Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b231a5-ce3d-38ea-8826-d59315295ebd.roa
File:                     32b231a5-ce3d-38ea-8826-d59315295ebd.roa (raw, json)
Hash identifier:          Jli0HnwyzrZuMaxBWwxv9r7dU9vB4ZkpNp9Nvp2Bfyw=
Subject key identifier:   62:25:C0:6B:8F:04:7B:4F:87:D4:38:2D:6F:13:09:A9:BC:6E:3E:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8168479B00D4B5728E120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b231a5-ce3d-38ea-8826-d59315295ebd.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7725
IP address blocks:        98.192.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:16:84:79:b0:0d:4b:57:28:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=1ab83678-0d37-4af2-85a4-b60e7c3bcbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:8d:81:de:88:4c:03:15:45:cb:75:91:00:
                    60:d6:91:26:42:d1:9f:2a:76:b4:46:b8:e2:72:a2:
                    47:2f:5e:c4:3f:41:32:1b:ce:1d:76:dc:40:c5:ea:
                    78:af:84:2e:ec:ed:e0:d1:28:4a:5c:96:6d:e6:73:
                    91:0c:95:81:0d:6f:50:b9:7c:64:73:39:9d:11:ae:
                    bc:bc:5b:ef:30:36:a0:30:61:98:22:c5:8b:b6:5a:
                    46:85:ec:a8:15:6a:ee:a9:81:a8:70:15:83:3b:68:
                    f2:b4:a2:31:01:20:d7:54:c0:1d:0f:59:35:af:10:
                    ff:2c:d0:86:cc:b9:17:8c:fa:c9:9e:e9:b1:21:9f:
                    25:50:27:6a:c2:3b:32:40:93:f5:1f:25:27:ef:bd:
                    a5:3c:35:4b:b1:33:39:c0:fa:dc:e0:95:b1:94:92:
                    ae:50:14:5b:db:0e:ec:c9:39:ff:32:34:f6:3b:ca:
                    dc:59:e2:14:be:32:b6:ec:a4:c8:e3:bd:8d:7b:b3:
                    9e:dc:ae:a9:c8:a4:1c:05:ff:64:42:c1:85:f3:96:
                    c2:90:6d:d2:f1:2e:cf:f5:65:b6:f2:0c:71:b6:1a:
                    bc:8d:8a:46:8d:9f:53:6c:bc:33:cb:ed:5c:ac:1d:
                    97:aa:17:20:50:d5:ba:2a:44:a4:48:76:b2:26:7d:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:C0:6B:8F:04:7B:4F:87:D4:38:2D:6F:13:09:A9:BC:6E:3E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b231a5-ce3d-38ea-8826-d59315295ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.192.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:82:d4:5a:ae:2f:4b:15:31:bd:32:6c:db:e4:96:89:16:81:
         40:14:51:90:dc:7f:59:66:a3:46:fd:87:b0:90:9c:ee:bf:3a:
         8d:3b:82:d5:8b:97:70:4d:23:8f:85:92:ae:ee:13:52:70:12:
         a5:1c:34:ac:92:e9:a4:f7:fa:31:42:f2:0f:c5:0c:4b:22:ac:
         a4:ee:c3:66:98:8c:68:34:2f:8a:46:a3:1f:47:7f:3c:c6:36:
         25:80:10:bd:70:7c:16:38:45:2c:f6:d9:53:39:56:85:fc:b7:
         12:f5:5f:19:83:3c:94:76:4f:ed:a3:3e:0f:04:52:3c:66:c8:
         f8:35:57:e9:22:b1:02:82:9d:c2:3a:df:a9:af:bf:d1:d6:34:
         5c:58:61:2d:df:d6:bf:0f:ab:ee:9a:9b:4b:11:d6:28:03:8a:
         da:f7:5c:54:2b:47:01:a1:e6:b0:9f:27:71:9f:99:40:3a:b5:
         ac:f4:8e:23:29:e4:bd:ea:71:37:a6:2f:0b:e4:39:fa:0e:50:
         5e:f8:41:8d:aa:62:85:58:6f:be:34:c6:f0:25:03:39:95:6d:
         c7:77:2e:9d:09:0f:d3:fe:b8:90:67:1b:5e:1e:31:39:0d:d4:
         2c:24:48:28:b5:3d:a0:9a:93:bc:b1:14:d6:b2:8d:40:4e:dd:
         80:52:7a:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96BaEebANS1co4SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
MWFiODM2NzgtMGQzNy00YWYyLTg1YTQtYjYwZTdjM2JjYmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgSNgd6ITAMVRct1kQBg1pEmQtGfKna0Rrji
cqJHL17EP0EyG84ddtxAxep4r4Qu7O3g0ShKXJZt5nORDJWBDW9QuXxkczmdEa68
vFvvMDagMGGYIsWLtlpGheyoFWruqYGocBWDO2jytKIxASDXVMAdD1k1rxD/LNCG
zLkXjPrJnumxIZ8lUCdqwjsyQJP1HyUn772lPDVLsTM5wPrc4JWxlJKuUBRb2w7s
yTn/MjT2O8rcWeIUvjK27KTI472Ne7Oe3K6pyKQcBf9kQsGF85bCkG3S8S7P9WW2
8gxxthq8jYpGjZ9TbLwzy+1crB2XqhcgUNW6KkSkSHayJn11DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIlwGuPBHtPh9Q4LW8TCam8bj4tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJiMjMxYTUtY2UzZC0z
OGVhLTg4MjYtZDU5MzE1Mjk1ZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYsAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOC1FquL0sVMb0ybNvklokWgUAUUZDcf1lmo0b9h7CQnO6/Oo07gtWL
l3BNI4+Fkq7uE1JwEqUcNKyS6aT3+jFC8g/FDEsirKTuw2aYjGg0L4pGox9HfzzG
NiWAEL1wfBY4RSz22VM5VoX8txL1XxmDPJR2T+2jPg8EUjxmyPg1V+kisQKCncI6
36mvv9HWNFxYYS3f1r8Pq+6am0sR1igDitr3XFQrRwGh5rCfJ3GfmUA6taz0jiMp
5L3qcTemLwvkOfoOUF74QY2qYoVYb740xvAlAzmVbcd3Lp0JD9P+uJBnG14eMTkN
1CwkSCi1PaCak7yxFNayjUBO3YBSejw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:39 2026 by rpki-client