Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf934321-c85e-36e1-8ffe-94623e3e0da6.roa
File:                     bf934321-c85e-36e1-8ffe-94623e3e0da6.roa (raw, json)
Hash identifier:          E5pqzwjJljJEAvryMBueLUT2Qwwpj85BNoQ7LYQXnns=
Subject key identifier:   9D:72:95:0D:7B:D4:6A:F3:66:A2:67:EA:F7:7B:23:DD:15:75:9A:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E5D2B7169833EDB5E1940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf934321-c85e-36e1-8ffe-94623e3e0da6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        98.210.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:5d:2b:71:69:83:3e:db:5e:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=6f5fe52c-24de-4fcb-ad59-cc3fdf571562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:e3:86:d3:c4:67:44:7b:99:07:85:f6:2a:
                    6a:af:ac:56:58:30:5d:c7:01:9b:4f:0d:22:10:99:
                    7f:3c:30:57:e1:07:b3:c7:7f:68:cf:9a:27:8c:ca:
                    86:61:6b:28:78:83:57:44:63:f2:8c:4e:ba:75:5c:
                    ec:d0:b1:7d:ad:ab:41:b8:7d:3c:85:8e:d7:12:78:
                    fb:aa:75:04:18:44:50:3b:27:7d:bb:d9:a5:75:cb:
                    e8:4d:4e:3f:5b:48:8f:d9:e7:b7:2f:81:e4:7c:30:
                    e4:81:5e:0a:eb:52:42:ef:30:d7:dc:c0:ce:67:78:
                    af:e6:d7:56:b4:97:2c:3c:25:a3:c2:2f:e4:61:c8:
                    29:78:f5:7b:a9:ab:f2:52:de:5e:67:17:ca:60:7c:
                    3d:09:6f:ce:e7:bd:f2:88:93:70:c7:fe:5a:55:a4:
                    3c:aa:c9:b3:0b:06:f9:16:a9:3e:ab:28:c0:16:b0:
                    21:7f:e5:60:17:2e:9a:5f:d0:92:12:9c:dc:d6:e7:
                    61:4a:fe:e5:f3:fd:58:c0:2f:75:da:af:cb:6a:d2:
                    86:69:7c:7c:23:ae:2e:b6:4c:1d:3d:ee:3c:15:91:
                    6f:19:29:6a:d9:5b:82:14:67:6e:62:f1:b0:e5:ff:
                    bb:35:d9:b8:10:e3:81:5d:3d:66:92:0d:86:6e:ec:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:95:0D:7B:D4:6A:F3:66:A2:67:EA:F7:7B:23:DD:15:75:9A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf934321-c85e-36e1-8ffe-94623e3e0da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.210.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:de:03:ba:78:fd:ad:c1:18:15:bb:bd:5f:e0:f0:b7:77:ee:
         fa:13:2e:73:24:76:ab:b2:dd:bb:72:ff:17:9d:65:b2:7b:db:
         71:94:ea:6d:f4:2b:a1:d8:92:56:dc:04:37:e3:63:0e:61:5b:
         c0:11:cc:0d:90:e8:64:3f:2e:0c:a6:bd:17:4f:50:e9:1f:56:
         ff:fe:75:23:a7:ac:05:40:7b:4c:f2:9f:a2:b1:73:d4:9b:ef:
         4d:31:d9:13:68:3a:37:5a:87:f9:8f:05:ee:17:6c:e3:ba:7c:
         6d:c3:99:2c:5d:d5:fb:87:d0:6c:6d:25:4a:50:43:29:50:b1:
         f6:5f:d9:4d:2b:43:c4:75:dd:b6:1d:ec:27:b6:ad:f0:31:43:
         f9:2b:1b:2c:f4:c1:9b:45:75:f6:1d:9c:c3:45:89:7a:1b:cb:
         d0:3e:e8:d9:69:6d:9c:9c:8e:79:c7:25:0c:1c:e4:ed:00:e4:
         7e:ce:35:34:0b:9f:f5:7e:7e:b3:98:9c:9a:11:8a:80:5a:f8:
         60:cb:ef:e4:8a:46:09:b9:ba:a1:ca:84:c8:3a:98:d8:9b:fe:
         2b:66:db:07:fc:24:2d:ec:f8:5b:c2:fb:96:21:fa:67:39:3c:
         04:a0:27:ed:28:98:e7:ae:0f:9f:48:df:53:81:52:e8:e5:11:
         81:1d:8b:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPl0rcWmDPtteGUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NmY1ZmU1MmMtMjRkZS00ZmNiLWFkNTktY2MzZmRmNTcxNTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqLjhtPEZ0R7mQeF9ipqr6xWWDBdxwGbTw0i
EJl/PDBX4Qezx39oz5onjMqGYWsoeINXRGPyjE66dVzs0LF9ratBuH08hY7XEnj7
qnUEGERQOyd9u9mldcvoTU4/W0iP2ee3L4HkfDDkgV4K61JC7zDX3MDOZ3iv5tdW
tJcsPCWjwi/kYcgpePV7qavyUt5eZxfKYHw9CW/O573yiJNwx/5aVaQ8qsmzCwb5
Fqk+qyjAFrAhf+VgFy6aX9CSEpzc1udhSv7l8/1YwC912q/LatKGaXx8I64utkwd
Pe48FZFvGSlq2VuCFGduYvGw5f+7Ndm4EOOBXT1mkg2GbuxDOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1ylQ171GrzZqJn6vd7I90VdZr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5MzQzMjEtYzg1ZS0z
NmUxLThmZmUtOTQ2MjNlM2UwZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACneA7p4/a3BGBW7vV/g8Ld37voTLnMkdquy3bty/xedZbJ723GU6m30
K6HYklbcBDfjYw5hW8ARzA2Q6GQ/LgymvRdPUOkfVv/+dSOnrAVAe0zyn6Kxc9Sb
700x2RNoOjdah/mPBe4XbOO6fG3DmSxd1fuH0GxtJUpQQylQsfZf2U0rQ8R13bYd
7Ce2rfAxQ/krGyz0wZtFdfYdnMNFiXoby9A+6NlpbZycjnnHJQwc5O0A5H7ONTQL
n/V+frOYnJoRioBa+GDL7+SKRgm5uqHKhMg6mNib/itm2wf8JC3s+FvC+5Yh+mc5
PASgJ+0omOeuD59I31OBUujlEYEdi+Q=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:26 2026 by rpki-client