Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fca919b-022b-333d-80c7-3a5f6cff114b.roa
File:                     9fca919b-022b-333d-80c7-3a5f6cff114b.roa (raw, json)
Hash identifier:          ULI8FAlPTCLtDU76uYUSypN98ASpr1IR+HwjD8X5PkQ=
Subject key identifier:   CF:87:F7:38:DF:32:07:61:AB:44:91:1B:0A:97:14:EC:E6:69:0A:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78C9F9EECE7698A6F2C4600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fca919b-022b-333d-80c7-3a5f6cff114b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20214
IP address blocks:        98.254.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:9f:9e:ec:e7:69:8a:6f:2c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4fec5181-3ae4-4e5e-9e0a-4db7f99782b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:b8:0a:33:15:eb:f2:c1:26:2c:80:e8:2d:
                    c9:b2:ca:dd:89:4a:f2:49:97:02:42:32:b5:9d:96:
                    8d:8d:cc:72:e1:7e:f9:c4:75:cc:40:eb:e4:9c:2c:
                    73:cf:bb:af:4c:bd:67:c7:d1:6b:3f:fb:7f:ca:1c:
                    70:be:cc:ae:5b:ec:ad:ff:7d:66:e6:36:db:0c:36:
                    5f:bd:19:82:ef:26:0d:ab:5e:8a:d0:b1:97:1d:71:
                    16:48:94:c4:e9:c1:00:ac:fd:78:a9:e7:36:95:90:
                    b9:bd:bd:71:d8:8b:01:a7:45:0d:5a:91:29:aa:51:
                    6a:95:76:55:4b:38:8d:25:9c:a6:cf:3f:dc:10:69:
                    b2:cd:97:8f:a6:e0:22:ea:a8:f3:21:e8:6b:4e:e4:
                    fa:9a:52:5c:8a:d9:ca:4b:a0:24:69:ad:eb:67:71:
                    2a:e0:0a:92:e2:a2:93:3b:35:8f:3b:92:0a:42:4f:
                    88:1e:38:d9:ff:e3:7e:05:bc:ba:ae:7e:19:bf:61:
                    67:4f:c8:7b:ad:d7:e6:3f:23:ce:84:71:12:db:0b:
                    dc:13:39:40:df:8f:1f:de:0f:61:4e:1c:68:00:6f:
                    78:d3:cb:e7:95:b7:1b:66:ca:a1:6f:f9:0f:75:dd:
                    cc:0d:f0:fe:93:7c:b1:72:2e:06:c0:01:f9:59:98:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:F7:38:DF:32:07:61:AB:44:91:1B:0A:97:14:EC:E6:69:0A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fca919b-022b-333d-80c7-3a5f6cff114b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:7c:61:94:f1:85:61:e1:f5:79:51:92:f2:23:de:76:d4:
         07:b7:e0:a6:aa:4d:45:65:6b:d8:1b:04:66:32:0e:1d:85:80:
         0d:dc:ce:1a:54:6e:9e:b0:f9:12:22:63:76:b4:fb:ca:3e:c0:
         cc:e4:19:0d:36:82:03:78:cc:a4:d2:90:79:ac:f2:83:70:f4:
         43:f6:03:ea:e2:b3:74:1e:54:4e:ef:f7:9f:78:fa:da:04:66:
         80:8c:a1:fb:34:38:bd:47:9d:ed:4e:d0:b5:7e:e5:72:52:df:
         db:2c:e4:57:72:2b:2d:09:ab:08:98:fd:4f:b8:52:4c:56:0e:
         25:b0:24:45:0b:ed:eb:ea:91:9f:96:94:e6:82:b1:fa:f5:e7:
         18:13:b8:cd:90:d6:05:84:ce:1a:64:cf:bc:65:31:6c:5a:1b:
         d3:90:fc:fe:52:69:a8:96:ae:da:34:b7:7a:3d:5d:65:4e:bb:
         4d:d1:ce:10:af:38:f6:00:e1:4b:82:14:d2:7a:16:76:27:84:
         03:29:21:50:90:4d:af:64:dc:aa:d8:5d:7a:ef:5a:73:42:2e:
         53:72:ba:c4:3b:5a:d8:f7:20:20:be:56:45:8b:5d:8c:0e:60:
         2e:ec:8a:6e:0d:db:6b:20:66:95:2e:d4:6c:f9:5b:2b:19:9e:
         1e:5d:49:49
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6njJ+e7Odpim8sRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGZlYzUxODEtM2FlNC00ZTVlLTllMGEtNGRiN2Y5OTc4MmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyy4CjMV6/LBJiyA6C3JssrdiUrySZcCQjK1
nZaNjcxy4X75xHXMQOvknCxzz7uvTL1nx9FrP/t/yhxwvsyuW+yt/31m5jbbDDZf
vRmC7yYNq16K0LGXHXEWSJTE6cEArP14qec2lZC5vb1x2IsBp0UNWpEpqlFqlXZV
SziNJZymzz/cEGmyzZePpuAi6qjzIehrTuT6mlJcitnKS6Akaa3rZ3Eq4AqS4qKT
OzWPO5IKQk+IHjjZ/+N+Bby6rn4Zv2FnT8h7rdfmPyPOhHES2wvcEzlA348f3g9h
ThxoAG9408vnlbcbZsqhb/kPdd3MDfD+k3yxci4GwAH5WZjdhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM+H9zjfMgdhq0SRGwqXFOzmaQrFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWZjYTkxOWItMDIyYi0z
MzNkLTgwYzctM2E1ZjZjZmYxMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYv4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARR58YZTxhWHh9XlRkvIj3nbUB7fgpqpNRWVr2BsEZjIOHYWADdzOGlRu
nrD5EiJjdrT7yj7AzOQZDTaCA3jMpNKQeazyg3D0Q/YD6uKzdB5UTu/3n3j62gRm
gIyh+zQ4vUed7U7QtX7lclLf2yzkV3IrLQmrCJj9T7hSTFYOJbAkRQvt6+qRn5aU
5oKx+vXnGBO4zZDWBYTOGmTPvGUxbFob05D8/lJpqJau2jS3ej1dZU67TdHOEK84
9gDhS4IU0noWdieEAykhUJBNr2Tcqthdeu9ac0IuU3K6xDta2PcgIL5WRYtdjA5g
LuyKbg3bayBmlS7UbPlbKxmeHl1JSQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:10 2026 by rpki-client