Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cb2a9b1-39e3-3799-ab6d-4f9501ba17b5.roa
File:                     8cb2a9b1-39e3-3799-ab6d-4f9501ba17b5.roa (raw, json)
Hash identifier:          QszqYTb7OVyTOhJxxA4aoWv/qswXZlYBZcuuJuNa3bg=
Subject key identifier:   7A:16:74:83:2F:D8:B4:C7:8E:81:27:1D:88:98:53:C5:A2:BA:28:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC9DE96F4D4B46804CC1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cb2a9b1-39e3-3799-ab6d-4f9501ba17b5.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.196.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:9d:e9:6f:4d:4b:46:80:4c:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=cabb0325-1327-4e9d-892c-fa53bd6b874d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:f5:39:bc:84:23:d4:63:b1:70:ad:31:9d:
                    64:2c:3f:34:0a:13:11:ba:72:22:8c:60:89:df:a4:
                    d5:b9:2d:42:3a:03:35:4f:ba:f9:eb:78:4a:60:07:
                    73:e8:30:aa:d1:f1:c6:8f:ac:0f:0c:c5:a8:39:d0:
                    17:2f:9d:2d:bf:37:69:a9:cd:4e:c4:a8:cf:ae:e2:
                    71:84:f4:31:93:3b:26:95:07:18:1c:c3:a8:9e:85:
                    64:55:fa:8b:27:4b:61:9d:04:69:54:7e:2c:f0:23:
                    db:e2:fe:4d:71:32:48:15:31:94:e1:6b:2a:cf:0c:
                    22:35:c1:eb:f9:fc:72:e0:5e:11:12:2f:2b:0a:0d:
                    f4:77:49:3d:6e:25:79:8f:ab:6b:1e:d8:b0:a6:da:
                    06:98:c0:40:71:74:1f:be:93:a1:d1:76:d2:df:ff:
                    1f:57:cd:bd:df:e4:5e:b7:00:c0:8d:2f:c7:e0:e0:
                    30:a1:3e:b0:ef:13:57:37:6a:d1:a8:0a:bb:48:3d:
                    84:5f:a4:7a:0e:ef:39:7e:00:b9:c2:88:7d:fb:aa:
                    5b:75:70:01:e9:a0:fd:7f:35:46:ec:8c:5b:cb:1c:
                    a6:60:2c:76:3a:ce:d7:5b:b6:2c:88:21:e5:d5:94:
                    e0:b6:c0:cc:5f:89:84:b3:30:54:bd:03:33:a8:82:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:16:74:83:2F:D8:B4:C7:8E:81:27:1D:88:98:53:C5:A2:BA:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cb2a9b1-39e3-3799-ab6d-4f9501ba17b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:c8:33:e9:1b:15:ad:5d:af:cc:a0:a9:d0:e9:a3:d9:b7:
         56:32:1e:ac:d2:fe:42:84:2b:73:f2:37:f9:6e:26:a1:ca:b9:
         de:32:dd:25:61:80:16:bd:69:e7:81:d3:aa:97:7e:9b:a9:64:
         b8:bd:e3:ce:2f:1d:a2:a0:80:dd:4a:3f:cf:5a:ed:0d:22:af:
         5d:4c:5c:9e:22:f5:32:39:10:a5:a2:fe:dc:33:2e:7e:43:57:
         45:e0:6e:eb:ae:7b:c9:2f:8b:55:f5:45:f3:df:01:b9:d3:ff:
         72:45:57:ab:ac:65:f9:de:5f:d2:15:77:91:4e:b5:46:91:0b:
         54:7a:ae:8f:ed:e8:ee:0c:5b:78:e0:a1:d6:7d:c0:fb:63:c4:
         13:96:54:84:ca:1f:89:b5:32:28:92:4c:7b:08:5a:2a:5e:c7:
         85:bf:9e:fd:3e:87:e0:42:35:c9:34:3c:40:9c:4e:ce:4e:82:
         dc:b3:0b:32:5d:f2:da:e9:b6:a2:1d:e2:8c:75:89:ce:10:55:
         a3:58:36:34:36:dc:9c:27:14:0b:0b:41:5b:26:9a:1f:b8:f7:
         29:38:41:d2:d6:f6:2e:81:ac:b9:f9:7f:26:5b:e5:91:e1:9f:
         b1:99:e9:d5:29:01:7b:20:79:42:bd:cc:e7:91:6f:b4:fb:26:
         f7:99:ef:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvJ3pb01LRoBMwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
Y2FiYjAzMjUtMTMyNy00ZTlkLTg5MmMtZmE1M2JkNmI4NzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrH1ObyEI9RjsXCtMZ1kLD80ChMRunIijGCJ
36TVuS1COgM1T7r563hKYAdz6DCq0fHGj6wPDMWoOdAXL50tvzdpqc1OxKjPruJx
hPQxkzsmlQcYHMOonoVkVfqLJ0thnQRpVH4s8CPb4v5NcTJIFTGU4WsqzwwiNcHr
+fxy4F4REi8rCg30d0k9biV5j6trHtiwptoGmMBAcXQfvpOh0XbS3/8fV8293+Re
twDAjS/H4OAwoT6w7xNXN2rRqAq7SD2EX6R6Du85fgC5woh9+6pbdXAB6aD9fzVG
7IxbyxymYCx2Os7XW7YsiCHl1ZTgtsDMX4mEszBUvQMzqIKUhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHoWdIMv2LTHjoEnHYiYU8WiuiisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNiMmE5YjEtMzllMy0z
Nzk5LWFiNmQtNGY5NTAxYmExN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsQ6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxnyDPpGxWtXa/MoKnQ6aPZt1YyHqzS/kKEK3PyN/luJqHKud4y3SVh
gBa9aeeB06qXfpupZLi9484vHaKggN1KP89a7Q0ir11MXJ4i9TI5EKWi/twzLn5D
V0Xgbuuue8kvi1X1RfPfAbnT/3JFV6usZfneX9IVd5FOtUaRC1R6ro/t6O4MW3jg
odZ9wPtjxBOWVITKH4m1MiiSTHsIWipex4W/nv0+h+BCNck0PECcTs5OgtyzCzJd
8trptqId4ox1ic4QVaNYNjQ23JwnFAsLQVsmmh+49yk4QdLW9i6BrLn5fyZb5ZHh
n7GZ6dUpAXsgeUK9zOeRb7T7JveZ78c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:09 2026 by rpki-client