Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f11386e-caa4-3f4f-82b4-ff45f937834c.roa
File:                     9f11386e-caa4-3f4f-82b4-ff45f937834c.roa (raw, json)
Hash identifier:          OJw3WAIUJXvlnGjXgVgepGMX7n7qRkB+w7yhBPF+mek=
Subject key identifier:   CE:3E:85:21:B9:47:A5:E3:EC:FB:39:CB:67:57:2B:3A:C7:E1:23:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A500B842A21D232382C5160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f11386e-caa4-3f4f-82b4-ff45f937834c.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.40.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:0b:84:2a:21:d2:32:38:2c:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4a3ff56b-a2ba-41dd-a18f-fe06af9b6bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:51:95:b0:b5:f5:82:90:71:12:0a:c0:c6:
                    ff:10:e1:c0:24:9e:d5:a5:2f:08:63:77:df:c2:0e:
                    b3:ee:36:14:f5:ae:bb:41:d7:95:a9:78:87:98:4e:
                    86:52:a3:6a:f7:77:ea:71:6f:93:30:e3:a3:6e:83:
                    d9:3f:9a:ed:d2:b2:1d:3d:6f:a0:44:c8:4d:7f:24:
                    c3:53:50:5d:bc:67:aa:4a:0d:61:9e:58:11:13:7e:
                    c7:12:74:92:49:90:95:8d:12:2a:d0:a0:6b:3f:d8:
                    40:28:88:5c:ea:2b:6b:f8:d4:bc:df:6b:8b:4b:04:
                    a4:16:cb:88:fe:8e:18:f4:4c:54:76:29:af:41:b1:
                    7e:b7:74:66:c9:1f:a3:d7:30:12:25:32:48:99:b3:
                    88:9f:ba:08:66:ee:70:cf:e7:78:98:4a:44:74:4c:
                    03:0c:79:89:65:3d:a0:1c:f2:48:58:71:38:56:3e:
                    c5:ee:3c:57:e5:fa:01:46:75:46:d1:cf:12:e9:10:
                    14:02:8d:35:15:d8:56:59:72:27:07:62:f8:df:75:
                    08:58:0b:bf:93:bb:da:0c:3d:86:b7:7a:f9:1f:b6:
                    02:05:da:cf:32:40:da:9d:b9:88:68:4b:64:69:6e:
                    9e:fe:dc:1b:01:97:ac:e1:57:58:2f:63:6d:f6:d7:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:85:21:B9:47:A5:E3:EC:FB:39:CB:67:57:2B:3A:C7:E1:23:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f11386e-caa4-3f4f-82b4-ff45f937834c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:aa:bb:dc:b0:fd:2c:d3:96:40:0f:69:f9:4c:0b:24:f4:
         05:bf:12:11:e2:79:f3:ce:04:2a:6a:a6:e6:b5:df:a2:48:33:
         9e:dd:02:71:d6:58:38:e8:97:77:cd:1f:0c:4c:49:08:c2:b8:
         d2:d5:8f:68:56:90:d0:fe:e6:92:ef:ae:91:9f:dc:94:80:93:
         1c:68:a5:f3:61:36:00:55:b5:b9:e9:c1:dd:a9:3b:0d:b2:de:
         c6:e6:46:a9:df:d7:3b:6a:77:a3:95:ed:ac:07:64:b3:e3:4a:
         68:0f:8e:e8:a1:82:ac:96:1b:6e:51:94:cf:21:f2:d0:07:c6:
         79:d8:de:53:56:2f:6a:cc:08:12:b6:fd:15:11:48:c5:87:b6:
         f6:56:e1:b8:99:94:05:7f:2e:98:ff:f2:8d:da:f1:c4:5a:ee:
         65:c0:31:cf:4f:58:5a:4c:83:c1:ed:4c:92:0a:aa:c0:1f:30:
         f2:20:73:07:88:75:70:af:6c:04:db:7d:62:5d:7e:88:57:66:
         8e:ca:33:a7:42:13:38:10:cd:d2:47:56:fb:2b:f8:58:d7:da:
         74:75:62:c9:3a:54:3a:54:21:5e:e4:20:07:aa:d0:d9:1c:a4:
         9d:18:34:ab:24:00:8c:53:0c:22:d8:74:bc:08:fc:98:fc:d1:
         4a:6d:2a:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UAuEKiHSMjgsUWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NGEzZmY1NmItYTJiYS00MWRkLWExOGYtZmUwNmFmOWI2YmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf1RlbC19YKQcRIKwMb/EOHAJJ7VpS8IY3ff
wg6z7jYU9a67QdeVqXiHmE6GUqNq93fqcW+TMOOjboPZP5rt0rIdPW+gRMhNfyTD
U1BdvGeqSg1hnlgRE37HEnSSSZCVjRIq0KBrP9hAKIhc6itr+NS832uLSwSkFsuI
/o4Y9ExUdimvQbF+t3RmyR+j1zASJTJImbOIn7oIZu5wz+d4mEpEdEwDDHmJZT2g
HPJIWHE4Vj7F7jxX5foBRnVG0c8S6RAUAo01FdhWWXInB2L433UIWAu/k7vaDD2G
t3r5H7YCBdrPMkDanbmIaEtkaW6e/twbAZes4VdYL2Nt9teINQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4+hSG5R6Xj7Ps5y2dXKzrH4SOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWYxMTM4NmUtY2FhNC0z
ZjRmLTgyYjQtZmY0NWY5Mzc4MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYij9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKWKqrvcsP0s05ZAD2n5TAsk9AW/EhHiefPOBCpqpua136JIM57dAnHW
WDjol3fNHwxMSQjCuNLVj2hWkND+5pLvrpGf3JSAkxxopfNhNgBVtbnpwd2pOw2y
3sbmRqnf1ztqd6OV7awHZLPjSmgPjuihgqyWG25RlM8h8tAHxnnY3lNWL2rMCBK2
/RURSMWHtvZW4biZlAV/Lpj/8o3a8cRa7mXAMc9PWFpMg8HtTJIKqsAfMPIgcweI
dXCvbATbfWJdfohXZo7KM6dCEzgQzdJHVvsr+FjX2nR1Ysk6VDpUIV7kIAeq0Nkc
pJ0YNKskAIxTDCLYdLwI/Jj80UptKg8=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:45:40 2026 by rpki-client