Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29dd0222-a418-380b-90c4-9193647cb8b6.roa
File:                     29dd0222-a418-380b-90c4-9193647cb8b6.roa (raw, json)
Hash identifier:          zoPhOWBg96ifYxMHd506Gvnx30qdOUZkqVVJDAT7F4U=
Subject key identifier:   CA:F6:50:76:F7:4B:36:15:C1:D9:B1:73:5F:55:09:BE:10:F6:F4:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36014CED3B21DA6DC5B6FC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29dd0222-a418-380b-90c4-9193647cb8b6.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        98.194.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:4c:ed:3b:21:da:6d:c5:b6:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=4517bf9c-cde2-4fd4-ae49-c250535577f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:ed:bb:d1:c4:0a:a3:9c:90:ed:cb:d2:d9:
                    2d:3b:bf:d4:b3:0f:81:87:42:10:37:b9:d2:80:4d:
                    10:2a:55:45:ce:70:a4:0c:0f:f0:0c:44:9e:37:b3:
                    36:48:35:e6:5a:52:43:43:c5:8d:d2:66:3e:f2:a2:
                    55:97:51:a2:ef:15:18:07:24:ff:91:36:f8:f1:61:
                    49:59:98:a7:d7:42:61:ca:20:d1:3a:ff:5d:32:11:
                    64:b9:ba:11:65:f5:d7:36:84:03:8f:66:6d:74:88:
                    81:79:99:7f:45:4f:1f:e8:90:f5:5e:98:90:e1:3b:
                    13:d0:4b:60:ce:98:f4:69:3d:53:46:ae:04:8c:3e:
                    e6:18:bf:46:2b:f8:75:03:fb:ef:d5:f2:f9:2d:e9:
                    c3:16:a5:5a:e0:5e:7f:e4:9a:5f:6f:a9:45:65:bf:
                    68:79:34:0a:43:f9:be:98:e8:f0:ac:c4:8a:cf:2c:
                    93:cc:f9:79:de:9e:e2:5d:e7:ea:95:20:ff:6d:78:
                    22:fb:bd:39:8d:8e:9d:f6:98:9e:99:dc:42:6d:b4:
                    ea:48:57:5a:89:ff:c5:52:b6:a9:86:b6:fe:c0:d9:
                    b4:78:32:cf:23:93:47:d3:87:cf:c2:bb:0c:11:a5:
                    7b:99:35:a6:f5:ee:15:7a:04:74:82:3f:ce:35:c4:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F6:50:76:F7:4B:36:15:C1:D9:B1:73:5F:55:09:BE:10:F6:F4:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29dd0222-a418-380b-90c4-9193647cb8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:21:5a:f3:ce:20:58:c3:20:ac:b2:8f:35:18:0e:84:6d:
         94:83:0e:83:a8:30:b2:36:a8:1f:f7:4f:e8:4f:81:88:84:1c:
         ed:d7:55:b6:99:6b:b9:52:f9:0d:72:50:2d:45:f2:99:88:bf:
         ad:f1:6b:c4:42:ac:7c:06:17:49:63:55:8b:0b:8b:49:28:af:
         18:1d:8f:5d:3e:62:f0:c4:27:80:13:d2:c6:43:d3:c7:09:d1:
         cc:5d:f5:a7:67:9c:f0:7a:02:85:23:eb:c8:35:11:a0:87:87:
         b6:e8:6d:11:cb:de:6f:54:f3:66:5c:78:25:d7:b5:47:68:cf:
         5d:8a:9b:4b:86:41:06:74:1c:eb:cc:ec:e3:98:3d:0f:f2:6c:
         3b:e5:cc:80:5b:55:aa:40:9d:9a:22:ca:f8:dd:19:ce:27:43:
         cd:7e:bf:94:40:cf:87:d8:c6:25:fb:7b:5d:b6:93:ac:76:09:
         c5:f3:f5:2f:6b:18:56:b4:ed:c3:b6:22:75:cf:b1:43:a0:f4:
         bf:f2:b8:37:06:d0:35:68:6f:91:dd:bc:09:02:4f:ca:a3:7f:
         44:4b:d2:d7:a8:69:8c:4e:e2:b1:34:0e:ad:1a:a2:3b:5f:19:
         5a:fb:2f:7c:52:9c:37:e7:52:33:a4:28:5a:d8:eb:2c:84:0b:
         2a:4d:ee:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AUztOyHabcW2/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
NDUxN2JmOWMtY2RlMi00ZmQ0LWFlNDktYzI1MDUzNTU3N2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj43tu9HECqOckO3L0tktO7/Usw+Bh0IQN7nS
gE0QKlVFznCkDA/wDESeN7M2SDXmWlJDQ8WN0mY+8qJVl1Gi7xUYByT/kTb48WFJ
WZin10JhyiDROv9dMhFkuboRZfXXNoQDj2ZtdIiBeZl/RU8f6JD1XpiQ4TsT0Etg
zpj0aT1TRq4EjD7mGL9GK/h1A/vv1fL5LenDFqVa4F5/5Jpfb6lFZb9oeTQKQ/m+
mOjwrMSKzyyTzPl53p7iXefqlSD/bXgi+705jY6d9piemdxCbbTqSFdaif/FUrap
hrb+wNm0eDLPI5NH04fPwrsMEaV7mTWm9e4VegR0gj/ONcRrbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMr2UHb3SzYVwdmxc19VCb4Q9vQ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjlkZDAyMjItYTQxOC0z
ODBiLTkwYzQtOTE5MzY0N2NiOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsIIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGadIVrzziBYwyCsso81GA6EbZSDDoOoMLI2qB/3T+hPgYiEHO3XVbaZ
a7lS+Q1yUC1F8pmIv63xa8RCrHwGF0ljVYsLi0korxgdj10+YvDEJ4AT0sZD08cJ
0cxd9adnnPB6AoUj68g1EaCHh7bobRHL3m9U82ZceCXXtUdoz12Km0uGQQZ0HOvM
7OOYPQ/ybDvlzIBbVapAnZoiyvjdGc4nQ81+v5RAz4fYxiX7e122k6x2CcXz9S9r
GFa07cO2InXPsUOg9L/yuDcG0DVob5HdvAkCT8qjf0RL0teoaYxO4rE0Dq0aojtf
GVr7L3xSnDfnUjOkKFrY6yyECypN7iM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:07 2026 by rpki-client