Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa
File:                     d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa (raw, json)
Hash identifier:          T1Ru/aSsm2z+EjUkq1XLtCNRS9YSYriz1yagE8TKYJA=
Subject key identifier:   0C:A5:09:10:6F:6B:E3:72:BF:98:C9:3B:D9:2A:61:A7:06:97:07:2C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA17A87F03C03F53F4F6D7DA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     401398
IP address blocks:        198.89.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:87:f0:3c:03:f5:3f:4f:6d:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=2709bb1d-dd60-40aa-9506-012fde3c038a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:a8:40:1f:79:68:a7:67:fc:71:65:82:d2:
                    78:3a:36:76:02:2e:a5:c2:ad:92:4a:ee:0f:72:d4:
                    41:46:08:25:0b:dd:25:36:32:c1:fb:4c:9a:c5:a7:
                    aa:5f:84:5e:29:a1:c7:89:50:d8:97:e1:bd:03:b4:
                    59:72:96:2f:35:1a:fa:7b:e7:d5:b0:7a:cd:21:69:
                    8a:0d:33:eb:01:fc:56:9a:8b:91:1f:b8:7d:29:b1:
                    48:f2:e5:81:5b:ba:b2:ac:27:2a:5a:b0:7e:76:6d:
                    6f:80:58:69:d0:2b:cf:1b:3d:cc:84:e2:fe:2f:48:
                    b7:8d:8f:cd:99:81:e8:9e:5a:2a:79:34:5a:dc:52:
                    6d:7b:73:88:f3:45:d1:c1:26:a3:47:fd:74:d1:64:
                    de:69:3d:e8:73:c3:a0:1a:75:ee:92:19:40:16:43:
                    23:c6:ac:0b:e0:21:c3:27:93:bf:33:4e:25:97:9b:
                    d7:c3:f9:91:c1:09:b0:55:ab:52:df:69:d2:b0:2c:
                    91:64:42:7f:7b:c6:d2:00:00:65:21:08:eb:4f:38:
                    69:36:9b:fc:d3:2e:3f:3d:db:a4:12:90:e3:58:ef:
                    7b:77:5e:c8:bf:bc:83:53:5a:74:e5:e9:4b:a0:92:
                    c5:2d:88:ed:b6:87:fe:3d:cc:23:8d:2b:5d:3f:8a:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:09:10:6F:6B:E3:72:BF:98:C9:3B:D9:2A:61:A7:06:97:07:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:10:8d:c7:17:c4:77:c0:bb:f7:12:44:99:37:2c:6a:0f:
         cc:bf:6f:bf:f8:70:54:52:6f:a1:23:c8:37:91:b4:f5:a1:d2:
         d7:ca:02:47:f6:4c:5a:10:bd:ed:49:54:c6:e9:5e:09:1b:30:
         5c:12:9b:5c:6e:f7:4f:03:bf:f9:90:2f:f4:b7:e0:3a:15:3f:
         65:70:c3:5c:e1:c7:30:b3:5d:f5:af:5f:d9:8f:7d:f3:33:98:
         60:b8:b1:90:02:5e:6a:23:90:de:40:ff:a8:c9:04:c8:41:b1:
         f4:09:44:9f:2b:fc:fb:e4:39:e0:1a:3f:ec:4d:5a:60:5e:2f:
         75:98:74:b6:a1:dc:20:70:0c:6d:9b:62:ff:74:d7:6d:26:48:
         c7:03:a4:44:c5:67:b6:a5:73:d1:92:95:23:a8:bc:63:c4:c4:
         6c:c1:8b:46:4f:9b:aa:10:2a:ff:d5:53:c6:03:65:cd:91:44:
         1e:46:c1:1a:d0:0c:67:d6:de:1a:ab:1f:06:5e:3c:0e:8c:8c:
         2f:f8:85:e2:6e:c7:19:c8:39:d0:f4:31:06:97:56:ce:ba:4b:
         ca:67:24:6b:4e:40:0c:19:da:37:87:28:dc:29:78:5d:74:cb:
         bf:5c:56:6e:00:48:d8:36:7d:a4:ef:15:34:4a:f5:45:58:13:
         fd:a5:89:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heofwPAP1P09tfaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk
MjcwOWJiMWQtZGQ2MC00MGFhLTk1MDYtMDEyZmRlM2MwMzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFaoQB95aKdn/HFlgtJ4OjZ2Ai6lwq2SSu4P
ctRBRgglC90lNjLB+0yaxaeqX4ReKaHHiVDYl+G9A7RZcpYvNRr6e+fVsHrNIWmK
DTPrAfxWmouRH7h9KbFI8uWBW7qyrCcqWrB+dm1vgFhp0CvPGz3MhOL+L0i3jY/N
mYHonloqeTRa3FJte3OI80XRwSajR/100WTeaT3oc8OgGnXukhlAFkMjxqwL4CHD
J5O/M04ll5vXw/mRwQmwVatS32nSsCyRZEJ/e8bSAABlIQjrTzhpNpv80y4/Pduk
EpDjWO97d17Iv7yDU1p05elLoJLFLYjttof+PcwjjStdP4pa2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAylCRBva+Nyv5jJO9kqYacGlwcsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDRhMTFlN2EtODdhNy0z
MjU5LWI1ZjgtMGQ5OGE3YzVjZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlliMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPNEI3HF8R3wLv3EkSZNyxqD8y/b7/4cFRSb6EjyDeRtPWh0tfKAkf2
TFoQve1JVMbpXgkbMFwSm1xu908Dv/mQL/S34DoVP2Vww1zhxzCzXfWvX9mPffMz
mGC4sZACXmojkN5A/6jJBMhBsfQJRJ8r/PvkOeAaP+xNWmBeL3WYdLah3CBwDG2b
Yv90120mSMcDpETFZ7alc9GSlSOovGPExGzBi0ZPm6oQKv/VU8YDZc2RRB5GwRrQ
DGfW3hqrHwZePA6MjC/4heJuxxnIOdD0MQaXVs66S8pnJGtOQAwZ2jeHKNwpeF10
y79cVm4ASNg2faTvFTRK9UVYE/2lia8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:46 2026 by rpki-client