Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81ebdbf1-b231-3f89-b074-82d424a3f0ec.roa
File:                     81ebdbf1-b231-3f89-b074-82d424a3f0ec.roa (raw, json)
Hash identifier:          Cq4hrKP1woYHIkqGECQIQTVQdvuasQD/CW3M0qxkeoc=
Subject key identifier:   2B:1C:F9:A8:A4:37:98:8A:FE:14:C6:DF:AC:74:70:F7:C2:C2:B2:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7E9334790C315B68D2380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81ebdbf1-b231-3f89-b074-82d424a3f0ec.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        98.225.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:e9:33:47:90:c3:15:b6:8d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=a76e9135-d4a3-4035-8e57-59734e7671c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ea:90:d7:b1:25:16:d4:c2:a8:a9:34:32:c1:
                    1b:4b:f6:a0:2a:01:61:90:36:6f:c0:1c:80:e8:94:
                    6f:b2:98:a6:93:69:21:64:1a:5d:ec:39:45:36:e1:
                    dd:7d:e2:6b:05:1d:d0:17:46:3b:47:6d:18:2b:f0:
                    3c:01:a3:70:2b:59:d6:63:4b:0e:1c:ee:4f:c7:4c:
                    c5:cc:1e:bf:78:39:46:7d:c3:23:f2:4d:3f:78:d7:
                    04:b7:fa:8e:9f:f3:02:46:0e:0d:be:22:1c:a0:38:
                    01:f8:62:90:d9:a6:47:ec:ae:1a:80:d8:d4:94:c3:
                    c7:bc:7a:24:2f:98:4c:00:d0:11:ff:6c:53:11:3c:
                    b2:b7:89:68:27:e4:cf:a1:0a:64:3a:7d:c6:1a:8d:
                    44:ba:9d:f6:ef:1f:15:f2:1e:e0:65:e7:aa:30:d0:
                    33:c4:76:db:79:1a:38:de:df:c1:dd:f5:15:05:14:
                    37:33:31:5c:81:99:dc:e4:e2:f7:41:61:67:43:96:
                    ce:cf:2b:7e:15:bc:b7:79:5d:51:20:52:a4:93:b4:
                    52:d8:b0:ab:66:25:38:75:8f:7d:25:2b:5b:81:e6:
                    6c:e1:18:35:db:b7:fc:17:9c:cc:bc:26:f3:dc:48:
                    d7:29:0f:0d:1b:ef:9a:db:7e:b2:97:db:ef:e7:45:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1C:F9:A8:A4:37:98:8A:FE:14:C6:DF:AC:74:70:F7:C2:C2:B2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81ebdbf1-b231-3f89-b074-82d424a3f0ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.225.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:06:c5:ee:33:92:06:8a:85:fd:b0:87:60:50:45:20:c1:c1:
         0d:35:18:f6:b1:7c:f5:d0:e7:ec:7d:ea:ec:59:9c:3d:37:c8:
         ab:86:e8:e7:73:37:d8:84:7d:10:df:16:2c:0b:45:a1:fa:da:
         45:ff:99:1d:83:7c:d4:76:58:5b:1e:a9:b0:56:6e:78:f8:a9:
         69:82:c8:2b:64:46:68:b8:99:2f:d6:50:5a:1d:b6:87:00:68:
         2a:0b:1c:3a:e7:22:a8:e4:28:c1:76:54:c0:b0:04:d1:5c:e6:
         d4:f4:b7:92:33:da:74:ba:07:4b:05:5b:cf:01:08:8c:31:ae:
         af:86:63:f8:c4:21:ed:2b:7d:d2:e3:63:57:e2:bf:7b:ae:12:
         a5:8d:2b:5c:24:a0:b9:dd:ed:5a:a6:a0:b4:cf:ff:81:05:f2:
         cf:05:d2:f7:ac:1f:45:fe:c1:fe:41:2c:28:f9:7a:52:df:43:
         4c:cb:9a:f5:33:4d:9c:e6:74:5b:ed:13:6c:f7:03:9f:d7:3d:
         90:c4:8a:95:8e:5a:a1:7b:38:c7:5d:dc:04:f9:11:8d:a5:d7:
         ed:38:55:bb:b1:19:77:b9:25:25:21:3b:4c:d4:e8:60:b4:87:
         0a:9c:5b:ef:d2:43:1b:35:c0:53:9b:02:bf:70:b3:f6:22:4b:
         cd:e7:bc:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+kzR5DDFbaNI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
YTc2ZTkxMzUtZDRhMy00MDM1LThlNTctNTk3MzRlNzY3MWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+qQ17ElFtTCqKk0MsEbS/agKgFhkDZvwByA
6JRvspimk2khZBpd7DlFNuHdfeJrBR3QF0Y7R20YK/A8AaNwK1nWY0sOHO5Px0zF
zB6/eDlGfcMj8k0/eNcEt/qOn/MCRg4NviIcoDgB+GKQ2aZH7K4agNjUlMPHvHok
L5hMANAR/2xTETyyt4loJ+TPoQpkOn3GGo1Eup327x8V8h7gZeeqMNAzxHbbeRo4
3t/B3fUVBRQ3MzFcgZnc5OL3QWFnQ5bOzyt+Fby3eV1RIFKkk7RS2LCrZiU4dY99
JStbgeZs4Rg127f8F5zMvCbz3EjXKQ8NG++a236yl9vv50WtrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsc+aikN5iK/hTG36x0cPfCwrIKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODFlYmRiZjEtYjIzMS0z
Zjg5LWIwNzQtODJkNDI0YTNmMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuHSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYGxe4zkgaKhf2wh2BQRSDBwQ01GPaxfPXQ5+x96uxZnD03yKuG6Odz
N9iEfRDfFiwLRaH62kX/mR2DfNR2WFseqbBWbnj4qWmCyCtkRmi4mS/WUFodtocA
aCoLHDrnIqjkKMF2VMCwBNFc5tT0t5Iz2nS6B0sFW88BCIwxrq+GY/jEIe0rfdLj
Y1fiv3uuEqWNK1wkoLnd7VqmoLTP/4EF8s8F0vesH0X+wf5BLCj5elLfQ0zLmvUz
TZzmdFvtE2z3A5/XPZDEipWOWqF7OMdd3AT5EY2l1+04VbuxGXe5JSUhO0zU6GC0
hwqcW+/SQxs1wFObAr9ws/YiS83nvIw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:13:30 2026 by rpki-client