Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9555a58b-80c0-32d8-88fa-f85dc51a5773.roa
File:                     9555a58b-80c0-32d8-88fa-f85dc51a5773.roa (raw, json)
Hash identifier:          0jTdHSrVwhNzysAsPX83k/LryjFwO6vjLbZIM5fF23U=
Subject key identifier:   F5:31:94:BD:08:D4:58:A5:2E:02:E0:27:97:D8:AC:FB:01:66:5B:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D6B037C2BEB5E1B626C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9555a58b-80c0-32d8-88fa-f85dc51a5773.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        98.52.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:6b:03:7c:2b:eb:5e:1b:62:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=716b0e94-4e27-45de-8fd2-90e4493866a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:32:36:d8:c2:b7:0e:a8:be:69:72:4b:65:11:
                    17:b8:e2:18:f2:47:5a:8e:3d:b3:ca:43:a2:a7:fe:
                    b5:fa:01:02:9d:69:74:38:25:e8:97:16:cc:12:fa:
                    b4:49:76:75:d0:d1:dc:4c:53:5d:c7:37:81:fb:3d:
                    19:c6:d6:91:c6:73:98:6d:50:d7:70:0d:c5:ae:81:
                    f4:40:f3:24:b0:3d:bc:8a:6b:94:16:f0:c3:f7:b1:
                    f7:ae:33:91:2b:45:b2:95:7f:9d:cd:04:85:37:b4:
                    7b:0c:01:6d:47:83:1a:d0:4b:96:08:f2:e3:7e:f0:
                    dc:14:35:60:cf:94:b1:f1:ba:90:c7:e1:ed:fd:c6:
                    ee:cb:52:ab:9e:de:c5:0f:be:e2:23:21:45:bd:d4:
                    ff:22:5c:fe:3c:84:4a:b3:4a:c6:27:34:ab:54:29:
                    ee:5f:64:f8:ab:2a:c5:ef:1d:58:5e:5e:7a:67:98:
                    5e:67:15:c9:f9:9c:47:9c:43:05:9d:f2:60:16:80:
                    46:d0:56:1b:92:71:6d:97:29:03:12:26:f3:e1:fd:
                    31:14:df:96:3a:c1:d0:40:d1:2f:8d:75:55:02:78:
                    36:52:20:81:6e:00:1a:58:73:96:0f:6b:b2:3d:01:
                    90:e0:60:80:f2:4f:1a:e6:6c:88:71:72:39:6f:d4:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:31:94:BD:08:D4:58:A5:2E:02:E0:27:97:D8:AC:FB:01:66:5B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9555a58b-80c0-32d8-88fa-f85dc51a5773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:f8:f3:54:a4:92:42:a3:00:2a:d1:65:87:38:65:3e:13:33:
         e9:7c:cc:c5:28:4c:d0:2f:4d:3d:62:5c:21:1f:89:e1:19:3f:
         0d:20:4a:8c:d2:0f:19:4c:9c:5a:dd:62:1e:d8:ee:6c:fa:0f:
         5c:51:2e:28:ef:84:e4:99:a1:20:0d:d6:98:b2:14:3b:5f:c5:
         81:0a:a6:4d:a0:85:bb:78:db:02:6d:b0:cc:49:59:af:e3:08:
         80:ec:cb:19:bf:fc:55:01:35:32:b7:ba:00:ef:29:16:64:cf:
         76:10:33:ed:01:3b:af:df:f7:75:c5:32:dc:50:24:33:42:fe:
         51:fd:76:b0:4d:3c:c8:76:7c:4e:0b:f0:c2:c1:63:17:1b:79:
         05:19:a1:d0:01:e9:2f:7c:6b:df:9f:ca:5f:04:3f:13:54:5d:
         1a:33:f3:20:da:21:ef:a0:c9:09:1a:61:cb:9f:9f:85:bb:e9:
         6e:05:04:e3:03:54:d6:0e:c3:4c:49:d5:bc:9c:cc:8e:cf:97:
         4f:94:c5:b7:fe:2b:19:8e:5d:c0:3a:f4:ed:b7:ff:d7:6f:3f:
         4e:f1:92:e9:93:3c:6b:26:8e:67:cd:c4:1d:25:c5:ce:8d:50:
         25:8a:33:cf:39:7e:8b:12:54:64:3d:29:38:1a:2b:f7:53:01:
         4b:9a:b2:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPWsDfCvrXhtibAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NzE2YjBlOTQtNGUyNy00NWRlLThmZDItOTBlNDQ5Mzg2NmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTI22MK3Dqi+aXJLZREXuOIY8kdajj2zykOi
p/61+gECnWl0OCXolxbMEvq0SXZ10NHcTFNdxzeB+z0ZxtaRxnOYbVDXcA3FroH0
QPMksD28imuUFvDD97H3rjORK0WylX+dzQSFN7R7DAFtR4Ma0EuWCPLjfvDcFDVg
z5Sx8bqQx+Ht/cbuy1Krnt7FD77iIyFFvdT/Ilz+PIRKs0rGJzSrVCnuX2T4qyrF
7x1YXl56Z5heZxXJ+ZxHnEMFnfJgFoBG0FYbknFtlykDEibz4f0xFN+WOsHQQNEv
jXVVAng2UiCBbgAaWHOWD2uyPQGQ4GCA8k8a5myIcXI5b9RpGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUxlL0I1FilLgLgJ5fYrPsBZlvfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU1NWE1OGItODBjMC0z
MmQ4LTg4ZmEtZjg1ZGM1MWE1NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjQ+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMj481SkkkKjACrRZYc4ZT4TM+l8zMUoTNAvTT1iXCEfieEZPw0gSozS
DxlMnFrdYh7Y7mz6D1xRLijvhOSZoSAN1piyFDtfxYEKpk2ghbt42wJtsMxJWa/j
CIDsyxm//FUBNTK3ugDvKRZkz3YQM+0BO6/f93XFMtxQJDNC/lH9drBNPMh2fE4L
8MLBYxcbeQUZodAB6S98a9+fyl8EPxNUXRoz8yDaIe+gyQkaYcufn4W76W4FBOMD
VNYOw0xJ1byczI7Pl0+Uxbf+KxmOXcA69O23/9dvP07xkumTPGsmjmfNxB0lxc6N
UCWKM885fosSVGQ9KTgaK/dTAUuasmQ=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:17:32 2026 by rpki-client