Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a4ee6e-5277-35d4-aceb-a2c9874e6010.roa
File:                     f9a4ee6e-5277-35d4-aceb-a2c9874e6010.roa (raw, json)
Hash identifier:          17ZgDRvXq0qeaNf7YEDamdSGS3h3ADBFUxubK5DyusA=
Subject key identifier:   E7:8D:0C:3A:A9:37:2F:CF:7D:C4:54:CC:C1:30:83:09:F1:A1:88:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D810096110D18D72CE065B3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a4ee6e-5277-35d4-aceb-a2c9874e6010.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        98.62.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:96:11:0d:18:d7:2c:e0:65:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=a43474d0-9b9f-4d8f-8b3c-dcba369b214d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:5c:b5:f6:7c:57:c1:9b:bf:fc:cd:03:24:
                    91:a3:08:95:45:b0:f0:bf:33:e4:e6:14:7f:2d:02:
                    d2:eb:35:65:83:fa:43:6e:06:90:6f:53:74:40:d1:
                    6f:e9:ed:92:37:90:7a:7c:b0:0b:81:bb:02:fa:53:
                    13:8a:d3:c1:88:77:4d:9c:47:68:16:8c:e5:04:cc:
                    01:b3:9d:64:90:09:65:cc:9b:cc:4e:65:dd:37:cb:
                    67:64:2a:bb:50:e5:4f:52:de:c1:be:7d:9e:3b:af:
                    81:52:20:f6:39:ee:ee:cf:c6:e2:be:f1:27:bb:5c:
                    44:2c:61:54:b9:bc:4f:96:a8:f1:f8:0e:2d:55:52:
                    22:76:22:b6:8b:47:82:0b:ba:71:5a:8e:7c:2b:f3:
                    b1:c9:1d:0e:0f:a3:41:87:e0:36:ff:8d:bd:c6:63:
                    8c:9c:17:a9:30:0c:15:1e:67:71:31:5b:51:f8:ac:
                    c2:61:77:04:ca:d1:85:75:6a:d8:7d:45:68:06:e5:
                    f7:99:a3:83:79:d9:91:19:c0:26:9d:b3:4e:95:b2:
                    fc:73:4e:9b:55:52:d1:01:10:b1:34:58:94:82:67:
                    41:5b:44:f0:53:f4:9d:8e:fc:c8:fe:94:99:b7:ff:
                    69:95:69:08:8f:05:b9:f8:99:f6:be:e7:75:54:b9:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:0C:3A:A9:37:2F:CF:7D:C4:54:CC:C1:30:83:09:F1:A1:88:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a4ee6e-5277-35d4-aceb-a2c9874e6010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:68:59:41:89:e6:f6:2c:59:38:c8:54:75:4a:17:d5:af:
         76:82:c5:ad:db:10:95:76:39:ac:d7:3f:a9:89:29:77:ff:46:
         f0:d5:26:ae:a1:15:c5:54:64:09:4e:9f:b7:b1:58:a3:70:a5:
         38:31:72:1c:8a:92:ba:c1:5d:cb:67:4a:a7:5b:df:65:2f:e4:
         19:a1:6d:5c:d8:a6:ee:c8:96:a1:6f:35:66:84:6c:57:c0:1f:
         d2:50:0d:13:7f:e8:e5:f2:4c:58:c0:80:95:ad:0e:0c:02:74:
         9c:a8:22:e4:8c:ec:f9:e9:a2:8d:82:52:24:fe:24:5f:3a:8c:
         c2:82:ff:d0:f7:fe:43:2d:f4:6c:0c:8e:fc:72:62:13:ba:de:
         68:b0:ea:62:d4:47:2e:69:45:03:b2:7d:8e:60:9c:5a:b0:0d:
         70:94:34:50:16:0a:67:2f:38:30:28:49:c6:fc:0d:31:3b:9e:
         6b:a8:b6:d7:a8:b9:b3:f1:18:90:a8:33:76:d3:32:80:a9:49:
         19:f4:1c:0c:ae:2a:d4:97:a6:2d:ff:59:95:c2:42:e1:23:fd:
         b4:06:0a:e8:64:4b:46:5c:42:e0:51:43:e9:f1:4b:f1:d7:1c:
         6c:81:6d:ff:ec:7f:33:f7:03:ef:e0:52:96:eb:c6:dc:42:f2:
         a8:d7:f0:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAJYRDRjXLOBls8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
YTQzNDc0ZDAtOWI5Zi00ZDhmLThiM2MtZGNiYTM2OWIyMTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOdctfZ8V8Gbv/zNAySRowiVRbDwvzPk5hR/
LQLS6zVlg/pDbgaQb1N0QNFv6e2SN5B6fLALgbsC+lMTitPBiHdNnEdoFozlBMwB
s51kkAllzJvMTmXdN8tnZCq7UOVPUt7Bvn2eO6+BUiD2Oe7uz8bivvEnu1xELGFU
ubxPlqjx+A4tVVIidiK2i0eCC7pxWo58K/OxyR0OD6NBh+A2/429xmOMnBepMAwV
HmdxMVtR+KzCYXcEytGFdWrYfUVoBuX3maODedmRGcAmnbNOlbL8c06bVVLRARCx
NFiUgmdBW0TwU/SdjvzI/pSZt/9plWkIjwW5+Jn2vud1VLkMMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeNDDqpNy/PfcRUzMEwgwnxoYjNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjlhNGVlNmUtNTI3Ny0z
NWQ0LWFjZWItYTJjOTg3NGU2MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj6YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgKaFlBieb2LFk4yFR1ShfVr3aCxa3bEJV2OazXP6mJKXf/RvDVJq6h
FcVUZAlOn7exWKNwpTgxchyKkrrBXctnSqdb32Uv5BmhbVzYpu7IlqFvNWaEbFfA
H9JQDRN/6OXyTFjAgJWtDgwCdJyoIuSM7Pnpoo2CUiT+JF86jMKC/9D3/kMt9GwM
jvxyYhO63miw6mLURy5pRQOyfY5gnFqwDXCUNFAWCmcvODAoScb8DTE7nmuotteo
ubPxGJCoM3bTMoCpSRn0HAyuKtSXpi3/WZXCQuEj/bQGCuhkS0ZcQuBRQ+nxS/HX
HGyBbf/sfzP3A+/gUpbrxtxC8qjX8Gc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:35:48 2026 by rpki-client