Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20171ddb-459c-333e-bbab-a6a61698daf9.roa
File:                     20171ddb-459c-333e-bbab-a6a61698daf9.roa (raw, json)
Hash identifier:          sJ57qUM7db4uSO0rTYxUJZexCWRmrHpm8T/a3tqmT7I=
Subject key identifier:   CA:D9:4C:64:35:B7:D5:29:80:1F:06:7B:F2:2B:CD:35:48:FB:80:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB38749EBC69F043656C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20171ddb-459c-333e-bbab-a6a61698daf9.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        98.243.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:38:74:9e:bc:69:f0:43:65:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=abfc9033-cba2-4daa-a0ae-c23e34210d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:11:1f:77:fe:40:af:ee:ae:6d:e7:78:eb:
                    10:d9:69:c7:bc:dc:a0:56:93:c9:bc:1f:16:09:fa:
                    6c:4b:10:bd:32:9b:06:52:3c:8c:40:bf:50:1a:3f:
                    fc:4f:4e:92:75:2f:a9:fe:e8:c7:2e:2a:a3:70:67:
                    b3:25:af:83:6e:58:84:94:49:19:0c:af:c2:4d:3e:
                    b2:26:ab:f1:cd:d4:cd:55:a3:64:db:d2:b9:cb:f0:
                    5d:a8:ea:b8:8a:9d:98:77:bb:e9:3f:84:03:5a:fa:
                    d4:1f:80:fe:20:bc:c4:93:91:b6:73:26:57:65:d2:
                    cc:c1:6e:5d:ac:59:ce:b0:ad:c4:76:4c:69:57:2e:
                    ba:4b:90:b5:c9:b4:c4:aa:cd:fb:3d:97:f3:78:16:
                    db:c7:c8:51:0c:7b:a4:ff:24:55:c6:89:d5:af:cc:
                    1d:44:86:e5:6f:ee:61:37:f8:3d:f6:ab:ed:17:40:
                    7c:8f:9c:40:a0:6d:26:d0:39:bb:73:df:85:27:ca:
                    60:aa:d5:f2:cf:0d:b5:4f:96:ce:e8:bb:a0:f0:54:
                    84:92:46:a5:79:84:e8:57:49:ee:14:17:ab:34:29:
                    2b:9c:c7:3b:b1:14:04:f5:03:a7:13:54:ca:bf:29:
                    13:3d:d1:c8:b1:0d:3c:5f:e7:95:1a:56:11:a9:52:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D9:4C:64:35:B7:D5:29:80:1F:06:7B:F2:2B:CD:35:48:FB:80:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20171ddb-459c-333e-bbab-a6a61698daf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:30:f8:70:c4:90:89:22:3a:ca:1b:c0:f3:2a:08:46:7a:31:
         62:42:a5:e1:ca:a0:68:40:ce:2a:6b:0b:ca:60:c0:fe:9e:bc:
         36:1c:b4:18:0a:57:79:35:d8:96:85:8f:ae:68:52:9c:38:c2:
         cd:5c:d4:36:cc:64:c2:b8:7e:57:c0:0e:8a:12:be:3e:34:9d:
         d4:cc:11:5f:df:5a:47:87:49:5e:af:0d:b5:a7:f6:53:be:b4:
         a2:25:17:71:da:8d:62:6c:aa:81:f4:14:82:85:2c:c9:0f:9c:
         39:07:e7:e8:84:26:f1:d8:be:74:de:58:7e:62:3c:04:07:85:
         41:b0:d7:c9:31:7e:21:1a:70:9d:99:0f:63:44:8d:b3:2c:b6:
         85:83:65:b0:6f:5c:8f:98:27:fc:08:88:30:68:92:5b:a2:fd:
         8e:d3:63:bb:23:36:b1:44:1b:6c:cf:a0:15:1a:e5:83:ef:77:
         f9:00:20:61:0e:89:e7:cc:c4:21:5f:dc:a0:8e:a2:94:13:d4:
         57:97:c2:12:57:6d:6e:6e:ba:2b:9a:5b:03:53:17:76:46:45:
         65:ee:cd:52:9c:b3:31:38:26:21:57:97:76:b4:89:a9:3a:04:
         30:95:a8:b7:d0:bb:88:9a:b6:10:08:c0:a8:88:27:d8:f9:db:
         59:15:c9:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuzh0nrxp8ENlbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
YWJmYzkwMzMtY2JhMi00ZGFhLWEwYWUtYzIzZTM0MjEwZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok4RH3f+QK/urm3neOsQ2WnHvNygVpPJvB8W
CfpsSxC9MpsGUjyMQL9QGj/8T06SdS+p/ujHLiqjcGezJa+DbliElEkZDK/CTT6y
JqvxzdTNVaNk29K5y/BdqOq4ip2Yd7vpP4QDWvrUH4D+ILzEk5G2cyZXZdLMwW5d
rFnOsK3EdkxpVy66S5C1ybTEqs37PZfzeBbbx8hRDHuk/yRVxonVr8wdRIblb+5h
N/g99qvtF0B8j5xAoG0m0Dm7c9+FJ8pgqtXyzw21T5bO6Lug8FSEkkaleYToV0nu
FBerNCkrnMc7sRQE9QOnE1TKvykTPdHIsQ08X+eVGlYRqVJnDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrZTGQ1t9UpgB8Ge/IrzTVI+4DjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjAxNzFkZGItNDU5Yy0z
MzNlLWJiYWItYTZhNjE2OThkYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMw+HDEkIkiOsobwPMqCEZ6MWJCpeHKoGhAziprC8pgwP6evDYctBgK
V3k12JaFj65oUpw4ws1c1DbMZMK4flfADooSvj40ndTMEV/fWkeHSV6vDbWn9lO+
tKIlF3HajWJsqoH0FIKFLMkPnDkH5+iEJvHYvnTeWH5iPAQHhUGw18kxfiEacJ2Z
D2NEjbMstoWDZbBvXI+YJ/wIiDBoklui/Y7TY7sjNrFEG2zPoBUa5YPvd/kAIGEO
iefMxCFf3KCOopQT1FeXwhJXbW5uuiuaWwNTF3ZGRWXuzVKcszE4JiFXl3a0iak6
BDCVqLfQu4iathAIwKiIJ9j521kVycs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:02 2026 by rpki-client