Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa
File:                     a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa (raw, json)
Hash identifier:          YMWMiGN1WPBmGtSmRGmZJp2z/i1BtwaKlrpnqvdA7VA=
Subject key identifier:   FA:E4:7D:6B:69:8E:18:A4:43:CA:42:5D:59:A0:5B:6D:FF:58:C9:1D
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E1E444E4E7F5823422DA2E800
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     21859
IP address blocks:        98.98.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4e:4e:7f:58:23:42:2d:a2:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=fe1e67f4-6571-4bf4-abd3-d07579f5b1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:fb:c6:dc:cb:90:73:f2:c6:dd:bc:cc:b3:
                    8f:92:25:a3:82:99:31:79:93:6c:29:29:b1:8a:6b:
                    c9:dd:d5:d8:1b:56:f0:41:9f:21:45:87:82:52:8b:
                    3a:92:d9:ab:e8:0a:04:2f:ac:1b:29:9c:2b:23:cf:
                    f1:aa:10:2d:bc:61:0b:cc:f4:66:89:36:9c:24:f5:
                    66:e5:60:48:98:72:3a:a2:5b:e0:88:2b:ff:43:d6:
                    fd:6c:97:af:ef:98:8a:cd:d3:bc:d9:08:96:36:c0:
                    2d:95:f2:7a:06:d6:5c:77:6b:74:98:a1:4c:01:7d:
                    06:a7:ed:93:bb:89:48:90:34:1f:24:8c:1e:d8:7b:
                    12:7b:fb:a4:f7:e4:40:2f:d7:4d:46:f3:44:5f:b2:
                    74:68:a3:82:cb:f7:d0:25:6b:5c:92:36:3f:16:b7:
                    a4:d2:8f:85:a4:e3:35:74:0a:31:a1:46:13:c7:f1:
                    57:a1:c0:44:bd:ae:5f:1c:f6:53:4a:0a:8f:ec:0c:
                    92:33:8a:a3:27:2f:5b:c1:d5:f8:d6:5e:2e:03:28:
                    ea:b8:24:14:15:a6:4a:8a:17:67:8e:b8:3c:79:13:
                    84:eb:bf:68:db:c1:68:6c:23:2f:50:c7:4b:1c:49:
                    93:8c:a5:d9:c7:b2:1c:a3:6f:7d:f6:7c:5d:53:90:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:7D:6B:69:8E:18:A4:43:CA:42:5D:59:A0:5B:6D:FF:58:C9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:56:67:89:28:1d:fb:fb:ff:dc:5c:79:cb:d7:38:d0:4a:d3:
         c2:56:0f:a4:76:bc:f4:f0:ca:b9:4e:84:f7:d9:12:fd:92:f0:
         07:b7:55:9c:a1:25:e7:d2:ee:59:a7:d3:2b:1c:ed:89:84:46:
         fe:c5:8f:ed:42:c7:92:58:64:a7:67:e8:c3:3f:61:8b:e8:3d:
         76:81:f4:26:a6:74:8b:1f:81:79:60:08:67:d6:39:9b:08:1e:
         68:60:2e:31:9e:78:c4:31:ba:c8:7b:2f:cc:e5:eb:8f:43:50:
         ad:9f:a3:59:45:3e:fd:13:5f:f5:6b:77:27:23:48:48:12:03:
         6a:81:01:44:d0:c5:0a:48:07:ba:86:b8:98:64:1e:e1:e3:05:
         84:78:8f:19:9e:26:30:51:4d:dd:68:fe:51:87:67:e6:5f:c4:
         c8:6d:54:35:75:d2:84:96:de:b2:5e:37:a7:53:ec:4f:3d:c3:
         b9:4a:12:52:40:e3:70:a9:cc:0a:c0:68:85:c5:75:9e:a3:47:
         25:46:80:0a:76:49:5d:92:21:e0:86:c8:ba:49:82:db:a4:34:
         99:d7:c7:c5:6a:61:3e:c4:68:07:d4:39:0b:e8:59:28:81:73:
         e7:6e:6c:22:a3:c7:12:dc:75:39:03:a2:85:2e:76:34:3d:d5:
         95:e9:ac:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRE5Of1gjQi2i6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZmUxZTY3ZjQtNjU3MS00YmY0LWFiZDMtZDA3NTc5ZjViMWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaf7xtzLkHPyxt28zLOPkiWjgpkxeZNsKSmx
imvJ3dXYG1bwQZ8hRYeCUos6ktmr6AoEL6wbKZwrI8/xqhAtvGELzPRmiTacJPVm
5WBImHI6olvgiCv/Q9b9bJev75iKzdO82QiWNsAtlfJ6BtZcd2t0mKFMAX0Gp+2T
u4lIkDQfJIwe2HsSe/uk9+RAL9dNRvNEX7J0aKOCy/fQJWtckjY/Frek0o+FpOM1
dAoxoUYTx/FXocBEva5fHPZTSgqP7AySM4qjJy9bwdX41l4uAyjquCQUFaZKihdn
jrg8eROE679o28FobCMvUMdLHEmTjKXZx7Ico2999nxdU5D/XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrkfWtpjhikQ8pCXVmgW23/WMkdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYTg1Zjc4ZWQtOWNjNC0z
YjMzLTkwMTEtZWJhMGQzY2Q1OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmLoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1WZ4koHfv7/9xcecvXONBK08JWD6R2vPTwyrlOhPfZEv2S8Ae3VZyh
JefS7lmn0ysc7YmERv7Fj+1Cx5JYZKdn6MM/YYvoPXaB9CamdIsfgXlgCGfWOZsI
HmhgLjGeeMQxush7L8zl649DUK2fo1lFPv0TX/VrdycjSEgSA2qBAUTQxQpIB7qG
uJhkHuHjBYR4jxmeJjBRTd1o/lGHZ+ZfxMhtVDV10oSW3rJeN6dT7E89w7lKElJA
43CpzArAaIXFdZ6jRyVGgAp2SV2SIeCGyLpJgtukNJnXx8VqYT7EaAfUOQvoWSiB
c+dubCKjxxLcdTkDooUudjQ91ZXprIY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:26 2026 by rpki-client