Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/748fb43c-b166-3e64-90dd-29ebf504e897.roa
File:                     748fb43c-b166-3e64-90dd-29ebf504e897.roa (raw, json)
Hash identifier:          +9tQRjGEJDtcnYC5TtGtEnPPXdTxPNq7tfclldX3qB0=
Subject key identifier:   5F:20:13:5E:2F:DD:C0:6C:CC:EC:2E:38:F9:FB:41:1A:E8:66:BE:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5891D9347704B54AD2A9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/748fb43c-b166-3e64-90dd-29ebf504e897.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        98.212.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:91:d9:34:77:04:b5:4a:d2:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=e1d80812-2ade-4f5e-a06c-4b789eaf47f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:5f:49:fc:af:f2:c0:52:d8:fc:2b:90:17:
                    66:34:16:6f:1f:92:b5:8e:d8:ff:01:71:08:3d:c8:
                    7b:f2:fd:be:95:74:18:a6:19:dd:f8:44:90:1f:8f:
                    90:de:ef:51:8d:c0:05:c7:d5:96:b6:ce:e8:6d:60:
                    cc:0a:a2:9c:ff:cc:de:cf:7b:78:22:04:3a:0e:8b:
                    21:d3:f8:08:27:b2:73:02:6a:cc:aa:d7:60:14:d9:
                    91:0a:da:ae:9e:c3:85:0c:58:2d:5c:65:96:95:1d:
                    b7:ab:82:fb:f9:db:d1:16:0d:39:1d:f7:51:f7:7f:
                    52:5b:5a:89:c4:a3:8c:64:11:70:37:42:2c:20:de:
                    e4:9e:06:af:ed:86:4d:f4:ab:21:82:2d:5a:24:ae:
                    b5:0c:66:11:55:11:de:f4:35:81:83:0e:a5:89:3d:
                    08:f3:83:fb:d4:fa:30:17:8c:a8:ad:0c:27:31:04:
                    e4:fc:42:90:81:80:8f:63:24:9c:8d:ee:ea:42:6c:
                    ac:41:fb:57:f0:1c:2a:2a:75:21:a0:88:d7:e4:ed:
                    3a:ed:c6:33:c0:0b:0c:84:a1:90:a2:03:d5:a7:18:
                    cf:5e:b0:03:f7:a1:6b:0f:00:d4:7b:31:c9:68:94:
                    07:47:c4:da:87:cb:26:5b:13:42:67:f1:96:e3:05:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:20:13:5E:2F:DD:C0:6C:CC:EC:2E:38:F9:FB:41:1A:E8:66:BE:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/748fb43c-b166-3e64-90dd-29ebf504e897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.212.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:3a:13:4b:74:b0:08:be:d9:fb:ca:e7:57:5d:6a:ae:30:
         0f:7b:ef:cb:bd:87:34:90:ba:bf:96:77:2c:41:14:5b:f8:44:
         1f:54:63:e4:64:ab:fa:1e:e3:3e:ab:cc:3f:a2:17:34:12:76:
         22:d0:24:d2:00:10:f9:3e:c7:dd:4b:ec:24:46:26:08:37:4e:
         33:0d:da:b4:ab:05:a7:81:90:cc:4d:a9:57:ff:91:74:5f:44:
         80:bc:ac:cd:dc:95:cd:09:4f:e0:51:61:cd:16:68:af:3d:c6:
         b1:96:dc:1f:e7:8e:68:90:09:71:2a:7b:f5:60:d7:94:b9:c4:
         74:0e:58:4e:d7:d8:e2:3a:52:39:71:ea:8d:be:13:50:1e:a0:
         b4:7f:b1:1e:61:6b:e0:27:bb:ed:ce:8b:61:6c:46:3f:80:8d:
         cd:ad:76:a8:06:b6:c4:cb:f4:be:d5:42:9c:7f:a9:96:fb:0f:
         bb:c2:33:75:26:fc:0b:73:ba:18:13:ad:8d:b8:e6:f6:04:77:
         85:43:3f:6f:e7:d2:ce:5b:11:1f:e7:82:43:dd:b1:a3:90:25:
         f6:0c:1d:fa:f8:d8:2f:9a:91:db:89:e4:59:7f:cb:19:70:f7:
         89:5a:79:9e:3d:20:4a:ae:ba:f7:86:08:6a:01:25:93:25:5f:
         22:48:e7:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJHZNHcEtUrSqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTFkODA4MTItMmFkZS00ZjVlLWEwNmMtNGI3ODllYWY0N2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufJfSfyv8sBS2PwrkBdmNBZvH5K1jtj/AXEI
Pch78v2+lXQYphnd+ESQH4+Q3u9RjcAFx9WWts7obWDMCqKc/8zez3t4IgQ6Dosh
0/gIJ7JzAmrMqtdgFNmRCtqunsOFDFgtXGWWlR23q4L7+dvRFg05HfdR939SW1qJ
xKOMZBFwN0IsIN7kngav7YZN9Kshgi1aJK61DGYRVRHe9DWBgw6liT0I84P71Pow
F4yorQwnMQTk/EKQgYCPYyScje7qQmysQftX8BwqKnUhoIjX5O067cYzwAsMhKGQ
ogPVpxjPXrAD96FrDwDUezHJaJQHR8Tah8smWxNCZ/GW4wXyxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8gE14v3cBszOwuOPn7QRroZr5eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzQ4ZmI0M2MtYjE2Ni0z
ZTY0LTkwZGQtMjllYmY1MDRlODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtQzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZqOhNLdLAIvtn7yudXXWquMA9778u9hzSQur+WdyxBFFv4RB9UY+Rk
q/oe4z6rzD+iFzQSdiLQJNIAEPk+x91L7CRGJgg3TjMN2rSrBaeBkMxNqVf/kXRf
RIC8rM3clc0JT+BRYc0WaK89xrGW3B/njmiQCXEqe/Vg15S5xHQOWE7X2OI6Ujlx
6o2+E1AeoLR/sR5ha+Anu+3Oi2FsRj+Ajc2tdqgGtsTL9L7VQpx/qZb7D7vCM3Um
/AtzuhgTrY245vYEd4VDP2/n0s5bER/ngkPdsaOQJfYMHfr42C+akduJ5Fl/yxlw
94laeZ49IEquuveGCGoBJZMlXyJI52c=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:46 2026 by rpki-client