Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/011e3edb-d442-3ac5-b2f9-9e16e4060e18.roa
File:                     011e3edb-d442-3ac5-b2f9-9e16e4060e18.roa (raw, json)
Hash identifier:          M+dwD5IyjgnzB2TwyAXNTHSBW7+9b6oEy9NT8nbVh3M=
Subject key identifier:   C0:FB:FD:82:B0:05:91:F2:3A:AA:19:F2:54:F2:A1:51:79:77:36:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57A50EF2CAF0AA495F4300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/011e3edb-d442-3ac5-b2f9-9e16e4060e18.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        98.221.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:a5:0e:f2:ca:f0:aa:49:5f:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=33278aa8-d91e-44d8-8d13-7cff48e22a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:a8:71:e4:eb:b2:e9:1f:52:8d:7b:1f:e5:
                    5d:0e:85:24:eb:3f:d6:64:ae:e6:1c:cb:dc:b0:e2:
                    d6:e1:d5:4f:99:5a:8e:5d:ae:43:5b:e7:36:96:f3:
                    93:aa:62:c7:f5:d3:94:d5:1f:12:78:f6:b1:4e:6d:
                    eb:2b:1b:2f:76:ea:36:02:ba:db:59:19:24:e1:e8:
                    90:cb:17:8e:1e:a7:4b:83:fe:98:e0:08:76:6a:11:
                    bf:36:91:f5:2b:34:f1:d6:69:92:ec:6d:4a:d7:ea:
                    69:31:16:f2:77:6c:a6:8a:fb:ff:14:bf:7e:01:6c:
                    7b:9b:21:bf:56:93:a1:af:67:27:ae:21:34:e7:d7:
                    04:0b:b0:6c:21:ce:ae:e7:9b:9c:b6:23:a4:37:93:
                    ad:44:25:5f:df:e9:99:03:03:98:ee:e3:49:10:ef:
                    a2:f3:d0:cd:ae:8b:4f:5d:5d:39:1d:88:23:8e:98:
                    7c:de:a5:f8:aa:24:08:c2:83:ec:4d:3f:f0:82:08:
                    02:8c:7e:ae:f3:80:34:37:33:ad:11:c6:0b:e0:1f:
                    9b:c8:ba:fc:98:98:f0:d9:44:ba:17:68:12:73:83:
                    ad:c8:91:10:9a:9c:56:6d:b6:92:f3:5b:95:ac:a0:
                    20:89:da:d4:99:01:63:04:d6:08:be:62:9d:e8:f8:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FB:FD:82:B0:05:91:F2:3A:AA:19:F2:54:F2:A1:51:79:77:36:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/011e3edb-d442-3ac5-b2f9-9e16e4060e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.221.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:99:57:dc:c5:0a:8a:79:c7:33:d0:c2:f4:b4:0e:05:d2:82:
         a2:00:1e:af:5c:a2:0b:c2:a6:dd:c7:ce:d9:af:aa:df:e2:10:
         6f:be:0f:50:59:19:9c:b1:dd:82:98:ea:c6:bc:21:26:14:92:
         50:77:b3:08:15:0f:f5:f9:d2:9e:50:32:37:74:6e:f0:81:62:
         84:6a:77:61:81:ed:e4:d5:1c:2f:56:ab:bb:49:a1:7c:28:f6:
         28:43:ac:51:9e:7d:7c:49:72:f0:c4:b6:e4:c9:77:ff:e6:71:
         70:6c:22:6a:b5:3e:cc:6d:61:31:a5:7c:c7:af:81:6b:2c:96:
         99:41:77:e5:f5:29:7f:13:88:58:02:53:e5:97:43:3c:ab:91:
         07:04:35:b2:ab:c0:23:3e:fe:dd:ca:e4:41:fd:16:c0:95:06:
         30:18:a1:db:08:96:a9:ee:48:f5:8b:81:63:af:16:f6:9d:9d:
         9a:8b:e0:ea:ef:52:e4:ea:db:82:e8:34:1d:e4:64:03:c6:a9:
         d0:02:fc:fe:4b:20:11:e3:2c:61:40:9f:89:71:34:56:f0:20:
         75:f7:18:6f:9d:7a:49:b3:13:46:87:8a:2b:40:99:20:b4:17:
         fc:16:8e:6d:42:df:d9:bf:5e:95:95:3d:81:c1:14:4a:ff:33:
         79:3f:ad:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV6UO8srwqklfQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzMyNzhhYTgtZDkxZS00NGQ4LThkMTMtN2NmZjQ4ZTIyYTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvKoceTrsukfUo17H+VdDoUk6z/WZK7mHMvc
sOLW4dVPmVqOXa5DW+c2lvOTqmLH9dOU1R8SePaxTm3rKxsvduo2ArrbWRkk4eiQ
yxeOHqdLg/6Y4Ah2ahG/NpH1KzTx1mmS7G1K1+ppMRbyd2ymivv/FL9+AWx7myG/
VpOhr2cnriE059cEC7BsIc6u55uctiOkN5OtRCVf3+mZAwOY7uNJEO+i89DNrotP
XV05HYgjjph83qX4qiQIwoPsTT/wgggCjH6u84A0NzOtEcYL4B+byLr8mJjw2US6
F2gSc4OtyJEQmpxWbbaS81uVrKAgidrUmQFjBNYIvmKd6PiMfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMD7/YKwBZHyOqoZ8lTyoVF5dzbNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDExZTNlZGItZDQ0Mi0z
YWM1LWIyZjktOWUxNmU0MDYwZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt1uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL2ZV9zFCop5xzPQwvS0DgXSgqIAHq9cogvCpt3Hztmvqt/iEG++D1BZ
GZyx3YKY6sa8ISYUklB3swgVD/X50p5QMjd0bvCBYoRqd2GB7eTVHC9Wq7tJoXwo
9ihDrFGefXxJcvDEtuTJd//mcXBsImq1PsxtYTGlfMevgWsslplBd+X1KX8TiFgC
U+WXQzyrkQcENbKrwCM+/t3K5EH9FsCVBjAYodsIlqnuSPWLgWOvFvadnZqL4Orv
UuTq24LoNB3kZAPGqdAC/P5LIBHjLGFAn4lxNFbwIHX3GG+dekmzE0aHiitAmSC0
F/wWjm1C39m/XpWVPYHBFEr/M3k/raM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:57 2026 by rpki-client