Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4fd7e241-937d-3c5e-bece-2d710527ae6a.roa
File:                     4fd7e241-937d-3c5e-bece-2d710527ae6a.roa (raw, json)
Hash identifier:          tL836wXCJxadok7c8lU6i3knnbYPr39Hi+TEC7nyxN8=
Subject key identifier:   74:A1:9B:52:CC:D5:18:D1:F6:2B:E6:6A:04:7A:4F:F9:F1:34:15:8A
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D47C4E050257A9CFD932728C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4fd7e241-937d-3c5e-bece-2d710527ae6a.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        173.230.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e0:50:25:7a:9c:fd:93:27:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=c1418676-c49e-4348-9ea3-01bf504f28b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ca:a1:d7:e3:eb:94:bb:2e:70:b0:38:94:58:
                    8b:7d:b8:85:ed:52:6b:21:e5:98:18:3d:c8:3f:48:
                    61:bf:c3:6e:34:63:fd:a1:c0:48:31:b7:a5:0b:78:
                    da:ad:17:4b:4e:14:14:97:23:fa:83:18:19:ad:3e:
                    ca:f5:9e:57:76:23:d8:54:4b:c7:72:f2:06:ed:9b:
                    c0:74:30:74:3c:f0:a0:58:c5:c6:9f:34:57:f1:be:
                    7c:08:86:65:42:73:fd:f7:b7:8f:1f:92:b7:05:e4:
                    34:a4:1b:2a:80:20:1b:44:5e:26:d8:37:f8:fe:b5:
                    6c:e8:7a:7e:88:42:c6:3f:f1:1d:f7:22:66:dd:9b:
                    6e:8e:e3:c6:50:2a:2b:63:5f:fb:6a:90:fb:b6:7a:
                    9d:28:90:e2:ad:71:3e:bd:6f:57:4b:85:c1:c7:fb:
                    ab:9d:0c:98:cd:b6:44:af:b9:ed:7d:53:08:d8:9e:
                    e5:2b:4a:2a:13:13:07:24:fb:e7:30:84:03:ef:f5:
                    08:d3:fc:42:b2:72:5b:12:32:76:ee:ea:0c:ea:18:
                    ef:c2:49:92:24:6c:a3:99:31:60:3f:f8:05:f6:3f:
                    24:5c:75:47:9a:4d:f5:4d:a6:d0:48:a8:d9:e8:7f:
                    6b:b5:ca:d3:e3:95:a0:d5:ff:53:9f:fe:ca:a5:a1:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:9B:52:CC:D5:18:D1:F6:2B:E6:6A:04:7A:4F:F9:F1:34:15:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4fd7e241-937d-3c5e-bece-2d710527ae6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:ec:0e:31:b1:88:4e:76:44:45:90:74:f0:12:da:75:ed:
         f1:7e:e6:83:40:62:60:fd:8d:23:a6:05:cb:11:8c:23:1f:53:
         19:a2:f0:c8:bb:f1:26:49:36:16:38:23:43:b2:a4:04:71:31:
         44:d8:47:ea:8a:13:70:fc:05:b5:aa:99:14:de:b8:a7:b6:aa:
         25:b9:e5:71:f5:67:9b:c0:d6:34:09:b1:af:f1:87:f1:92:66:
         51:ae:c4:64:e7:da:c4:f2:cc:a7:65:aa:6c:96:33:f1:d8:85:
         bf:8c:11:3e:52:53:38:93:b6:b8:37:ca:5d:2f:bd:44:d2:49:
         98:4a:e7:ca:52:7b:b9:d8:fa:ac:6a:03:85:79:5c:c8:33:1d:
         71:2a:4f:ce:c5:41:82:0a:01:5e:bc:e1:eb:2e:31:9d:e7:40:
         a7:91:b0:45:e1:36:52:6c:6b:92:62:5d:b2:c5:83:99:79:95:
         1f:6d:5a:a8:d9:5d:62:db:0b:f2:57:3d:4a:5b:b5:0f:d8:d0:
         45:07:3c:95:c6:b9:a3:5f:23:30:96:d8:ab:99:ca:4f:7e:93:
         c1:5c:ff:d2:ad:29:5a:c9:8b:b5:d8:2e:15:a2:d4:da:b9:91:
         17:5c:fa:d7:32:e7:7a:40:0d:d9:01:28:38:26:c6:6a:5a:43:
         d7:08:d8:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOBQJXqc/ZMnKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
YzE0MTg2NzYtYzQ5ZS00MzQ4LTllYTMtMDFiZjUwNGYyOGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38qh1+PrlLsucLA4lFiLfbiF7VJrIeWYGD3I
P0hhv8NuNGP9ocBIMbelC3jarRdLThQUlyP6gxgZrT7K9Z5XdiPYVEvHcvIG7ZvA
dDB0PPCgWMXGnzRX8b58CIZlQnP997ePH5K3BeQ0pBsqgCAbRF4m2Df4/rVs6Hp+
iELGP/Ed9yJm3ZtujuPGUCorY1/7apD7tnqdKJDirXE+vW9XS4XBx/urnQyYzbZE
r7ntfVMI2J7lK0oqExMHJPvnMIQD7/UI0/xCsnJbEjJ27uoM6hjvwkmSJGyjmTFg
P/gF9j8kXHVHmk31TabQSKjZ6H9rtcrT45Wg1f9Tn/7KpaHrbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHShm1LM1RjR9ivmagR6T/nxNBWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNGZkN2UyNDEtOTM3ZC0z
YzVlLWJlY2UtMmQ3MTA1MjdhZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsV7A4xsYhOdkRFkHTwEtp17fF+5oNAYmD9jSOmBcsRjCMfUxmi8Mi7
8SZJNhY4I0OypARxMUTYR+qKE3D8BbWqmRTeuKe2qiW55XH1Z5vA1jQJsa/xh/GS
ZlGuxGTn2sTyzKdlqmyWM/HYhb+MET5SUziTtrg3yl0vvUTSSZhK58pSe7nY+qxq
A4V5XMgzHXEqT87FQYIKAV684esuMZ3nQKeRsEXhNlJsa5JiXbLFg5l5lR9tWqjZ
XWLbC/JXPUpbtQ/Y0EUHPJXGuaNfIzCW2KuZyk9+k8Fc/9KtKVrJi7XYLhWi1Nq5
kRdc+tcy53pADdkBKDgmxmpaQ9cI2BY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:58 2026 by rpki-client