Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dac8dcb7-1184-3d71-9459-469f6633b5aa.roa
File:                     dac8dcb7-1184-3d71-9459-469f6633b5aa.roa (raw, json)
Hash identifier:          GwYDcwaLSxywH0Byav2w0RIZTSpLiwKdVslmaUaWjJM=
Subject key identifier:   56:6D:C9:2E:25:5B:F9:35:FF:48:14:56:B4:5E:02:FC:AA:8C:BF:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100063BF5D002A626597500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dac8dcb7-1184-3d71-9459-469f6633b5aa.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        24.98.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:06:3b:f5:d0:02:a6:26:59:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=686eb328-6251-44f8-8422-23bbbf21454f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:8b:0f:84:5f:58:fb:ad:29:a2:79:95:ba:
                    74:f4:e5:e0:54:1a:1a:a5:48:e9:f2:94:e7:f7:c7:
                    bc:12:f1:33:55:f6:29:c1:0b:5b:39:a4:36:ab:3b:
                    0b:d3:e6:c7:93:5d:30:83:79:66:53:dd:62:93:a2:
                    a3:f6:be:06:b2:9c:99:67:cd:76:69:e0:01:2c:bf:
                    c4:64:cb:50:7f:42:9c:ac:b4:49:84:46:87:a1:a0:
                    2b:b4:33:87:c2:46:24:c4:2c:b5:41:41:d8:36:56:
                    dc:45:a1:1e:f0:5e:a9:19:ed:49:f6:1b:63:3e:d6:
                    b3:a0:e4:6b:77:8f:e0:4a:64:08:1e:ff:fc:73:d6:
                    8f:74:11:65:b4:c3:2f:97:f4:0c:a9:f5:84:d6:de:
                    62:8a:16:f4:ab:8e:ce:d9:1e:72:89:b8:6c:75:78:
                    0a:18:61:ba:e0:c0:e4:dd:6d:cd:ae:1e:4a:a8:6e:
                    9f:9b:03:fa:f2:f4:b0:7c:93:01:86:f4:f9:f4:f9:
                    41:d6:6f:b8:3b:12:16:0f:39:c4:d5:f7:4f:31:c0:
                    31:c9:6e:56:fd:a3:76:0d:97:ac:95:4f:c2:26:78:
                    8b:85:c7:c2:dc:eb:87:77:c2:55:75:c3:73:a0:96:
                    58:dd:59:c7:1c:a8:6a:da:00:ff:2a:ed:6f:93:29:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6D:C9:2E:25:5B:F9:35:FF:48:14:56:B4:5E:02:FC:AA:8C:BF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dac8dcb7-1184-3d71-9459-469f6633b5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:99:5c:ac:25:bf:80:78:6a:20:81:5d:48:32:56:a1:c4:52:
         2c:af:6c:3e:cf:f2:1e:eb:c3:d3:55:ae:f6:80:c9:4a:5e:e2:
         06:94:ea:0e:19:50:38:52:08:e3:a0:b5:f5:36:bc:16:3e:bd:
         9c:04:49:f9:d7:17:16:48:e6:74:f9:47:3d:9a:4d:e5:b4:d1:
         34:cd:66:44:b8:fe:29:aa:c0:fc:1f:47:10:b1:61:19:dd:85:
         f8:bf:81:42:22:7c:ec:96:7a:ae:3e:cd:cf:dc:7d:ba:c5:f9:
         24:bd:dd:a2:b0:17:b3:6f:69:0f:ab:43:76:fd:5a:8d:5b:68:
         09:a5:85:8d:70:39:ff:02:33:4f:14:4f:cf:4a:8c:7c:dc:9b:
         4c:65:06:a5:e6:43:83:20:c9:2d:58:5e:32:24:e9:a8:44:6f:
         14:ab:75:7b:3b:3e:2f:5e:78:9a:04:4d:bf:4c:c3:c9:6d:67:
         2c:a8:33:b6:30:5f:ab:29:65:10:8d:06:1c:38:e1:53:e4:69:
         0e:50:33:b5:d5:84:3f:43:69:ac:c8:3a:a6:fb:54:70:76:6d:
         8d:f8:32:f9:f6:03:d1:cc:b8:2d:e8:da:c9:ae:fa:d7:55:1e:
         91:4f:e5:91:81:a6:88:d6:a7:00:4a:6b:a1:da:90:ba:59:b5:
         28:85:6b:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAAY79dACpiZZdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
Njg2ZWIzMjgtNjI1MS00NGY4LTg0MjItMjNiYmJmMjE0NTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF2LD4RfWPutKaJ5lbp09OXgVBoapUjp8pTn
98e8EvEzVfYpwQtbOaQ2qzsL0+bHk10wg3lmU91ik6Kj9r4GspyZZ812aeABLL/E
ZMtQf0KcrLRJhEaHoaArtDOHwkYkxCy1QUHYNlbcRaEe8F6pGe1J9htjPtazoORr
d4/gSmQIHv/8c9aPdBFltMMvl/QMqfWE1t5iihb0q47O2R5yibhsdXgKGGG64MDk
3W3Nrh5KqG6fmwP68vSwfJMBhvT59PlB1m+4OxIWDznE1fdPMcAxyW5W/aN2DZes
lU/CJniLhcfC3OuHd8JVdcNzoJZY3VnHHKhq2gD/Ku1vkykv3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZtyS4lW/k1/0gUVrReAvyqjL+2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFjOGRjYjctMTE4NC0z
ZDcxLTk0NTktNDY5ZjY2MzNiNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGJyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWZXKwlv4B4aiCBXUgyVqHEUiyvbD7P8h7rw9NVrvaAyUpe4gaU6g4Z
UDhSCOOgtfU2vBY+vZwESfnXFxZI5nT5Rz2aTeW00TTNZkS4/imqwPwfRxCxYRnd
hfi/gUIifOyWeq4+zc/cfbrF+SS93aKwF7NvaQ+rQ3b9Wo1baAmlhY1wOf8CM08U
T89KjHzcm0xlBqXmQ4MgyS1YXjIk6ahEbxSrdXs7Pi9eeJoETb9Mw8ltZyyoM7Yw
X6spZRCNBhw44VPkaQ5QM7XVhD9DaazIOqb7VHB2bY34Mvn2A9HMuC3o2smu+tdV
HpFP5ZGBpojWpwBKa6HakLpZtSiFa64=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:43 2026 by rpki-client