Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0dfbd72-824a-30ea-8268-7a7b3f930644.roa
File:                     a0dfbd72-824a-30ea-8268-7a7b3f930644.roa (raw, json)
Hash identifier:          0is30XBgZs2g2IvaEXowsLRlYE1IEPP+RvNQ1tWfrFg=
Subject key identifier:   9E:26:58:9D:BD:F2:E4:EE:69:14:17:15:36:A5:44:2B:41:1A:77:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DF4DB320F9B9274BD2D450E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0dfbd72-824a-30ea-8268-7a7b3f930644.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        98.51.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:32:0f:9b:92:74:bd:2d:45:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=63333dd8-1aca-4577-b6e2-eff52759791e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:3b:be:4c:99:ee:05:92:81:47:c2:f7:30:
                    28:ce:42:73:ae:26:9f:f1:30:50:7d:a5:fd:b1:ad:
                    94:84:5b:ed:64:69:cd:36:ac:40:8a:03:d1:bf:40:
                    fc:d9:5c:d0:99:57:71:36:10:56:a2:6a:d1:2f:42:
                    fd:38:6c:cb:11:d5:74:4d:6f:65:bd:d8:56:18:c7:
                    62:a5:35:21:c9:75:8c:e3:f5:5a:36:74:8a:d6:d3:
                    12:26:41:dc:7c:8b:8d:5d:b1:5b:68:5f:4b:35:e3:
                    dd:58:ad:81:1a:19:7e:c9:be:58:58:cf:55:78:c1:
                    35:6e:01:ac:6b:74:52:eb:b1:c2:8a:54:c5:83:e8:
                    74:aa:04:e9:5b:2b:58:d0:e8:7d:9d:74:bb:b7:86:
                    53:89:8b:5b:67:31:79:2a:25:6f:97:ca:03:2f:39:
                    81:6f:b8:a2:60:51:28:3b:81:ca:a6:34:a1:8e:ca:
                    ec:79:54:3f:15:77:92:e0:58:09:4b:77:df:04:37:
                    bb:cd:35:dc:b4:89:b8:bf:d2:0d:ab:78:dc:1f:29:
                    ee:ac:97:f0:dc:7a:78:6a:4b:9f:9b:4a:c7:dd:f6:
                    d6:8a:5c:80:57:98:39:61:a1:96:f9:ca:3b:95:96:
                    89:0d:02:2b:91:98:b2:5f:f2:94:04:32:39:7a:9f:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:26:58:9D:BD:F2:E4:EE:69:14:17:15:36:A5:44:2B:41:1A:77:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0dfbd72-824a-30ea-8268-7a7b3f930644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.51.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:f0:c0:da:a2:1a:85:12:9c:d2:5c:e0:ec:b6:61:2b:53:
         99:ed:2c:b5:be:39:b4:ff:c7:c9:66:a2:19:5a:86:9e:20:6d:
         21:15:3b:b6:f6:a2:89:82:e6:3a:8e:42:e4:eb:6d:5f:84:62:
         81:0a:72:cc:dc:06:26:93:bd:3a:7a:40:e9:97:8f:b8:a3:7d:
         3f:83:2b:c3:0b:e7:d3:ea:46:66:9c:9f:e1:9a:37:c8:5e:79:
         05:cb:c4:fb:28:25:5a:28:40:a0:ed:05:d4:af:6f:70:fe:af:
         1b:ca:bd:eb:8f:35:be:92:73:4c:e4:d8:6a:59:50:7f:63:bf:
         e3:2c:28:ae:73:dd:7c:26:5c:84:f2:67:f5:49:3d:44:00:89:
         64:45:f5:8d:f7:f3:fd:48:f5:ff:27:1a:bd:23:3a:57:24:3f:
         61:9f:f0:f6:44:60:79:1d:a2:de:2e:66:5f:89:77:6f:80:df:
         4e:cc:e0:49:47:39:a3:a7:aa:6b:d3:cc:da:1f:95:ff:df:ea:
         20:31:b7:82:03:07:85:86:a0:dd:8d:9b:d5:f7:8f:f5:38:b9:
         42:2a:a5:0b:d6:09:8a:ac:37:16:33:7b:ac:59:4f:bb:24:97:
         7e:48:9a:9a:b7:3e:78:97:31:d5:ca:ae:b3:0c:9c:d7:1a:ba:
         96:5c:b4:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE302zIPm5J0vS1FDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NjMzMzNkZDgtMWFjYS00NTc3LWI2ZTItZWZmNTI3NTk3OTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nk7vkyZ7gWSgUfC9zAozkJzriaf8TBQfaX9
sa2UhFvtZGnNNqxAigPRv0D82VzQmVdxNhBWomrRL0L9OGzLEdV0TW9lvdhWGMdi
pTUhyXWM4/VaNnSK1tMSJkHcfIuNXbFbaF9LNePdWK2BGhl+yb5YWM9VeME1bgGs
a3RS67HCilTFg+h0qgTpWytY0Oh9nXS7t4ZTiYtbZzF5KiVvl8oDLzmBb7iiYFEo
O4HKpjShjsrseVQ/FXeS4FgJS3ffBDe7zTXctIm4v9INq3jcHynurJfw3Hp4akuf
m0rH3fbWilyAV5g5YaGW+co7lZaJDQIrkZiyX/KUBDI5ep8ITQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4mWJ298uTuaRQXFTalRCtBGncfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBkZmJkNzItODI0YS0z
MGVhLTgyNjgtN2E3YjNmOTMwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjN8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKuf8MDaohqFEpzSXODstmErU5ntLLW+ObT/x8lmohlahp4gbSEVO7b2
oomC5jqOQuTrbV+EYoEKcszcBiaTvTp6QOmXj7ijfT+DK8ML59PqRmacn+GaN8he
eQXLxPsoJVooQKDtBdSvb3D+rxvKveuPNb6Sc0zk2GpZUH9jv+MsKK5z3XwmXITy
Z/VJPUQAiWRF9Y338/1I9f8nGr0jOlckP2Gf8PZEYHkdot4uZl+Jd2+A307M4ElH
OaOnqmvTzNoflf/f6iAxt4IDB4WGoN2Nm9X3j/U4uUIqpQvWCYqsNxYze6xZT7sk
l35Impq3PniXMdXKrrMMnNcaupZctCU=
-----END CERTIFICATE-----
Generated at Sat Jun 6 17:09:06 2026 by rpki-client