Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dbbb8cc-4e21-319d-9f1e-ab122db12c37.roa
File:                     8dbbb8cc-4e21-319d-9f1e-ab122db12c37.roa (raw, json)
Hash identifier:          6WXHB7vk94MxyJKtjfgetHWqPBHx35BXkO9A9A/azhc=
Subject key identifier:   76:AF:C5:36:B3:22:6D:E8:9B:74:8E:E3:1A:EC:87:58:60:75:25:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8631D3833E4A46516F08600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dbbb8cc-4e21-319d-9f1e-ab122db12c37.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.44.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:1d:38:33:e4:a4:65:16:f0:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=c4fb370d-31a1-40a9-a073-33705acc632f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:eb:cb:b0:a2:89:8a:7b:9c:d2:85:9f:45:
                    4f:77:4e:e8:af:33:f2:f7:d2:dc:d4:42:f4:e4:6d:
                    ec:f5:91:08:44:26:36:96:e1:20:ff:75:4d:b8:78:
                    2f:74:c6:05:fe:f6:8a:dd:6a:77:e8:a4:2c:86:a0:
                    a7:25:00:f3:7f:54:ad:63:c1:5e:02:61:ed:d0:ee:
                    a6:bc:9a:37:01:74:ca:f1:b4:a2:4c:c2:c6:95:3a:
                    f8:10:cb:a3:50:0e:75:63:0c:85:59:1f:1a:2b:93:
                    15:a5:54:39:51:d5:c0:57:95:f7:5a:9e:26:f7:9c:
                    d6:38:88:5e:7c:c0:ed:68:80:a6:37:a6:14:63:c4:
                    0c:7b:dd:90:8c:e2:48:a5:5b:e9:7b:2a:d7:6b:bf:
                    15:77:12:fa:b5:58:df:c0:9e:3b:06:92:ff:ef:c4:
                    28:54:1c:1c:f5:2d:9b:45:08:14:78:bd:9e:f0:d3:
                    d9:9c:07:29:38:d7:00:d4:b7:cb:02:13:d4:85:26:
                    cc:72:dc:1c:4c:2a:7d:b8:fd:bc:6a:72:eb:6b:1e:
                    ad:a1:63:74:47:13:3b:e3:aa:3f:07:ad:ec:78:e9:
                    4c:8b:94:dd:41:e6:61:51:88:15:2e:2e:41:af:a7:
                    70:d6:62:96:fa:58:c2:6c:49:63:21:39:e7:8b:1b:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:C5:36:B3:22:6D:E8:9B:74:8E:E3:1A:EC:87:58:60:75:25:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dbbb8cc-4e21-319d-9f1e-ab122db12c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:f6:d4:b8:e3:92:1c:54:69:d0:c1:da:c7:f0:3e:f4:15:bd:
         02:dc:20:d0:1d:b0:66:0d:3a:80:b5:6e:d1:c8:71:78:6b:58:
         2f:ec:7d:80:b5:6c:b2:f6:0c:ec:a9:f5:39:73:95:32:30:7e:
         3e:82:83:6b:5f:cf:4e:59:b6:ec:c5:79:a2:47:c8:65:0e:1a:
         f6:81:06:ec:07:9b:a4:c6:73:e1:77:2b:d0:77:f0:c2:9c:74:
         17:c0:e3:07:bd:a5:8b:d4:e2:87:6c:14:68:c3:f5:c0:44:64:
         f3:ef:5c:9a:35:f7:00:55:8c:6d:fc:c2:7c:86:36:3c:4a:9b:
         c5:80:f7:46:24:aa:dc:7a:be:e7:b1:87:40:01:d6:46:67:fb:
         1f:79:8f:35:92:92:b8:f4:4b:c1:6a:3f:98:bd:f6:c4:8d:7f:
         9b:80:bd:23:e3:b2:1b:65:78:a9:0d:64:d5:53:66:55:77:ee:
         95:d1:1f:5a:89:48:26:cb:fa:7c:bc:5c:b5:a4:20:a6:b9:3e:
         13:77:25:c7:b1:17:35:28:15:1b:c0:ba:82:3c:2c:0f:7f:77:
         b8:82:bc:71:2f:c7:86:fa:b5:9a:16:58:97:08:74:96:14:fd:
         58:1d:d5:54:9a:12:05:28:3e:a6:ad:3f:75:e1:24:5b:cc:33:
         84:95:94:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYx04M+SkZRbwhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
YzRmYjM3MGQtMzFhMS00MGE5LWEwNzMtMzM3MDVhY2M2MzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj/ry7CiiYp7nNKFn0VPd07orzPy99Lc1EL0
5G3s9ZEIRCY2luEg/3VNuHgvdMYF/vaK3Wp36KQshqCnJQDzf1StY8FeAmHt0O6m
vJo3AXTK8bSiTMLGlTr4EMujUA51YwyFWR8aK5MVpVQ5UdXAV5X3Wp4m95zWOIhe
fMDtaICmN6YUY8QMe92QjOJIpVvpeyrXa78VdxL6tVjfwJ47BpL/78QoVBwc9S2b
RQgUeL2e8NPZnAcpONcA1LfLAhPUhSbMctwcTCp9uP28anLrax6toWN0RxM746o/
B63seOlMi5TdQeZhUYgVLi5Br6dw1mKW+ljCbEljITnnixvcGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHavxTazIm3om3SO4xrsh1hgdSWaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRiYmI4Y2MtNGUyMS0z
MTlkLTlmMWUtYWIxMjJkYjEyYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiwUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANX21LjjkhxUadDB2sfwPvQVvQLcINAdsGYNOoC1btHIcXhrWC/sfYC1
bLL2DOyp9TlzlTIwfj6Cg2tfz05ZtuzFeaJHyGUOGvaBBuwHm6TGc+F3K9B38MKc
dBfA4we9pYvU4odsFGjD9cBEZPPvXJo19wBVjG38wnyGNjxKm8WA90Ykqtx6vuex
h0AB1kZn+x95jzWSkrj0S8FqP5i99sSNf5uAvSPjshtleKkNZNVTZlV37pXRH1qJ
SCbL+ny8XLWkIKa5PhN3JcexFzUoFRvAuoI8LA9/d7iCvHEvx4b6tZoWWJcIdJYU
/Vgd1VSaEgUoPqatP3XhJFvMM4SVlFQ=
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:18:00 2026 by rpki-client