4cHnJju4k+BMeW8jwY9xZh5W6mwdBHqQ3i
b0qTc8LbsjrQzTZwPRRBAGarctVtAimVCEzRlaWa3/CgC4jjpHA/MMrsGRhl0/MT
PEER370wgacJL4qCbK9W1QVOBt3MXDFWfOD8H0OlpzW8Eh+oS8WwQ8pro+wsg44a
u6lE/0rRHLHGGQh7JGeqRWfUtGJjgA1ubfMwlntJi+W/j1KXCK882giCr+rc63Lc
u5e4SD43CMmmM9LnWeOG0Vu+pwdJWaw=
-----END CERTIFICATE-----
Generated at Tue Apr 21 23:03:07 2026 by rpki-client