Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa
File:                     98f0c965-ca30-3304-820d-474d9767d316.roa (raw, json)
Hash identifier:          nmWXGFKz14F4SmbJ0Z/YNqAwc+9yHOJYRxsngt2BmLI=
Subject key identifier:   6C:DB:A3:BE:45:3C:8E:1D:AF:E3:67:94:13:55:DD:11:84:D4:7F:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED001FDE3F3BD720DB0974340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        174.41.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:fd:e3:f3:bd:72:0d:b0:97:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=da6ee5da-1009-4d74-932d-09b6a723a6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:3e:58:a9:dd:8f:e0:19:97:ce:88:d3:2b:
                    0f:5f:73:2e:2a:3c:0b:e5:da:bc:48:4e:03:3f:20:
                    40:bd:e0:7c:70:6e:b6:8c:7f:22:bd:b5:cc:63:e3:
                    d0:54:f9:53:d5:03:6a:72:ae:07:e6:c0:75:02:83:
                    eb:95:bf:4f:f3:9e:e7:9c:08:b1:8b:b9:8f:7d:d8:
                    c8:48:4e:38:90:b7:30:8e:56:1e:29:f3:a1:b3:58:
                    d9:bd:aa:d8:51:38:16:ab:41:80:58:db:79:0c:d5:
                    d9:cd:a5:3b:82:57:2a:fd:7e:36:ba:09:aa:1f:53:
                    28:ef:61:af:30:2b:bb:26:0b:09:66:d8:f7:e9:0e:
                    15:2d:39:42:40:09:e0:7b:5a:dc:61:be:f9:d7:9f:
                    e7:b8:f8:98:3b:ed:d9:3f:8d:df:08:25:fe:ec:34:
                    5f:f3:46:39:b9:d9:08:0a:93:a5:04:8a:00:55:e0:
                    1b:be:10:86:e5:e1:41:d5:69:7d:d1:fa:15:3e:3f:
                    59:23:0e:6e:38:a0:c3:10:c2:81:d4:6a:d9:98:b3:
                    a3:03:78:49:99:e8:b1:b6:a6:e1:78:52:4a:7e:83:
                    f1:f4:21:3c:af:90:54:da:e5:0a:d0:65:d4:f3:7e:
                    19:e6:dd:38:d1:a7:9f:36:4d:43:34:2b:34:9c:dd:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DB:A3:BE:45:3C:8E:1D:AF:E3:67:94:13:55:DD:11:84:D4:7F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:bf:17:44:61:ea:5f:ad:3a:40:21:34:ea:ea:f3:03:d7:cb:
         5a:b7:23:21:86:05:6e:d6:8a:ea:fa:55:5e:0b:cc:3c:5e:f1:
         61:ff:36:09:b4:81:df:5b:74:2f:5a:7d:96:10:67:cc:2f:f9:
         7d:24:1e:68:e7:c7:55:4f:60:8a:a8:e7:46:4d:0e:e2:b4:9d:
         53:71:e7:cc:18:19:83:1b:f9:3d:99:39:9a:07:02:0b:e2:9e:
         7b:a4:a6:ac:72:fe:1d:e2:86:34:2c:e1:60:15:2c:2f:d6:6b:
         31:2a:02:49:29:52:9e:eb:a4:40:9e:d7:ed:23:34:b3:30:9a:
         45:36:e4:f0:05:cb:8a:03:71:6b:4e:a3:42:ff:b7:7c:18:9f:
         1d:db:66:e5:98:fc:0d:26:9c:70:79:4f:2f:4b:e9:f3:15:ce:
         d1:95:00:66:62:93:e8:ae:5a:da:16:50:f0:1b:63:ce:73:44:
         ed:7c:00:a5:ed:5b:86:03:8f:0d:a8:e2:21:fe:43:92:c4:68:
         a6:34:ac:6a:95:36:d0:eb:6b:a3:ba:29:ca:2b:be:07:7c:11:
         78:94:43:3d:44:53:d4:20:af:9e:ca:20:4f:04:c2:90:cd:dc:
         3a:84:b1:85:f9:8e:65:39:0b:f8:18:84:6e:d7:2b:14:73:f1:
         e3:72:9e:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAf3j871yDbCXQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZGE2ZWU1ZGEtMTAwOS00ZDc0LTkzMmQtMDliNmE3MjNhNmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtg+WKndj+AZl86I0ysPX3MuKjwL5dq8SE4D
PyBAveB8cG62jH8ivbXMY+PQVPlT1QNqcq4H5sB1AoPrlb9P857nnAixi7mPfdjI
SE44kLcwjlYeKfOhs1jZvarYUTgWq0GAWNt5DNXZzaU7glcq/X42ugmqH1Mo72Gv
MCu7JgsJZtj36Q4VLTlCQAnge1rcYb7515/nuPiYO+3ZP43fCCX+7DRf80Y5udkI
CpOlBIoAVeAbvhCG5eFB1Wl90foVPj9ZIw5uOKDDEMKB1GrZmLOjA3hJmeixtqbh
eFJKfoPx9CE8r5BU2uUK0GXU834Z5t040aefNk1DNCs0nN3gjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzbo75FPI4dr+NnlBNV3RGE1H/WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThmMGM5NjUtY2EzMC0z
MzA0LTgyMGQtNDc0ZDk3NjdkMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6/F0Rh6l+tOkAhNOrq8wPXy1q3IyGGBW7Wiur6VV4LzDxe8WH/Ngm0
gd9bdC9afZYQZ8wv+X0kHmjnx1VPYIqo50ZNDuK0nVNx58wYGYMb+T2ZOZoHAgvi
nnukpqxy/h3ihjQs4WAVLC/WazEqAkkpUp7rpECe1+0jNLMwmkU25PAFy4oDcWtO
o0L/t3wYnx3bZuWY/A0mnHB5Ty9L6fMVztGVAGZik+iuWtoWUPAbY85zRO18AKXt
W4YDjw2o4iH+Q5LEaKY0rGqVNtDra6O6Kcorvgd8EXiUQz1EU9Qgr57KIE8EwpDN
3DqEsYX5jmU5C/gYhG7XKxRz8eNyngI=
-----END CERTIFICATE-----
Generated at Sat Aug 22 09:35:39 2026 by rpki-client