Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc86a45a-538b-3c3e-b047-f91faa28f2df.roa
File:                     cc86a45a-538b-3c3e-b047-f91faa28f2df.roa (raw, json)
Hash identifier:          z9yV1CK4N3+DQ2SJj085h86Bc8J3KgEzBO8DM9f+xqs=
Subject key identifier:   56:38:45:F1:6D:B0:45:D6:C6:8E:62:F9:5E:A0:E4:80:60:B2:F1:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FFD07214707362BA91480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc86a45a-538b-3c3e-b047-f91faa28f2df.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.200.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:fd:07:21:47:07:36:2b:a9:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=5ed85b0e-c858-443e-8c86-33a1623746c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:d6:60:17:57:b6:13:b1:ef:39:fe:51:41:
                    b2:10:24:ef:87:47:4b:64:44:2b:80:c8:93:6a:4c:
                    0e:ab:f4:57:43:6e:8b:bb:4b:53:f7:78:43:46:a9:
                    4d:c0:df:d9:0e:cb:60:70:92:a6:6e:60:d9:5c:c1:
                    f5:ad:4c:d7:f1:ca:00:56:cf:08:86:47:7a:ea:40:
                    e7:d1:48:2c:63:c6:b2:8b:05:8d:c0:d7:32:3b:8c:
                    38:e6:95:3c:07:88:d4:00:6e:5a:bf:30:30:68:9c:
                    99:9b:b3:bc:31:a3:39:ea:d5:19:a5:65:a1:39:bf:
                    a8:2b:f8:a2:4b:f4:31:5c:9c:fc:6f:27:ff:8c:e7:
                    99:bb:0e:84:77:a1:ca:da:19:ae:78:28:74:f6:4b:
                    6b:55:8b:eb:4b:f3:bb:4b:50:49:a4:2e:3d:81:8a:
                    d2:ed:14:54:a4:88:93:c3:7c:e0:20:46:7f:11:8b:
                    05:61:b1:67:66:88:42:7c:13:3e:34:78:13:32:8b:
                    f4:c3:f8:20:f3:32:84:83:20:2a:bc:03:7e:5c:fe:
                    0b:4c:94:81:0c:b9:4d:0b:e4:31:5f:37:9c:e7:13:
                    16:09:e7:f4:29:3b:77:da:37:55:cf:1c:95:3b:5a:
                    81:11:40:44:49:3d:d2:96:7a:90:09:60:15:41:45:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:45:F1:6D:B0:45:D6:C6:8E:62:F9:5E:A0:E4:80:60:B2:F1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc86a45a-538b-3c3e-b047-f91faa28f2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:f2:0c:ff:48:5e:bd:47:e2:ba:ef:63:af:68:84:f9:36:
         de:e1:ad:c9:3d:55:7d:ab:53:d5:07:bf:b5:87:64:e2:cc:40:
         80:45:d4:46:ab:5f:c7:6a:7c:a5:df:38:2f:aa:ff:6f:44:95:
         90:ad:52:11:81:e1:0b:0e:3a:43:71:58:75:87:9e:5e:11:a8:
         33:5c:41:21:7e:da:2f:81:51:55:49:f3:89:e9:d1:53:6b:53:
         b6:0d:d2:03:2b:d3:9a:a9:eb:d0:4f:4a:bb:7e:56:46:ae:b1:
         8b:15:10:dc:0d:40:c0:9c:48:ec:8f:a3:5d:59:62:d5:62:df:
         0c:bd:1f:8a:07:1b:2a:ed:0a:76:d4:3a:d8:55:69:9e:b4:aa:
         e7:01:64:42:37:7b:38:04:b3:0c:71:cf:dc:a4:1a:1a:d5:8e:
         ac:2f:da:43:9b:70:12:48:c0:70:33:24:8b:ab:00:8a:ae:92:
         69:49:bd:48:28:de:ed:cb:fc:7b:2b:9f:23:7a:8f:ca:dd:2b:
         3a:aa:a5:09:1f:fe:45:a1:40:52:fb:d6:e0:c9:4f:f0:ea:80:
         5f:78:78:0b:44:0b:10:ef:b0:e6:38:cb:27:17:c9:d6:ce:ba:
         fc:d3:e4:48:ed:dc:7e:35:9a:6d:89:f7:bc:20:f9:25:26:53:
         0f:11:68:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T/0HIUcHNiupFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NWVkODViMGUtYzg1OC00NDNlLThjODYtMzNhMTYyMzc0NmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU3WYBdXthOx7zn+UUGyECTvh0dLZEQrgMiT
akwOq/RXQ26Lu0tT93hDRqlNwN/ZDstgcJKmbmDZXMH1rUzX8coAVs8Ihkd66kDn
0UgsY8ayiwWNwNcyO4w45pU8B4jUAG5avzAwaJyZm7O8MaM56tUZpWWhOb+oK/ii
S/QxXJz8byf/jOeZuw6Ed6HK2hmueCh09ktrVYvrS/O7S1BJpC49gYrS7RRUpIiT
w3zgIEZ/EYsFYbFnZohCfBM+NHgTMov0w/gg8zKEgyAqvAN+XP4LTJSBDLlNC+Qx
Xzec5xMWCef0KTt32jdVzxyVO1qBEUBEST3SlnqQCWAVQUVYiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFY4RfFtsEXWxo5i+V6g5IBgsvE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2M4NmE0NWEtNTM4Yi0z
YzNlLWIwNDctZjkxZmFhMjhmMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsjkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOx8gz/SF69R+K672OvaIT5Nt7hrck9VX2rU9UHv7WHZOLMQIBF1Ear
X8dqfKXfOC+q/29ElZCtUhGB4QsOOkNxWHWHnl4RqDNcQSF+2i+BUVVJ84np0VNr
U7YN0gMr05qp69BPSrt+VkausYsVENwNQMCcSOyPo11ZYtVi3wy9H4oHGyrtCnbU
OthVaZ60qucBZEI3ezgEswxxz9ykGhrVjqwv2kObcBJIwHAzJIurAIqukmlJvUgo
3u3L/HsrnyN6j8rdKzqqpQkf/kWhQFL71uDJT/DqgF94eAtECxDvsOY4yycXydbO
uvzT5Ejt3H41mm2J97wg+SUmUw8RaF8=
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:21:12 2026 by rpki-client