Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
File:                     e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa (raw, json)
Hash identifier:          r+mSbxRsRW3bfA5biES2nP5EKPKljrABD4kuPGP36jk=
Subject key identifier:   EC:64:38:24:4F:05:22:D0:2C:2C:DA:D9:6D:9C:74:B7:83:8F:A1:CD
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584DC830458894691ADD97096500
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     32133
IP address blocks:        64.98.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:45:88:94:69:1a:dd:97:09:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=33bb0ca1-be3a-40c7-8017-bc2127954a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:88:5e:bd:c4:24:ef:16:ee:b8:12:93:e9:c7:
                    5f:f4:c7:08:33:85:47:27:f4:af:62:5a:6f:e0:52:
                    af:f4:47:c7:4a:5a:f8:88:9b:0d:4e:dc:a1:44:69:
                    da:21:a9:82:60:e2:1b:4b:b2:af:81:b3:da:08:48:
                    61:23:ab:ee:06:20:db:a7:fb:09:a5:a8:b3:65:80:
                    01:e3:41:11:df:66:bd:c5:40:c1:45:2a:74:86:1f:
                    3d:13:82:50:94:58:23:8c:86:22:a2:5f:7f:41:08:
                    bc:db:12:c8:9c:f2:82:00:3a:0d:c6:31:00:d2:2d:
                    e6:02:be:3b:06:ba:13:d0:cd:17:60:3e:ae:41:b7:
                    18:eb:8f:e5:c9:4e:4d:64:d0:ba:37:29:84:30:dc:
                    06:11:7f:94:34:f7:df:89:e8:28:dc:73:e1:f2:01:
                    35:77:ec:b1:51:55:f1:e7:b6:3d:6b:bf:d7:33:24:
                    48:ba:03:d3:58:5f:24:b3:c2:61:05:87:b9:3f:74:
                    35:46:53:90:b5:35:a7:df:e6:80:e7:34:bd:21:e2:
                    71:80:ff:7f:f5:25:5f:e2:6a:64:29:f7:9b:a6:9c:
                    aa:f8:f0:67:f7:97:77:2c:33:df:bb:85:de:5c:d7:
                    41:ca:49:b5:e8:e4:f0:1c:7b:b1:6d:6d:80:76:6a:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:38:24:4F:05:22:D0:2C:2C:DA:D9:6D:9C:74:B7:83:8F:A1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:17:23:6f:2f:8e:a1:96:21:00:0f:77:67:40:99:24:cd:
         b3:ee:d9:4c:67:36:3b:49:c9:ea:0e:b4:6c:75:01:d8:f7:65:
         f1:10:ce:3c:59:b4:7e:97:9b:d8:a9:16:27:e2:de:57:a4:d2:
         fe:4e:16:44:1b:1f:d4:a2:88:7c:1a:d6:3e:f5:8a:9b:de:28:
         2d:26:38:1b:15:68:33:e1:9e:be:0d:8f:fd:c3:9f:4c:b6:29:
         57:55:de:de:6f:e1:b8:9f:a3:26:67:8a:7b:40:5b:1f:44:89:
         a9:48:bf:62:de:7d:ce:b2:d6:8f:cb:83:3b:b1:7f:57:ed:5b:
         4c:11:91:62:a1:b5:ee:ba:64:aa:86:0f:49:a7:73:50:ac:b4:
         19:1a:39:19:1e:c6:bc:0a:bc:8f:30:e1:4c:70:0c:08:1b:7c:
         4d:bb:82:2f:e3:12:3b:ea:df:33:24:8c:e3:97:6a:9b:29:f8:
         5a:04:dd:ac:f0:fd:1c:4d:c4:23:bb:a8:8f:65:14:93:81:83:
         a6:f2:9f:bd:fa:12:c9:d5:17:3f:58:87:49:1a:38:36:63:81:
         b9:8c:82:8a:a6:f4:6b:89:e9:1b:a3:b7:4a:37:6b:3f:d7:c6:
         64:65:d2:37:d4:79:7a:0a:01:e2:0d:69:ba:b6:94:05:00:d6:
         a8:28:92:81
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3IMEWIlGka3ZcJZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk
MzNiYjBjYTEtYmUzYS00MGM3LTgwMTctYmMyMTI3OTU0YThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYhevcQk7xbuuBKT6cdf9McIM4VHJ/SvYlpv
4FKv9EfHSlr4iJsNTtyhRGnaIamCYOIbS7KvgbPaCEhhI6vuBiDbp/sJpaizZYAB
40ER32a9xUDBRSp0hh89E4JQlFgjjIYiol9/QQi82xLInPKCADoNxjEA0i3mAr47
BroT0M0XYD6uQbcY64/lyU5NZNC6NymEMNwGEX+UNPffiego3HPh8gE1d+yxUVXx
57Y9a7/XMyRIugPTWF8ks8JhBYe5P3Q1RlOQtTWn3+aA5zS9IeJxgP9/9SVf4mpk
Kfebppyq+PBn95d3LDPfu4XeXNdBykm16OTwHHuxbW2AdmoSnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOxkOCRPBSLQLCza2W2cdLeDj6HNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvZTkwOTk3YWEtOTQ0MS0z
ZmRiLTg2ZWEtMmIwMmQyZmQzMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQGIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsZcXI28vjqGWIQAPd2dAmSTNs+7ZTGc2O0nJ6g60bHUB2Pdl8RDOPFm0
fpeb2KkWJ+LeV6TS/k4WRBsf1KKIfBrWPvWKm94oLSY4GxVoM+Gevg2P/cOfTLYp
V1Xe3m/huJ+jJmeKe0BbH0SJqUi/Yt59zrLWj8uDO7F/V+1bTBGRYqG17rpkqoYP
SadzUKy0GRo5GR7GvAq8jzDhTHAMCBt8TbuCL+MSO+rfMySM45dqmyn4WgTdrPD9
HE3EI7uoj2UUk4GDpvKfvfoSydUXP1iHSRo4NmOBuYyCiqb0a4npG6O3SjdrP9fG
ZGXSN9R5egoB4g1puraUBQDWqCiSgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:43:12 2026 by rpki-client