Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6f8072-5014-32e0-9ea9-65b907e455c0.roa
File:                     8a6f8072-5014-32e0-9ea9-65b907e455c0.roa (raw, json)
Hash identifier:          Vi7ywPjoDdAC6VGhjv6rJnbDFsADrJhkWxCx+ogo3ao=
Subject key identifier:   32:67:27:61:88:EF:CB:75:78:2E:CE:7E:40:B6:F8:5B:F1:43:38:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5B9D12804E5BB9AB0B2580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6f8072-5014-32e0-9ea9-65b907e455c0.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        68.44.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:9d:12:80:4e:5b:b9:ab:0b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=16fc1b54-74d6-4139-a7be-5a08f458490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:1f:83:b8:2d:c2:eb:ec:ee:18:35:a6:01:
                    03:64:3c:6f:62:f7:fb:3b:df:cc:60:de:28:39:df:
                    ee:84:51:88:8e:01:78:3f:6d:02:31:2a:0a:04:34:
                    d4:af:dd:9b:b3:ec:a7:88:fa:e6:a6:94:98:39:2b:
                    92:48:8f:d4:b5:05:9d:3a:27:0d:b8:6c:18:a9:f2:
                    b3:52:b0:36:75:69:21:7c:7b:40:9b:47:ca:7b:c2:
                    4a:03:28:a6:d1:0f:d3:39:76:7f:c3:ff:94:20:eb:
                    09:4c:a5:2b:62:b3:f0:4b:16:6c:1d:59:76:40:4a:
                    54:c8:86:68:0d:42:16:ae:14:ac:86:d7:77:f9:57:
                    79:6a:57:fc:7a:b9:54:e9:44:16:5c:5f:64:66:18:
                    82:db:a1:52:cb:62:e4:3e:1f:76:be:78:72:f6:28:
                    e1:08:4b:c7:56:53:f1:44:91:05:a5:be:aa:d0:e0:
                    fc:2c:3f:14:9a:72:59:94:7e:d9:58:a3:ee:ad:82:
                    73:96:fc:64:96:2d:41:34:87:49:b9:21:8a:c1:6f:
                    a1:7b:43:16:c7:43:03:75:05:4f:f1:3d:fe:73:ad:
                    91:55:ac:51:66:51:d0:85:67:1a:9c:d7:2e:ad:c2:
                    8c:44:f9:90:17:c1:23:9c:cb:3b:8b:de:b4:a0:f7:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:67:27:61:88:EF:CB:75:78:2E:CE:7E:40:B6:F8:5B:F1:43:38:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6f8072-5014-32e0-9ea9-65b907e455c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.44.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:aa:f8:a7:bb:9b:2b:93:63:6a:a7:56:30:52:bd:4a:43:
         0e:14:a0:0b:2c:31:7a:c9:a3:a3:b3:18:16:66:7e:0a:16:18:
         83:49:68:fc:d7:b6:fc:16:97:af:a2:86:84:c1:be:0b:dd:f4:
         a1:99:3f:ab:ba:0a:dc:c7:fb:70:8b:6b:39:99:d7:67:bf:fb:
         f9:75:8f:2f:ff:27:1c:1d:a1:c4:f8:69:26:92:d3:77:56:55:
         9f:fc:51:a8:15:92:25:94:1a:f7:a0:ed:4d:22:41:cd:bc:51:
         a9:96:99:51:5f:04:43:0a:c5:69:aa:47:96:a3:d9:1e:9c:f8:
         75:9e:97:ad:8e:f1:c8:88:62:9a:dd:e9:6f:66:07:21:a4:44:
         70:ba:99:e6:f2:8b:75:26:94:9e:c3:e2:3d:44:79:ba:e2:58:
         a6:5c:5b:d2:76:8e:ec:22:19:7b:8e:28:af:0e:f7:d6:0d:5d:
         97:fc:49:46:54:9d:79:8f:7f:3b:ae:85:49:27:72:13:c4:3e:
         4b:05:64:89:61:e8:46:64:13:4d:ea:9f:fd:0a:c3:82:8a:e4:
         41:69:3f:62:5a:1d:13:b9:cf:67:cb:fe:6e:06:6b:b5:c4:83:
         81:ee:a3:9b:9e:ca:73:c4:7d:8e:6e:08:3d:5f:fc:56:5b:12:
         83:01:b0:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW50SgE5buasLJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTZmYzFiNTQtNzRkNi00MTM5LWE3YmUtNWEwOGY0NTg0OTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU8fg7gtwuvs7hg1pgEDZDxvYvf7O9/MYN4o
Od/uhFGIjgF4P20CMSoKBDTUr92bs+yniPrmppSYOSuSSI/UtQWdOicNuGwYqfKz
UrA2dWkhfHtAm0fKe8JKAyim0Q/TOXZ/w/+UIOsJTKUrYrPwSxZsHVl2QEpUyIZo
DUIWrhSshtd3+Vd5alf8erlU6UQWXF9kZhiC26FSy2LkPh92vnhy9ijhCEvHVlPx
RJEFpb6q0OD8LD8UmnJZlH7ZWKPurYJzlvxkli1BNIdJuSGKwW+he0MWx0MDdQVP
8T3+c62RVaxRZlHQhWcanNcurcKMRPmQF8EjnMs7i960oPf44wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJnJ2GI78t1eC7OfkC2+FvxQzghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE2ZjgwNzItNTAxNC0z
MmUwLTllYTktNjViOTA3ZTQ1NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCxiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJt/qvinu5srk2Nqp1YwUr1KQw4UoAssMXrJo6OzGBZmfgoWGINJaPzX
tvwWl6+ihoTBvgvd9KGZP6u6CtzH+3CLazmZ12e/+/l1jy//JxwdocT4aSaS03dW
VZ/8UagVkiWUGveg7U0iQc28UamWmVFfBEMKxWmqR5aj2R6c+HWel62O8ciIYprd
6W9mByGkRHC6mebyi3UmlJ7D4j1EebriWKZcW9J2juwiGXuOKK8O99YNXZf8SUZU
nXmPfzuuhUknchPEPksFZIlh6EZkE03qn/0Kw4KK5EFpP2JaHRO5z2fL/m4Ga7XE
g4Huo5ueynPEfY5uCD1f/FZbEoMBsDg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:40:30 2026 by rpki-client