Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/98255c44-6bcd-30cc-9de5-bbdea2f07744.roa
File:                     98255c44-6bcd-30cc-9de5-bbdea2f07744.roa (raw, json)
Hash identifier:          FCu43vBZjFljmacEmPvMS3VAR5Tnju7j6WxRJ1S5WRs=
Subject key identifier:   36:D3:59:84:36:C3:24:D0:EE:F4:B3:FE:87:BF:F3:67:F8:B9:76:B9
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584EA799D5C30A8E6488B9345AC0
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/98255c44-6bcd-30cc-9de5-bbdea2f07744.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29789
IP address blocks:        64.210.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:d5:c3:0a:8e:64:88:b9:34:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d3b6b885-76ae-4885-a8f0-c06a805edca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:dd:9d:d6:b1:cc:79:4b:a6:27:f8:d2:89:
                    21:2d:82:45:b3:b1:d5:3b:ff:ad:0a:46:7f:68:a2:
                    7e:db:f0:5f:59:58:4e:d5:36:46:29:6f:ea:e6:43:
                    8a:ae:e1:30:15:db:b4:c7:20:aa:67:bc:2d:34:b7:
                    3c:22:d5:6c:8d:91:5d:ff:24:2e:87:d7:83:01:7d:
                    e5:d8:0c:96:ba:91:07:5a:87:4b:9a:20:c4:8f:46:
                    c9:7d:9d:4a:e3:aa:fb:d5:b3:07:6d:06:8c:e5:e4:
                    77:c2:54:0e:3d:ce:92:c9:4f:54:e7:79:cf:3a:e0:
                    14:16:d7:cb:03:b2:1f:f6:ed:5d:02:06:cf:9d:fe:
                    f1:70:14:19:20:5e:dc:bd:d6:3f:ae:7a:5b:d2:ef:
                    28:1d:71:5c:c9:ac:9f:bf:32:3a:7c:ed:d2:e0:d3:
                    fa:a3:57:b4:ff:8b:7d:57:f5:e8:08:37:57:ef:86:
                    81:7d:bb:f0:14:49:ef:ca:90:17:ff:b5:bf:32:34:
                    a0:41:b7:34:e3:56:7f:8a:77:b9:c5:9d:50:69:47:
                    c3:68:99:c9:72:72:7f:f2:c4:88:59:e4:16:e5:dc:
                    3e:8e:9a:01:f3:67:47:e6:1c:af:d9:de:6b:99:0e:
                    66:59:32:21:12:63:4a:d1:b7:72:0f:ea:15:7b:2a:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D3:59:84:36:C3:24:D0:EE:F4:B3:FE:87:BF:F3:67:F8:B9:76:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/98255c44-6bcd-30cc-9de5-bbdea2f07744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.210.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:13:c9:3a:82:a2:d0:6b:ba:05:c4:e3:a9:b6:ad:3f:9a:
         a1:ba:7d:33:c8:55:15:b7:20:b6:d2:3a:d8:c1:51:0d:d2:c4:
         d5:5c:11:1e:33:7a:66:8f:d4:94:28:8a:05:d7:b7:f2:22:06:
         b7:dc:a0:02:51:01:e3:5d:cf:d1:ca:bf:c1:0b:6c:c2:97:e8:
         23:c0:ef:2f:dd:90:15:39:22:6c:3e:8f:e1:da:23:cd:d6:45:
         ff:72:d5:a9:6a:03:d3:5c:42:0e:99:10:22:d1:b3:6c:15:34:
         cf:eb:84:7d:5a:be:a5:c7:8d:a8:61:e4:54:b8:a0:ed:02:06:
         42:a1:63:e2:83:a1:1d:78:af:59:90:3e:3b:89:92:21:71:7b:
         63:16:f9:65:c8:3e:f3:bb:7b:98:da:27:fc:05:02:09:d7:41:
         37:58:7c:a2:d7:10:5e:a0:6b:5c:27:09:d6:f8:39:a4:d5:9c:
         77:36:32:95:bf:c4:5a:31:0a:8f:4a:b1:95:11:a4:ed:51:eb:
         93:b8:cd:c5:b7:20:78:31:0d:ec:cd:6a:f4:72:84:08:76:6d:
         15:b5:9d:47:0c:79:7d:7a:dd:97:3d:e5:dd:83:83:74:b4:9c:
         6a:03:34:ab:1c:10:2d:fb:84:f0:6b:8c:b4:96:73:86:9d:38:
         fd:61:fc:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmdXDCo5kiLk0WsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2
YTljMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDNiNmI4ODUtNzZhZS00ODg1LWE4ZjAtYzA2YTgwNWVkY2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokrdndaxzHlLpif40okhLYJFs7HVO/+tCkZ/
aKJ+2/BfWVhO1TZGKW/q5kOKruEwFdu0xyCqZ7wtNLc8ItVsjZFd/yQuh9eDAX3l
2AyWupEHWodLmiDEj0bJfZ1K46r71bMHbQaM5eR3wlQOPc6SyU9U53nPOuAUFtfL
A7If9u1dAgbPnf7xcBQZIF7cvdY/rnpb0u8oHXFcyayfvzI6fO3S4NP6o1e0/4t9
V/XoCDdX74aBfbvwFEnvypAX/7W/MjSgQbc041Z/ine5xZ1QaUfDaJnJcnJ/8sSI
WeQW5dw+jpoB82dH5hyv2d5rmQ5mWTIhEmNK0bdyD+oVeyqa0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbTWYQ2wyTQ7vSz/oe/82f4uXa5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl
MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvOTgyNTVjNDQtNmJjZC0z
MGNjLTlkZTUtYmJkZWEyZjA3NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj
YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl
NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh
MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNKeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7ZE8k6gqLQa7oFxOOptq0/mqG6fTPIVRW3ILbSOtjBUQ3SxNVcER4z
emaP1JQoigXXt/IiBrfcoAJRAeNdz9HKv8ELbMKX6CPA7y/dkBU5Imw+j+HaI83W
Rf9y1alqA9NcQg6ZECLRs2wVNM/rhH1avqXHjahh5FS4oO0CBkKhY+KDoR14r1mQ
PjuJkiFxe2MW+WXIPvO7e5jaJ/wFAgnXQTdYfKLXEF6ga1wnCdb4OaTVnHc2MpW/
xFoxCo9KsZURpO1R65O4zcW3IHgxDezNavRyhAh2bRW1nUcMeX163Zc95d2Dg3S0
nGoDNKscEC37hPBrjLSWc4adOP1h/EI=
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:41 2026 by rpki-client