Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/fccd2d24-f58a-37fd-98aa-eccc73a7fe16.roa
File:                     fccd2d24-f58a-37fd-98aa-eccc73a7fe16.roa (raw, json)
Hash identifier:          EaokkhOay0GK8i1mgXbvTekL/y+SY+xX3jEUq4YB2To=
Subject key identifier:   AF:76:1C:8D:BD:9A:70:1A:CE:C5:EB:F8:7C:03:09:3B:FC:A2:1B:D9
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584D52EF7E63E1714C2D2CE41300
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/fccd2d24-f58a-37fd-98aa-eccc73a7fe16.roa
Signing time:             Sun 29 Mar 2026 01:00:24 +0000
ROA not before:           Sun 29 Mar 2026 01:00:24 +0000
ROA not after:            Sat 27 Jun 2026 01:00:24 +0000
asID:                     32133
IP address blocks:        98.124.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:ef:7e:63:e1:71:4c:2d:2c:e4:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Mar 29 01:00:24 2026 GMT
            Not After : Jun 27 01:00:24 2026 GMT
        Subject: CN=f79f6455-2d27-44d4-acd7-c4164326470a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:e1:d4:da:72:bf:03:65:3c:c1:69:e9:1f:
                    14:83:14:18:9a:72:fd:ee:d1:13:64:e5:82:ac:e8:
                    a3:22:79:50:0a:2b:4e:61:7e:d5:e8:e3:d7:6e:11:
                    a0:0e:db:10:c4:a8:cb:22:c5:d5:0b:b2:a0:91:0b:
                    79:42:1a:91:8e:47:1b:3a:1f:02:c9:e9:1d:c4:b3:
                    92:2a:ac:c6:6b:42:ab:6f:b0:0e:80:ff:36:c7:62:
                    e4:d2:ae:54:57:8e:8d:f9:f1:0f:20:62:68:ae:26:
                    6e:75:e3:75:90:22:ad:5c:da:a7:36:c7:e4:2e:94:
                    4a:8a:b7:cd:c8:5d:8e:fa:ef:87:e9:4d:d9:ee:2e:
                    9f:db:74:c6:d7:39:01:67:f7:ea:45:97:39:18:c4:
                    02:ac:41:dd:73:4a:4f:0a:02:83:73:24:11:16:e3:
                    07:93:c0:1c:8d:be:9c:b7:56:75:23:64:54:55:ce:
                    54:67:d9:8a:45:71:db:27:be:77:b1:27:71:5e:97:
                    53:94:b4:03:eb:b2:a0:03:12:c1:13:67:f8:3d:51:
                    94:ac:38:f5:44:ff:d9:48:7d:8f:62:cb:f2:18:63:
                    e4:58:85:c2:9b:80:dc:32:9c:ca:1a:d1:89:84:4d:
                    3e:16:37:0b:1d:61:08:0c:97:35:39:6e:75:60:26:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:1C:8D:BD:9A:70:1A:CE:C5:EB:F8:7C:03:09:3B:FC:A2:1B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/fccd2d24-f58a-37fd-98aa-eccc73a7fe16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:19:e6:39:1d:a0:4e:e6:0e:78:98:a0:79:32:1e:3e:e4:6d:
         f1:25:81:3b:e1:6a:6b:aa:2b:c2:25:95:6b:5c:75:ba:fd:4a:
         e5:ba:92:65:a7:a1:1d:10:87:18:95:c2:02:8a:46:61:c8:c0:
         38:4d:f6:61:6f:17:2d:2a:22:d9:37:f7:3a:b8:7f:4f:f4:9b:
         49:0f:63:c4:b7:1a:bf:cd:11:8d:6f:da:fe:01:fb:ff:d9:39:
         60:43:dd:dd:4b:a5:32:63:8e:59:ec:b1:8e:ab:f7:a2:f0:16:
         0c:fd:cf:a6:86:35:87:ab:39:7b:12:53:08:86:16:41:e1:c2:
         0c:5d:60:3d:e6:a4:45:ce:29:75:e6:23:d1:87:1c:d0:fa:4d:
         14:b1:d6:b7:c0:a8:f8:7c:38:d5:62:0a:17:95:e8:e2:45:64:
         ea:3e:b5:07:c6:d1:4e:90:6c:aa:e7:3e:0b:e0:f2:e1:a2:a5:
         4c:ef:f4:79:16:03:d1:1a:ec:49:a4:ae:f4:d8:fc:71:a0:36:
         35:3f:bf:1e:05:60:30:88:d3:d8:4f:ed:c1:27:8e:e5:dd:52:
         95:52:5a:b6:1a:b6:b1:fe:4e:c5:b5:56:37:97:c6:f4:66:d9:
         05:c9:05:f2:2b:13:18:59:34:b1:75:43:62:4b:d1:92:f3:85:
         5d:6a:ad:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1S735j4XFMLSzkEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI2MDMyOTAxMDAyNFoXDTI2MDYyNzAxMDAyNFowLzEtMCsGA1UEAxMk
Zjc5ZjY0NTUtMmQyNy00NGQ0LWFjZDctYzQxNjQzMjY0NzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEPh1NpyvwNlPMFp6R8UgxQYmnL97tETZOWC
rOijInlQCitOYX7V6OPXbhGgDtsQxKjLIsXVC7KgkQt5QhqRjkcbOh8CyekdxLOS
KqzGa0Krb7AOgP82x2Lk0q5UV46N+fEPIGJoriZudeN1kCKtXNqnNsfkLpRKirfN
yF2O+u+H6U3Z7i6f23TG1zkBZ/fqRZc5GMQCrEHdc0pPCgKDcyQRFuMHk8Acjb6c
t1Z1I2RUVc5UZ9mKRXHbJ753sSdxXpdTlLQD67KgAxLBE2f4PVGUrDj1RP/ZSH2P
YsvyGGPkWIXCm4DcMpzKGtGJhE0+FjcLHWEIDJc1OW51YCZUlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK92HI29mnAazsXr+HwDCTv8ohvZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZmNjZDJkMjQtZjU4YS0z
N2ZkLTk4YWEtZWNjYzczYTdmZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYnzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcZ5jkdoE7mDniYoHkyHj7kbfElgTvhamuqK8IllWtcdbr9SuW6kmWn
oR0QhxiVwgKKRmHIwDhN9mFvFy0qItk39zq4f0/0m0kPY8S3Gr/NEY1v2v4B+//Z
OWBD3d1LpTJjjlnssY6r96LwFgz9z6aGNYerOXsSUwiGFkHhwgxdYD3mpEXOKXXm
I9GHHND6TRSx1rfAqPh8ONViCheV6OJFZOo+tQfG0U6QbKrnPgvg8uGipUzv9HkW
A9Ea7EmkrvTY/HGgNjU/vx4FYDCI09hP7cEnjuXdUpVSWrYatrH+TsW1VjeXxvRm
2QXJBfIrExhZNLF1Q2JL0ZLzhV1qrY0=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:23 2026 by rpki-client