Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f50c0ffe-4332-3dfe-a33b-cb930893099d.roa
File:                     f50c0ffe-4332-3dfe-a33b-cb930893099d.roa (raw, json)
Hash identifier:          wNkwrH1y1FADxOrgHt3Ht/bqARLIjvbxisDS/ImbMPw=
Subject key identifier:   DF:12:49:71:53:E2:CF:03:18:85:48:EA:18:93:AA:D3:2A:00:53:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A775A81784BE719115B370
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f50c0ffe-4332-3dfe-a33b-cb930893099d.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        98.226.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:75:a8:17:84:be:71:91:15:b3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=e74fc179-79d4-4279-b61b-9f454b761a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:8c:7e:d3:ec:41:62:1b:bf:5e:6d:30:56:
                    7e:95:f0:09:6b:70:b1:86:6c:5b:c4:48:ee:18:b1:
                    0d:93:d0:31:dc:40:1f:1d:79:11:54:30:c2:1e:58:
                    68:f6:40:6c:8a:b0:aa:cd:50:ad:fd:d6:68:23:70:
                    83:ac:fb:c9:4d:b6:63:dc:16:ac:ef:12:fd:55:c9:
                    d0:24:cf:cb:1b:c9:28:9c:3a:19:cb:79:ec:ca:f6:
                    d8:15:50:6e:65:5d:a2:85:37:9c:be:07:b0:7f:69:
                    42:2f:1f:28:4e:4c:3f:7b:b1:d3:a4:51:5b:dc:dc:
                    8c:dd:7e:a3:6f:33:d9:98:6f:d5:16:69:39:22:72:
                    2e:14:3b:bf:c8:f4:09:00:27:3a:fa:f1:f9:de:24:
                    6c:67:01:bd:d6:13:ac:b7:86:17:13:a6:64:ac:80:
                    14:45:eb:c5:5c:68:ed:6b:84:67:33:11:0a:b2:4b:
                    eb:ae:5a:e2:16:29:91:94:3d:ee:76:82:56:08:1c:
                    e5:42:62:45:c2:a5:42:42:a8:10:07:f0:e8:76:8f:
                    87:8d:9e:76:70:2e:5e:8d:c6:e5:95:8c:6a:b8:6d:
                    fc:66:74:9a:71:03:95:44:29:d7:52:42:2a:88:b9:
                    1d:b0:3e:cc:7e:ec:e8:96:8f:7d:d6:c8:ba:36:8d:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:49:71:53:E2:CF:03:18:85:48:EA:18:93:AA:D3:2A:00:53:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f50c0ffe-4332-3dfe-a33b-cb930893099d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.226.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fc:a1:ea:4c:09:ff:96:7e:85:29:77:88:65:2d:d9:a4:c1:
         86:59:4a:2b:8f:93:5b:05:5c:d8:2c:9a:a1:ab:d9:dd:9c:38:
         72:33:fb:f6:9a:60:74:ef:bf:13:e4:8f:4f:ec:22:7b:a5:e5:
         5b:5a:e8:29:63:20:c8:4d:54:2a:50:aa:a0:56:55:6d:cf:c0:
         9b:cc:df:66:8d:6f:4f:18:de:d5:f0:c0:78:db:95:58:d5:95:
         ee:26:2f:52:9c:89:ca:19:90:4c:16:7f:a3:49:ec:64:e1:83:
         1d:08:83:2b:72:b1:cb:0e:66:57:95:85:f3:84:52:a2:73:d3:
         e9:d5:69:87:4a:32:af:61:5f:99:2d:0c:e3:c8:4c:94:4e:3a:
         b7:5f:5e:5a:a5:49:50:07:a5:33:84:52:dd:f3:07:dc:ee:3c:
         41:fd:12:68:b4:47:b5:91:e8:b8:04:4d:25:e4:b5:c9:6c:f2:
         19:15:f6:08:69:93:83:70:40:6a:23:3f:5e:f5:b7:f0:cd:37:
         05:cf:ae:95:f2:3f:4f:7c:05:2e:60:85:2c:7a:57:83:c5:af:
         ee:0c:98:f1:d5:19:94:09:46:79:31:24:18:c7:31:c1:ec:fd:
         dd:0f:7d:9f:d9:69:22:13:4f:1a:99:6c:fc:d9:d2:7b:5f:58:
         f7:05:f5:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3WoF4S+cZEVs3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZTc0ZmMxNzktNzlkNC00Mjc5LWI2MWItOWY0NTRiNzYxYTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiCMftPsQWIbv15tMFZ+lfAJa3CxhmxbxEju
GLENk9Ax3EAfHXkRVDDCHlho9kBsirCqzVCt/dZoI3CDrPvJTbZj3Bas7xL9VcnQ
JM/LG8konDoZy3nsyvbYFVBuZV2ihTecvgewf2lCLx8oTkw/e7HTpFFb3NyM3X6j
bzPZmG/VFmk5InIuFDu/yPQJACc6+vH53iRsZwG91hOst4YXE6ZkrIAURevFXGjt
a4RnMxEKskvrrlriFimRlD3udoJWCBzlQmJFwqVCQqgQB/Dodo+HjZ52cC5ejcbl
lYxquG38ZnSacQOVRCnXUkIqiLkdsD7Mfuzolo991si6No1xKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8SSXFT4s8DGIVI6hiTqtMqAFOfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjUwYzBmZmUtNDMzMi0z
ZGZlLWEzM2ItY2I5MzA4OTMwOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYuIrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKH8oepMCf+WfoUpd4hlLdmkwYZZSiuPk1sFXNgsmqGr2d2cOHIz+/aa
YHTvvxPkj0/sInul5Vta6CljIMhNVCpQqqBWVW3PwJvM32aNb08Y3tXwwHjblVjV
le4mL1KcicoZkEwWf6NJ7GThgx0IgytyscsOZleVhfOEUqJz0+nVaYdKMq9hX5kt
DOPITJROOrdfXlqlSVAHpTOEUt3zB9zuPEH9Emi0R7WR6LgETSXktcls8hkV9ghp
k4NwQGojP171t/DNNwXPrpXyP098BS5ghSx6V4PFr+4MmPHVGZQJRnkxJBjHMcHs
/d0PfZ/ZaSITTxqZbPzZ0ntfWPcF9Vk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:01 2025 by rpki-client