Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c2d2a973-a08d-3595-b981-6bceae42d19e.roa
File:                     c2d2a973-a08d-3595-b981-6bceae42d19e.roa (raw, json)
Hash identifier:          RmLhq5IRmuAL77sawRcnm/LU6zw/xOsbG//JtLKztvA=
Subject key identifier:   4F:4F:87:76:BE:58:61:F4:6C:FE:B2:F8:61:96:26:A4:D8:6B:90:B0
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D67DFF6B0FFE2DE4C611149C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c2d2a973-a08d-3595-b981-6bceae42d19e.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     212238
IP address blocks:        98.159.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f6:b0:ff:e2:de:4c:61:11:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=2bbc3f0d-77c0-4db3-bcab-6117b7f39139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:20:e8:5b:f7:0a:de:d2:4c:8b:f1:7f:09:
                    31:25:cc:75:c9:d0:0b:c0:36:f5:f9:1a:d8:26:8c:
                    a9:96:0e:e6:ad:3e:91:75:3c:15:36:23:3e:79:e3:
                    b5:1d:98:03:26:57:b7:bd:cd:36:71:21:89:69:d4:
                    6d:54:59:37:94:f0:da:29:31:4b:21:c5:55:96:30:
                    e8:66:82:7c:dc:0b:7c:57:f5:e6:94:19:66:c5:fb:
                    47:0e:7c:75:85:08:8e:9f:40:da:51:f3:3a:4d:5d:
                    0f:50:21:df:3e:f2:b4:ea:eb:08:9d:8b:ae:c5:50:
                    3f:68:c8:b6:21:d8:37:7a:c4:cc:26:23:49:07:1c:
                    25:a9:ef:4e:c0:13:de:72:17:d5:e4:43:a6:55:c6:
                    2d:09:06:20:f8:a9:28:08:2f:d5:fb:78:fc:76:45:
                    45:3e:b6:25:d9:39:02:03:ea:79:c0:c8:e2:72:06:
                    9e:d1:dc:5b:97:db:2a:12:b8:e1:0e:3c:30:01:c6:
                    ce:00:af:2c:ac:9c:bf:f4:16:f2:09:0f:66:ae:2c:
                    2f:83:e6:e6:5e:ea:e1:e1:8d:f7:57:a2:48:a9:df:
                    20:b6:c1:e2:a3:c2:a5:90:74:16:25:92:f4:27:e3:
                    73:fb:64:07:80:22:70:96:31:af:a5:92:11:5d:ca:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4F:87:76:BE:58:61:F4:6C:FE:B2:F8:61:96:26:A4:D8:6B:90:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c2d2a973-a08d-3595-b981-6bceae42d19e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:7b:3b:34:f3:a4:a5:1d:76:d6:cc:9d:87:87:80:b5:34:
         00:3f:45:21:7c:58:81:a8:4e:fd:35:e7:02:f0:a1:30:5d:62:
         7c:1a:49:e1:e3:e7:b0:6a:f6:82:61:29:c5:09:b9:89:93:53:
         cb:07:0e:46:ac:68:e4:60:b8:97:d1:e2:34:58:4e:02:ca:78:
         e6:99:81:94:9a:67:f1:8d:42:a8:e4:95:b4:ae:6c:3f:8e:a8:
         6d:21:db:5d:ef:c6:2c:16:2d:1f:c3:3a:7b:d5:98:01:3f:dd:
         9f:b7:15:f1:33:f6:ce:f5:dc:2a:00:3c:e1:31:5b:64:6d:68:
         bf:e3:d2:14:0e:60:72:d5:74:65:a5:6b:d1:b5:86:99:c5:9a:
         73:cf:0f:83:f6:7a:a1:0f:8d:e9:58:2d:dc:cf:99:4a:42:59:
         f3:4e:5c:0f:f4:0b:2f:4a:19:97:88:98:be:cd:6d:3e:99:bb:
         68:e8:f1:80:a6:a7:b4:ec:cd:43:45:e6:84:77:f1:1c:e1:84:
         f1:23:a9:55:b7:d0:81:7e:87:73:3b:b0:23:1f:a9:ed:02:69:
         46:9b:40:6e:f4:c9:04:20:12:20:0d:69:05:c2:0f:9b:3b:c7:
         fe:e0:08:75:83:f2:20:47:8f:4b:5f:7e:1b:b0:a1:25:94:74:
         26:34:91:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/aw/+LeTGERScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
MmJiYzNmMGQtNzdjMC00ZGIzLWJjYWItNjExN2I3ZjM5MTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4sg6Fv3Ct7STIvxfwkxJcx1ydALwDb1+RrY
Joyplg7mrT6RdTwVNiM+eeO1HZgDJle3vc02cSGJadRtVFk3lPDaKTFLIcVVljDo
ZoJ83At8V/XmlBlmxftHDnx1hQiOn0DaUfM6TV0PUCHfPvK06usInYuuxVA/aMi2
Idg3esTMJiNJBxwlqe9OwBPechfV5EOmVcYtCQYg+KkoCC/V+3j8dkVFPrYl2TkC
A+p5wMjicgae0dxbl9sqErjhDjwwAcbOAK8srJy/9BbyCQ9mriwvg+bmXurh4Y33
V6JIqd8gtsHio8KlkHQWJZL0J+Nz+2QHgCJwljGvpZIRXcrAawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9Ph3a+WGH0bP6y+GGWJqTYa5CwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzJkMmE5NzMtYTA4ZC0z
NTk1LWI5ODEtNmJjZWFlNDJkMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp/pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFqezs086SlHXbWzJ2Hh4C1NAA/RSF8WIGoTv015wLwoTBdYnwaSeHj
57Bq9oJhKcUJuYmTU8sHDkasaORguJfR4jRYTgLKeOaZgZSaZ/GNQqjklbSubD+O
qG0h213vxiwWLR/DOnvVmAE/3Z+3FfEz9s713CoAPOExW2RtaL/j0hQOYHLVdGWl
a9G1hpnFmnPPD4P2eqEPjelYLdzPmUpCWfNOXA/0Cy9KGZeImL7NbT6Zu2jo8YCm
p7TszUNF5oR38RzhhPEjqVW30IF+h3M7sCMfqe0CaUabQG70yQQgEiANaQXCD5s7
x/7gCHWD8iBHj0tffhuwoSWUdCY0ke8=
-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:46 2026 by rpki-client