Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa
File:                     1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa (raw, json)
Hash identifier:          rHRtspSKFTGI4ITieXzOvlEWLxUkGd+/8Ln9wVCfXlM=
Subject key identifier:   82:A4:FD:0B:4E:88:5A:BD:6B:6F:B2:96:30:C1:51:C4:EE:66:50:0E
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584F2D87B76D5D7AE75ED3F9B740
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     32133
IP address blocks:        98.124.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b7:6d:5d:7a:e7:5e:d3:f9:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=a00de408-b24e-4a9c-bfa6-ebbedc5ae202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:1c:4b:39:f4:ee:ab:40:4f:f9:78:39:d5:
                    aa:f8:b7:7d:a6:51:32:a6:78:20:ff:05:fd:b8:b0:
                    11:21:4b:65:cb:57:d9:35:72:a7:ad:5b:40:81:e4:
                    3b:57:14:6b:58:aa:3f:9d:7b:36:9e:92:d3:08:c5:
                    d8:d3:3b:07:d4:cd:56:56:0e:9a:8c:50:56:96:b5:
                    9f:a4:24:f1:d5:39:9a:4d:d7:61:48:c7:a3:a3:9d:
                    a4:02:2d:78:d7:aa:92:7f:23:48:e1:52:9f:b2:1d:
                    04:b4:50:6d:ec:0e:af:00:b4:26:23:38:13:39:2f:
                    79:05:98:c7:d1:41:a1:ab:00:09:96:81:fb:3d:5a:
                    28:1d:2e:09:d0:ef:fb:ee:76:d6:82:f2:51:7d:ef:
                    fb:bc:75:7a:d5:26:18:01:b2:3c:e9:69:56:56:37:
                    e6:a4:84:a6:3d:f1:91:13:5f:91:c8:0d:0c:ad:d6:
                    e4:63:9e:16:6b:8c:e7:a2:0d:cd:6e:2a:59:57:ab:
                    02:ac:33:8b:12:89:7c:68:30:73:54:9d:7f:13:07:
                    7f:19:90:a4:1f:e0:3e:53:84:74:e4:10:3a:af:79:
                    0b:97:73:a6:83:c8:c1:78:fe:4c:22:1d:55:d6:2f:
                    f7:55:25:4d:22:ba:12:ee:a5:ef:e8:61:3d:7d:69:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:FD:0B:4E:88:5A:BD:6B:6F:B2:96:30:C1:51:C4:EE:66:50:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ea:35:9f:cf:b3:15:d7:d7:14:e5:06:0f:86:82:ff:b8:19:
         de:75:67:b1:9b:94:5e:db:5c:8b:b3:dd:f0:b1:d9:c1:62:6c:
         91:5f:70:e9:fa:f0:02:ef:05:9a:0f:4c:ac:db:4c:9e:d1:b1:
         00:1c:30:e0:0b:19:3e:26:71:fc:fc:b8:56:30:70:97:c6:15:
         80:dc:d3:f5:9c:b3:4f:4a:62:5e:63:3e:aa:50:e7:1f:f8:53:
         36:04:3a:a1:be:81:79:87:93:b7:95:81:62:fd:90:87:bd:8e:
         d5:1a:a6:4d:e7:87:68:c7:a6:95:bf:42:cc:2b:1a:27:db:9e:
         78:83:87:31:9f:08:27:f3:33:21:50:e6:9f:c3:2d:a3:5e:56:
         e2:f1:0e:1b:9a:3a:57:1f:22:32:35:45:76:6c:5a:64:8c:ba:
         95:ac:58:13:9e:c0:03:3e:07:d9:37:92:d2:5f:16:cb:93:5a:
         5a:1b:54:2f:65:13:94:9e:a8:36:ee:15:77:12:ad:0b:4b:26:
         25:28:23:84:86:a6:70:58:cc:74:54:6b:f1:7f:22:88:91:c9:
         4e:6e:cf:e2:04:72:3a:17:e2:50:e7:e7:c8:cd:84:b4:7a:53:
         f7:ec:a0:c6:22:03:8c:7f:d3:96:e5:d5:2e:01:33:f0:ab:ff:
         fb:67:0d:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7dtXXrnXtP5t0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTAwZGU0MDgtYjI0ZS00YTljLWJmYTYtZWJiZWRjNWFlMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIscSzn07qtAT/l4OdWq+Ld9plEypngg/wX9
uLARIUtly1fZNXKnrVtAgeQ7VxRrWKo/nXs2npLTCMXY0zsH1M1WVg6ajFBWlrWf
pCTx1TmaTddhSMejo52kAi1416qSfyNI4VKfsh0EtFBt7A6vALQmIzgTOS95BZjH
0UGhqwAJloH7PVooHS4J0O/77nbWgvJRfe/7vHV61SYYAbI86WlWVjfmpISmPfGR
E1+RyA0MrdbkY54Wa4znog3NbipZV6sCrDOLEol8aDBzVJ1/Ewd/GZCkH+A+U4R0
5BA6r3kLl3Omg8jBeP5MIh1V1i/3VSVNIroS7qXv6GE9fWne1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKk/QtOiFq9a2+yljDBUcTuZlAOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvMWE2ZjBlZmQtZTkxNS0z
NzQwLWFhZTQtNDUxMzRkMGFjNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYnzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPqNZ/PsxXX1xTlBg+Ggv+4Gd51Z7GblF7bXIuz3fCx2cFibJFfcOn6
8ALvBZoPTKzbTJ7RsQAcMOALGT4mcfz8uFYwcJfGFYDc0/Wcs09KYl5jPqpQ5x/4
UzYEOqG+gXmHk7eVgWL9kIe9jtUapk3nh2jHppW/QswrGifbnniDhzGfCCfzMyFQ
5p/DLaNeVuLxDhuaOlcfIjI1RXZsWmSMupWsWBOewAM+B9k3ktJfFsuTWlobVC9l
E5SeqDbuFXcSrQtLJiUoI4SGpnBYzHRUa/F/IoiRyU5uz+IEcjoX4lDn58jNhLR6
U/fsoMYiA4x/05bl1S4BM/Cr//tnDZY=
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:22:12 2026 by rpki-client