Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa
File:                     64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa (raw, json)
Hash identifier:          P1hXnPF5AExd9jKq5OF0IqI0/I9QfnY7wadnNce+Wmc=
Subject key identifier:   1A:CC:80:25:77:6F:91:EA:7E:05:C5:37:F8:59:89:31:52:8E:7D:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8631BD5AA70B72679E91700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.39.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:1b:d5:aa:70:b7:26:79:e9:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=2566782f-fdd2-45b1-b712-54a249b5b7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:f8:b4:36:36:31:7d:e8:d7:f1:04:8d:4e:
                    fd:1a:57:8f:c4:ae:7d:c3:ef:de:e0:9f:2e:22:f7:
                    6e:0a:52:12:e2:16:62:76:68:22:57:cd:64:f1:6d:
                    99:cb:9f:c0:83:26:10:f1:2c:4e:3c:bc:eb:f0:dd:
                    6c:30:7c:41:c6:18:89:00:9b:04:91:fa:52:a7:e8:
                    c7:fa:58:1e:6b:20:b6:e2:13:32:e7:6e:d2:4b:8a:
                    82:72:37:71:ea:17:54:ff:23:59:d9:58:59:e8:0d:
                    ca:59:3b:f9:50:4e:4e:f7:8d:a7:cb:b5:d9:c7:6a:
                    96:a2:c1:aa:fe:2f:a2:bd:80:83:51:46:8d:52:09:
                    1d:61:67:de:7c:a0:d2:15:a1:59:c2:93:34:dc:eb:
                    d7:cf:4b:2e:8f:ef:94:0f:38:23:17:f2:33:dc:5f:
                    bd:4f:07:a9:99:bc:c0:d4:ae:3a:b5:bd:35:ef:56:
                    c5:42:fb:b4:b2:bf:ac:08:ba:74:3f:b2:de:aa:16:
                    03:8b:ff:b2:ac:ff:94:6a:7d:cf:c0:3d:08:20:a4:
                    2a:5a:d6:26:48:4e:7c:60:f1:68:31:b8:a4:95:7a:
                    fc:9c:a4:b1:d5:7b:d2:38:5f:48:38:c2:0b:f3:6c:
                    ff:2b:83:81:d3:59:c3:0c:49:f9:37:c4:02:1b:e3:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CC:80:25:77:6F:91:EA:7E:05:C5:37:F8:59:89:31:52:8E:7D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c3:16:a1:03:f3:95:da:c1:ca:3d:eb:c7:32:fa:93:df:72:
         c0:4e:9a:53:22:ef:54:3b:10:1a:42:9a:45:91:12:b6:f4:70:
         04:a1:b9:8b:4d:6d:1a:73:5e:0f:29:69:5b:bb:27:bd:e4:61:
         d3:cb:e8:c4:a5:47:c2:6a:ef:df:e7:7c:7a:c7:c4:72:63:ed:
         7d:41:6d:fd:bd:08:67:3e:1e:ee:b0:a1:c9:b8:a5:46:90:f8:
         7a:fa:c9:73:0c:56:ea:19:46:9e:ae:21:70:c1:15:b8:09:50:
         99:57:e4:75:1f:dc:76:c1:c2:4f:30:ca:d0:0a:6b:93:a7:e7:
         01:de:80:61:ba:dd:7a:27:83:2c:13:35:f7:73:0f:cb:d9:49:
         b4:a5:2f:4d:07:3c:3c:8e:8c:55:ec:0a:f6:49:dc:4f:85:c0:
         50:51:4c:a7:09:a1:ae:a2:17:bb:e5:86:d4:65:54:60:df:f3:
         48:51:77:cb:a9:ed:25:af:36:7e:e5:02:b8:55:e0:63:d3:15:
         3e:7b:33:f8:48:df:49:0d:e3:a1:25:d9:ac:25:32:9a:4e:78:
         3b:4c:60:55:ce:49:0c:f8:8d:b7:18:9e:9b:2e:4f:1c:58:88:
         1f:32:f4:f2:aa:e3:31:46:79:cb:a6:e2:a6:06:a4:70:56:8e:
         52:2a:ab:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYxvVqnC3JnnpFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MjU2Njc4MmYtZmRkMi00NWIxLWI3MTItNTRhMjQ5YjViN2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp/4tDY2MX3o1/EEjU79GlePxK59w+/e4J8u
IvduClIS4hZidmgiV81k8W2Zy5/AgyYQ8SxOPLzr8N1sMHxBxhiJAJsEkfpSp+jH
+lgeayC24hMy527SS4qCcjdx6hdU/yNZ2VhZ6A3KWTv5UE5O942ny7XZx2qWosGq
/i+ivYCDUUaNUgkdYWfefKDSFaFZwpM03OvXz0suj++UDzgjF/Iz3F+9TwepmbzA
1K46tb0171bFQvu0sr+sCLp0P7LeqhYDi/+yrP+Uan3PwD0IIKQqWtYmSE58YPFo
MbiklXr8nKSx1XvSOF9IOMIL82z/K4OB01nDDEn5N8QCG+NiFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrMgCV3b5HqfgXFN/hZiTFSjn2IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRiMjRlMTctMWRjNy0z
M2FkLWEyZGQtYTdlMTEyZTE2Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYidAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfDFqED85Xawco968cy+pPfcsBOmlMi71Q7EBpCmkWRErb0cAShuYtN
bRpzXg8paVu7J73kYdPL6MSlR8Jq79/nfHrHxHJj7X1Bbf29CGc+Hu6wocm4pUaQ
+Hr6yXMMVuoZRp6uIXDBFbgJUJlX5HUf3HbBwk8wytAKa5On5wHegGG63XongywT
NfdzD8vZSbSlL00HPDyOjFXsCvZJ3E+FwFBRTKcJoa6iF7vlhtRlVGDf80hRd8up
7SWvNn7lArhV4GPTFT57M/hI30kN46El2awlMppOeDtMYFXOSQz4jbcYnpsuTxxY
iB8y9PKq4zFGecum4qYGpHBWjlIqq9w=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:02:15 2026 by rpki-client