Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55cd535-1f17-3516-86cc-78208291b665.roa
File:                     d55cd535-1f17-3516-86cc-78208291b665.roa (raw, json)
Hash identifier:          I94VRxPr5pLCRAdsiZB08MyScVyWQoWCSAQKDRIPDws=
Subject key identifier:   E1:6F:58:49:9D:E9:BC:E4:A0:75:0A:F4:14:8C:86:C3:F4:4A:AA:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4977C93ABAF95085137D8980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55cd535-1f17-3516-86cc-78208291b665.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        98.40.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:c9:3a:ba:f9:50:85:13:7d:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=62ae02bb-d7a8-4c7b-84aa-d9276f3ccab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:97:b0:5b:98:39:8d:8b:b6:2c:6c:81:a5:
                    eb:79:e2:84:28:53:9c:a7:1f:43:f3:df:1f:e6:d2:
                    b4:cf:72:0f:a0:bb:ea:46:cb:96:f2:81:1d:57:93:
                    3c:59:49:30:18:d3:50:dc:2a:8e:1f:57:7d:a3:16:
                    ea:9b:e4:fb:0e:92:2d:a7:24:4c:6d:88:39:9f:d1:
                    e9:31:cb:c3:d9:e0:80:e0:17:45:ab:8a:b7:c9:e9:
                    9b:c5:9e:ed:23:6d:a2:92:00:04:32:d3:8d:aa:ed:
                    d3:8c:17:22:d7:09:05:09:24:5e:a2:d3:9d:ca:3f:
                    70:3b:1b:a1:89:2b:a7:5f:46:09:9f:e8:74:c3:18:
                    e3:37:fd:2e:eb:eb:bd:66:9f:95:f3:7a:92:3e:60:
                    04:81:96:a6:83:63:fd:57:cc:d0:87:e8:9f:fa:7e:
                    0f:c7:d7:98:e3:85:8b:03:a2:59:10:69:52:41:d1:
                    ad:16:b8:b2:46:a2:f3:7a:b3:ad:61:01:f3:92:16:
                    21:ab:a5:e7:8d:ca:d4:42:3a:e4:93:2b:cd:c2:e7:
                    61:b2:18:12:2c:a4:29:06:91:1b:9f:8f:d9:f9:f9:
                    33:3d:45:be:1c:eb:4d:67:86:96:e2:d5:23:30:cf:
                    97:b0:d9:f9:3e:b8:a2:ed:38:61:50:e3:82:53:70:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6F:58:49:9D:E9:BC:E4:A0:75:0A:F4:14:8C:86:C3:F4:4A:AA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55cd535-1f17-3516-86cc-78208291b665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b9:6d:2b:fb:95:f0:8d:18:f2:1f:e3:a4:c3:c4:02:37:6e:
         2f:f8:94:93:02:e8:b6:46:74:26:d8:ab:be:17:fa:5c:34:49:
         c7:32:91:29:d6:aa:ef:e3:26:c2:06:46:88:1e:31:97:16:e4:
         35:f1:a2:f8:3c:ed:fb:f8:dc:7d:da:df:35:60:fa:08:ee:44:
         13:72:a8:53:d8:42:28:4a:1b:c4:9d:ed:64:09:71:a9:1f:4d:
         c1:e8:ea:71:8e:33:b3:94:28:4a:77:99:ac:cd:19:82:c4:bc:
         c8:05:7c:1b:3c:90:93:67:0d:bd:51:c8:85:5a:5e:2c:48:0b:
         b5:01:41:44:5b:66:c8:9b:f7:bc:73:58:5b:f5:96:66:83:68:
         90:76:ff:be:e5:05:4c:05:e9:74:86:9d:18:c6:f4:71:94:95:
         9e:ec:c6:79:b6:78:77:6c:6e:2d:8a:65:5c:62:13:2e:9e:da:
         0c:b4:80:d4:2e:bc:8e:f4:cb:bf:b9:ee:d9:40:fb:9c:e3:53:
         a0:60:f5:c6:11:97:a8:a7:4a:d7:15:f8:59:5c:2c:a4:27:16:
         fc:3f:d1:34:26:59:4f:a0:4a:7c:be:e1:cf:99:20:82:ab:3f:
         50:48:16:79:2c:0a:7f:b4:b1:a4:33:b0:c7:da:06:4d:ae:60:
         e7:fa:e0:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd8k6uvlQhRN9iYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjJhZTAyYmItZDdhOC00YzdiLTg0YWEtZDkyNzZmM2NjYWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW+XsFuYOY2LtixsgaXreeKEKFOcpx9D898f
5tK0z3IPoLvqRsuW8oEdV5M8WUkwGNNQ3CqOH1d9oxbqm+T7DpItpyRMbYg5n9Hp
McvD2eCA4BdFq4q3yembxZ7tI22ikgAEMtONqu3TjBci1wkFCSReotOdyj9wOxuh
iSunX0YJn+h0wxjjN/0u6+u9Zp+V83qSPmAEgZamg2P9V8zQh+if+n4Px9eY44WL
A6JZEGlSQdGtFriyRqLzerOtYQHzkhYhq6XnjcrUQjrkkyvNwudhshgSLKQpBpEb
n4/Z+fkzPUW+HOtNZ4aW4tUjMM+XsNn5Prii7ThhUOOCU3DRSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFvWEmd6bzkoHUK9BSMhsP0SqoFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU1Y2Q1MzUtMWYxNy0z
NTE2LTg2Y2MtNzgyMDgyOTFiNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYigrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGK5bSv7lfCNGPIf46TDxAI3bi/4lJMC6LZGdCbYq74X+lw0SccykSnW
qu/jJsIGRogeMZcW5DXxovg87fv43H3a3zVg+gjuRBNyqFPYQihKG8Sd7WQJcakf
TcHo6nGOM7OUKEp3mazNGYLEvMgFfBs8kJNnDb1RyIVaXixIC7UBQURbZsib97xz
WFv1lmaDaJB2/77lBUwF6XSGnRjG9HGUlZ7sxnm2eHdsbi2KZVxiEy6e2gy0gNQu
vI70y7+57tlA+5zjU6Bg9cYRl6inStcV+FlcLKQnFvw/0TQmWU+gSny+4c+ZIIKr
P1BIFnksCn+0saQzsMfaBk2uYOf64Do=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:44:49 2026 by rpki-client