Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b1a1793-8382-334f-a3ed-4d8130dfebfa.roa
File:                     7b1a1793-8382-334f-a3ed-4d8130dfebfa.roa (raw, json)
Hash identifier:          AgSMa/+cND/UFhQwT+5bWrIXxGhcNEgTGc/fNhy4svc=
Subject key identifier:   17:F0:D7:61:F3:72:3C:07:C9:75:0F:8D:36:FB:B1:36:6A:B6:A1:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8630F008343EDEF82282AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b1a1793-8382-334f-a3ed-4d8130dfebfa.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.197.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:0f:00:83:43:ed:ef:82:28:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3b4723f1-f545-4b72-8c60-c91278474397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:0f:68:c9:49:24:a6:8a:b6:a6:0d:bb:7e:
                    d9:77:1e:70:65:03:08:3f:cd:0b:75:b1:fc:90:71:
                    27:dc:c1:d1:c6:f5:9d:dc:bf:f4:87:74:15:29:cf:
                    83:33:52:d4:a8:1d:e0:4e:df:7e:4d:b0:26:62:0c:
                    f4:e8:91:06:4d:a1:af:c8:6c:92:76:d4:12:d1:c7:
                    b7:38:22:9e:63:88:a7:57:72:ae:69:1f:c4:3d:e1:
                    b2:7b:92:b0:b7:75:8c:d7:7c:02:7c:b5:cc:2d:82:
                    33:b1:77:29:ac:e0:af:5c:1d:eb:56:36:9e:23:73:
                    51:98:26:49:fb:60:6a:4a:eb:05:a1:a8:be:06:1b:
                    45:23:ad:64:32:73:51:6d:ba:9a:e6:c5:e7:61:c1:
                    72:c6:60:0c:fc:0e:77:93:5b:26:b7:25:38:d7:8e:
                    28:28:53:dd:f2:1f:10:7b:3b:db:b3:d3:bf:f1:a8:
                    9f:73:94:3e:be:2c:58:67:e3:c3:8f:34:4f:c3:2f:
                    89:40:c8:60:8d:36:82:f8:2e:96:eb:52:36:18:c4:
                    1e:fe:5a:50:43:f8:4e:b9:e7:1c:a8:90:32:7e:b4:
                    17:98:ff:4b:4d:06:e0:25:5e:c6:1d:3a:83:ce:a8:
                    8a:c6:45:9a:be:a8:36:e3:f2:6c:89:aa:cd:22:36:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F0:D7:61:F3:72:3C:07:C9:75:0F:8D:36:FB:B1:36:6A:B6:A1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b1a1793-8382-334f-a3ed-4d8130dfebfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:5f:9e:a7:e0:32:4b:04:ba:3a:5e:b5:42:c7:98:6d:16:
         b6:f8:5c:da:df:26:12:fb:d2:33:08:14:d8:bd:15:c7:12:9e:
         d7:a5:08:ed:52:da:ae:d9:b9:03:18:cb:a2:e7:ac:cb:f2:92:
         6d:31:6c:af:8f:34:0a:7f:2c:b5:c8:96:da:e3:01:bc:9c:26:
         a3:c4:a3:c3:dc:06:bd:3a:f7:22:56:0b:8b:de:c9:03:ae:1d:
         7a:2d:fb:30:2f:35:99:70:63:df:e4:0d:06:bc:7d:64:fd:ba:
         f8:94:ad:83:f0:92:bd:eb:61:66:0f:73:06:a4:7f:71:11:bd:
         54:94:6a:2d:15:9a:22:49:a7:67:9a:5b:44:0f:30:5f:1d:4b:
         0b:be:90:63:ab:20:a9:3c:c0:b9:23:0a:9f:7d:7a:6a:7a:a2:
         13:53:67:a1:6d:39:1b:34:85:ff:97:49:8a:4b:08:bd:16:ab:
         75:11:de:e5:ae:42:b4:cd:7d:62:b6:5e:da:e7:de:3a:0c:45:
         d6:bc:14:0c:01:87:20:0b:65:6e:de:76:f6:c5:1d:e8:1b:60:
         91:9a:24:79:15:5a:71:3d:9f:72:0b:e0:fe:a2:58:a5:28:69:
         03:32:74:f9:d9:e9:5c:ca:f0:2f:d7:41:8f:a0:1e:29:2f:95:
         de:ea:54:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYw8Ag0Pt74IoKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
M2I0NzIzZjEtZjU0NS00YjcyLThjNjAtYzkxMjc4NDc0Mzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve4PaMlJJKaKtqYNu37Zdx5wZQMIP80LdbH8
kHEn3MHRxvWd3L/0h3QVKc+DM1LUqB3gTt9+TbAmYgz06JEGTaGvyGySdtQS0ce3
OCKeY4inV3KuaR/EPeGye5Kwt3WM13wCfLXMLYIzsXcprOCvXB3rVjaeI3NRmCZJ
+2BqSusFoai+BhtFI61kMnNRbbqa5sXnYcFyxmAM/A53k1smtyU4144oKFPd8h8Q
ezvbs9O/8aifc5Q+vixYZ+PDjzRPwy+JQMhgjTaC+C6W61I2GMQe/lpQQ/hOuecc
qJAyfrQXmP9LTQbgJV7GHTqDzqiKxkWavqg24/JsiarNIjYxmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfw12HzcjwHyXUPjTb7sTZqtqHlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2IxYTE3OTMtODM4Mi0z
MzRmLWEzZWQtNGQ4MTMwZGZlYmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsVyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzyX56n4DJLBLo6XrVCx5htFrb4XNrfJhL70jMIFNi9FccSntelCO1S
2q7ZuQMYy6LnrMvykm0xbK+PNAp/LLXIltrjAbycJqPEo8PcBr069yJWC4veyQOu
HXot+zAvNZlwY9/kDQa8fWT9uviUrYPwkr3rYWYPcwakf3ERvVSUai0VmiJJp2ea
W0QPMF8dSwu+kGOrIKk8wLkjCp99emp6ohNTZ6FtORs0hf+XSYpLCL0Wq3UR3uWu
QrTNfWK2Xtrn3joMRda8FAwBhyALZW7edvbFHegbYJGaJHkVWnE9n3IL4P6iWKUo
aQMydPnZ6VzK8C/XQY+gHikvld7qVG4=
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:46:41 2026 by rpki-client