Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6a172e7-7498-3157-b850-1fe2d302d18a.roa
File:                     c6a172e7-7498-3157-b850-1fe2d302d18a.roa (raw, json)
Hash identifier:          QZN6rDshO//zmd2pfloksXAaK5W1aSNQLBuL7OYwOWk=
Subject key identifier:   24:74:62:AA:41:C5:42:E9:81:FE:14:18:9A:CD:63:FF:AA:87:EA:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE7E32E4F8175C61F2B6F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6a172e7-7498-3157-b850-1fe2d302d18a.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        98.40.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:e3:2e:4f:81:75:c6:1f:2b:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=e47cbeae-3236-411d-9ea6-2215b0589d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:7e:97:e5:f0:c6:bd:f1:f8:7f:4c:83:7c:
                    0d:fc:6b:15:75:f3:7b:a4:a1:ac:9c:d8:e1:94:01:
                    64:3a:80:75:7c:9b:42:9e:e8:14:a0:73:70:0a:21:
                    24:75:4b:b7:14:a4:37:dd:46:2a:e6:ad:93:2b:d7:
                    d5:b5:51:bc:73:f9:4b:da:8b:86:fe:a4:64:e0:8c:
                    4e:6a:18:d5:04:d9:06:24:60:19:37:a5:f7:74:35:
                    50:2a:f9:ff:71:8d:1f:34:12:99:ec:8d:17:a5:77:
                    e9:83:2e:f3:ea:ec:b7:ee:b5:55:e9:45:74:21:af:
                    d7:f2:fa:9d:f9:e0:73:83:32:d2:b8:0d:70:ca:59:
                    2d:75:50:91:a1:5e:c1:42:45:8e:63:c8:96:83:3e:
                    a6:90:9c:e9:fc:3c:0c:9c:7f:95:f9:dc:cd:e5:40:
                    47:45:3a:a8:6a:d5:ef:76:de:4c:e5:65:f6:c3:8d:
                    ff:cb:1d:a3:7a:1d:03:e9:66:f1:46:28:9b:e7:7e:
                    bc:1f:97:62:11:c4:02:17:4a:ac:7c:4a:17:95:91:
                    ca:d7:a6:75:06:eb:84:71:70:84:dd:74:85:5b:4f:
                    77:e7:a8:8c:45:f7:22:c3:e7:41:09:b4:60:1b:f1:
                    35:c0:b7:d6:f8:1a:29:82:10:c3:d8:12:da:27:a2:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:62:AA:41:C5:42:E9:81:FE:14:18:9A:CD:63:FF:AA:87:EA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6a172e7-7498-3157-b850-1fe2d302d18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6f:79:e2:56:cc:9b:84:13:52:40:37:f5:dc:84:39:1d:1e:
         dd:cb:bb:6f:9e:3c:5e:f5:69:78:4c:38:9e:d0:0e:f7:f0:ea:
         5f:2c:a0:1c:32:0f:b1:d7:fd:f4:75:9e:0f:66:5b:96:ff:6f:
         8e:5c:0f:dd:bb:d5:2a:75:7c:73:69:46:fa:8c:34:73:86:4e:
         b9:44:46:16:d4:7e:20:27:a3:a8:95:ab:36:6d:80:dd:30:26:
         b7:22:53:6e:35:0f:24:2e:28:a0:3f:3c:bd:6f:92:37:3f:d2:
         80:1e:d0:63:cc:b3:7c:d3:46:82:86:44:a3:f7:ae:f5:9f:0e:
         e3:4a:5d:f4:6a:39:a3:af:40:b4:3e:bf:a4:85:e6:c8:99:f5:
         97:1f:b7:4c:73:ec:05:92:45:31:7f:40:78:10:f4:56:99:50:
         11:8d:80:a3:07:aa:bc:13:45:07:6e:1a:90:08:11:63:c6:fe:
         4c:45:9e:f4:e9:f2:80:2d:6e:33:0e:ce:57:cc:d9:20:82:fe:
         d8:bf:22:d7:9c:8a:f1:07:4d:32:3e:32:15:3f:e2:ff:06:82:
         1c:6f:30:be:ec:41:02:0e:0d:fb:36:aa:f8:6b:4d:50:68:57:
         45:3e:6a:63:53:3d:d2:03:80:ca:ae:02:a7:2a:8e:63:7e:1f:
         80:2b:b4:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz95+MuT4F1xh8rb2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZTQ3Y2JlYWUtMzIzNi00MTFkLTllYTYtMjIxNWIwNTg5ZDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vF+l+Xwxr3x+H9Mg3wN/GsVdfN7pKGsnNjh
lAFkOoB1fJtCnugUoHNwCiEkdUu3FKQ33UYq5q2TK9fVtVG8c/lL2ouG/qRk4IxO
ahjVBNkGJGAZN6X3dDVQKvn/cY0fNBKZ7I0XpXfpgy7z6uy37rVV6UV0Ia/X8vqd
+eBzgzLSuA1wylktdVCRoV7BQkWOY8iWgz6mkJzp/DwMnH+V+dzN5UBHRTqoatXv
dt5M5WX2w43/yx2jeh0D6WbxRiib5368H5diEcQCF0qsfEoXlZHK16Z1BuuEcXCE
3XSFW09356iMRfciw+dBCbRgG/E1wLfW+BopghDD2BLaJ6LTTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCR0YqpBxULpgf4UGJrNY/+qh+ptMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzZhMTcyZTctNzQ5OC0z
MTU3LWI4NTAtMWZlMmQzMDJkMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYihyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlveeJWzJuEE1JAN/XchDkdHt3Lu2+ePF71aXhMOJ7QDvfw6l8soBwy
D7HX/fR1ng9mW5b/b45cD9271Sp1fHNpRvqMNHOGTrlERhbUfiAno6iVqzZtgN0w
JrciU241DyQuKKA/PL1vkjc/0oAe0GPMs3zTRoKGRKP3rvWfDuNKXfRqOaOvQLQ+
v6SF5siZ9Zcft0xz7AWSRTF/QHgQ9FaZUBGNgKMHqrwTRQduGpAIEWPG/kxFnvTp
8oAtbjMOzlfM2SCC/ti/ItecivEHTTI+MhU/4v8GghxvML7sQQIODfs2qvhrTVBo
V0U+amNTPdIDgMquAqcqjmN+H4ArtBA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:57 2026 by rpki-client