Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
File:                     98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa (raw, json)
Hash identifier:          nLzKXvSSc1a91C8saX7mFdze6WnkP+AonWRZ+SRBqBc=
Subject key identifier:   DC:D0:1D:95:1C:8A:96:3D:10:5F:C5:7A:C1:EC:FC:4D:96:66:0A:46
Certificate issuer:       /CN=7fd18149-017f-4551-ae16-4dcabee6b650
Certificate serial:       010D0C9F4328584D0D426D9EAC8584AAC0B01BC0
Authority key identifier: 42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     394791
IP address blocks:        204.10.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6d:9e:ac:85:84:aa:c0:b0:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18149-017f-4551-ae16-4dcabee6b650
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=912761ca-16b1-41aa-8660-7f38f05689aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:5e:24:4e:28:96:08:25:df:9c:40:e4:ee:
                    d1:66:11:64:a1:2d:48:e9:87:ff:f3:a9:f9:1f:b2:
                    a7:80:a6:65:ba:f9:0c:e2:ea:7f:93:0a:7d:f3:c1:
                    cf:da:6d:13:c2:0d:15:50:ad:32:07:b3:20:fd:82:
                    6b:53:d3:09:4b:3b:f0:a4:e4:6f:a4:bc:80:0c:67:
                    18:51:b6:9b:7b:4e:d1:f0:39:c1:a5:5a:79:06:49:
                    b1:5e:ab:84:f9:05:bd:d4:52:fd:b4:6d:c1:76:90:
                    7e:fd:73:1d:b2:58:90:7b:77:d4:78:0f:3c:74:5d:
                    55:c3:1b:b2:ea:6f:2c:4a:4f:72:75:c9:4f:e5:81:
                    ff:6b:62:d1:79:c4:74:ea:a0:5c:0a:04:e5:d1:99:
                    2d:ce:cb:52:65:e8:69:20:5f:9b:8a:6c:50:c2:5e:
                    f7:ee:d0:cb:fe:d9:f5:02:1e:e1:f2:87:f7:dd:9f:
                    08:63:e6:f8:65:a4:6f:30:9f:dd:fb:bd:a6:32:30:
                    ec:76:78:cf:f7:fa:f3:a6:5a:e7:4f:e2:12:80:85:
                    17:1e:63:07:fc:c8:6a:5a:e6:2e:39:ec:4d:f5:04:
                    d1:a1:8a:e1:a1:a7:be:02:0c:59:b9:28:44:a0:c1:
                    7a:42:2e:d5:cd:fd:3b:2d:fd:1e:5c:55:73:14:bf:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D0:1D:95:1C:8A:96:3D:10:5F:C5:7A:C1:EC:FC:4D:96:66:0A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:12:2b:d2:2b:37:49:ad:ab:73:88:f8:e2:1c:43:1a:79:fd:
         2c:50:2e:32:5f:99:9e:15:e4:61:35:e7:6d:ea:fe:46:17:d4:
         09:26:5a:1a:0b:23:d5:75:c4:6b:fa:a3:f9:95:00:a5:a1:ff:
         88:3d:9b:7b:12:96:22:6a:71:bf:d0:a2:1d:35:86:6f:f5:90:
         d9:b3:13:d1:90:b5:ef:b7:2c:67:0f:06:e2:63:00:d6:6b:bc:
         c0:1a:67:6c:2d:5a:78:18:92:c9:6a:b7:07:e3:e8:44:c8:f8:
         da:cd:0f:26:eb:60:b1:11:bc:68:ea:d8:fd:bc:1e:9f:02:95:
         76:fd:e2:87:5e:f0:6c:9d:c3:3b:d1:63:a3:a8:a8:6b:b9:9d:
         fd:dd:ed:28:83:48:85:4c:b4:3a:8d:6f:3a:a3:cc:fa:45:9d:
         46:02:83:d3:41:57:f8:39:ee:df:c5:c3:6b:97:3d:4e:60:d7:
         74:e1:44:77:8b:d4:4d:32:c9:8c:1d:28:08:95:03:86:84:c7:
         99:d2:73:23:2a:2e:c5:08:dd:b7:c9:6c:39:6e:af:bc:b9:d1:
         3d:cb:bb:99:a8:af:cb:79:47:79:f5:df:a7:1b:7a:ac:f4:73:
         0e:ce:a5:db:d2:cf:7d:85:b3:58:a2:d6:34:4c:fc:1f:f1:23:
         29:3a:e1:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm2erIWEqsCwG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZkMTgxNDktMDE3Zi00NTUxLWFlMTYtNGRjYWJlZTZi
NjUwMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
OTEyNzYxY2EtMTZiMS00MWFhLTg2NjAtN2YzOGYwNTY4OWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvpeJE4olggl35xA5O7RZhFkoS1I6Yf/86n5
H7KngKZluvkM4up/kwp988HP2m0Twg0VUK0yB7Mg/YJrU9MJSzvwpORvpLyADGcY
Ubabe07R8DnBpVp5BkmxXquE+QW91FL9tG3BdpB+/XMdsliQe3fUeA88dF1Vwxuy
6m8sSk9ydclP5YH/a2LRecR06qBcCgTl0ZktzstSZehpIF+bimxQwl737tDL/tn1
Ah7h8of33Z8IY+b4ZaRvMJ/d+72mMjDsdnjP9/rzplrnT+ISgIUXHmMH/MhqWuYu
OexN9QTRoYrhoae+AgxZuShEoMF6Qi7Vzf07Lf0eXFVzFL9yDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzQHZUcipY9EF/FesHs/E2WZgpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZmQx
ODE0OS0wMTdmLTQ1NTEtYWUxNi00ZGNhYmVlNmI2NTAvOTg5MDhjYTctZDI4NC0z
YmE4LWJhOGItM2M3YmZlY2ZmM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2ZkMTgxNDktMDE3Zi00NTUxLWFl
MTYtNGRjYWJlZTZiNjUwLzdmZDE4MTQ5LTAxN2YtNDU1MS1hZTE2LTRkY2FiZWU2
YjY1MC5jcmwwHwYDVR0jBBgwFoAUQpdifDbE1o6men373tsYeGBJgFwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZmQxODE0OS0wMTdmLTQ1NTEtYWUxNi00ZGNh
YmVlNmI2NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzApqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMwSK9IrN0mtq3OI+OIcQxp5/SxQLjJfmZ4V5GE1523q/kYX1AkmWhoL
I9V1xGv6o/mVAKWh/4g9m3sSliJqcb/Qoh01hm/1kNmzE9GQte+3LGcPBuJjANZr
vMAaZ2wtWngYkslqtwfj6ETI+NrNDybrYLERvGjq2P28Hp8ClXb94ode8GydwzvR
Y6OoqGu5nf3d7SiDSIVMtDqNbzqjzPpFnUYCg9NBV/g57t/Fw2uXPU5g13ThRHeL
1E0yyYwdKAiVA4aEx5nScyMqLsUI3bfJbDlur7y50T3Lu5mor8t5R3n136cbeqz0
cw7OpdvSz32Fs1ii1jRM/B/xIyk64Y8=
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:17:17 2026 by rpki-client