Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5bf81269-1b2c-3e00-893d-7eaad346675c.roa
File:                     5bf81269-1b2c-3e00-893d-7eaad346675c.roa (raw, json)
Hash identifier:          BbJuS3EL6sgYVZJ2l1r22pv+whAf8ATbSLL21NF4udQ=
Subject key identifier:   E2:B1:4B:96:13:20:21:29:4E:57:DB:8C:5D:F3:32:F8:FC:8A:BB:86
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D2BDA1808153AE88720F40780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5bf81269-1b2c-3e00-893d-7eaad346675c.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        98.158.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:18:08:15:3a:e8:87:20:f4:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=7030386c-9ab3-4d53-8da4-cbab1377add5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:ff:01:3a:4b:2b:bb:14:aa:7a:36:4d:29:
                    e7:a0:04:ff:8f:6a:df:69:dc:89:44:17:9c:a7:d8:
                    6b:e0:0a:10:95:e2:c2:0e:ce:43:17:82:e8:dd:7d:
                    f1:08:bb:de:b6:74:09:ba:85:ab:f4:5d:d7:af:b8:
                    a7:9b:98:ec:c5:2a:11:0c:b1:b4:5a:bc:59:34:7d:
                    ba:3b:80:d5:51:72:aa:5e:5c:52:a9:fe:61:b0:50:
                    70:10:bf:de:0a:3f:8d:d1:af:76:a6:2d:e6:47:fa:
                    80:ce:10:36:41:ed:45:15:1a:67:9c:e5:c4:f4:68:
                    99:eb:b8:0d:a6:b5:02:30:ab:58:77:3c:fd:9f:88:
                    bf:6f:6a:be:e4:4e:42:f6:08:83:d1:de:88:5e:f6:
                    55:2a:88:e7:04:c9:05:4b:cf:75:d0:01:49:2f:2d:
                    0c:ee:22:70:a7:77:7e:5f:e9:9c:9e:1e:60:3a:6d:
                    85:2f:e9:be:9b:35:90:c5:ce:3c:07:1e:d5:49:32:
                    84:4d:33:3d:ed:7b:56:df:58:49:ef:3e:c1:d6:53:
                    80:cc:f7:8a:ed:4d:2d:be:dd:21:ec:d6:69:34:a7:
                    30:57:08:0e:2f:9b:94:e2:c0:65:16:99:07:ed:93:
                    cc:3e:4e:1f:49:0b:d9:5c:4c:25:3a:4d:6d:af:af:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B1:4B:96:13:20:21:29:4E:57:DB:8C:5D:F3:32:F8:FC:8A:BB:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5bf81269-1b2c-3e00-893d-7eaad346675c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:60:4a:4b:bd:b4:26:ce:25:73:e0:9d:9b:2b:94:24:37:d0:
         ac:26:0a:c6:17:0a:4d:aa:c5:88:ca:27:a3:fa:69:80:85:89:
         bf:c3:eb:b0:34:03:c9:27:5b:40:c5:46:f3:8b:dc:ab:2a:91:
         39:79:11:73:76:8e:9f:a3:b5:7c:c5:fd:de:56:78:36:72:57:
         b7:c5:66:80:2f:97:09:28:45:af:88:82:70:ed:13:9f:1e:d1:
         b8:9d:1e:c8:31:29:d3:3a:d8:ec:92:5e:69:4b:55:e9:12:61:
         b7:5d:ce:15:79:7f:75:36:0b:18:9a:05:b2:2e:19:0a:af:02:
         73:e2:5a:99:ab:c4:c3:e5:31:cd:30:fb:1c:43:35:45:ec:b2:
         9b:60:bd:03:94:ee:c9:ff:73:5e:23:b6:45:87:fc:9f:d2:3d:
         41:0b:71:24:36:3e:dd:b8:ee:f1:a2:ca:4d:17:d5:0a:37:6c:
         57:18:a6:fc:cf:af:8d:0b:35:47:a3:64:c3:11:e9:63:ef:1b:
         8b:10:54:33:24:56:82:6f:48:27:66:c9:1d:57:df:eb:34:65:
         4a:90:da:d5:94:82:be:10:3f:f5:3b:42:5f:3e:54:41:df:ab:
         1a:ab:08:a7:bd:7b:e0:b8:76:bf:b0:99:09:32:21:d1:30:95:
         16:7e:37:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hgIFTrohyD0B4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
NzAzMDM4NmMtOWFiMy00ZDUzLThkYTQtY2JhYjEzNzdhZGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyT/ATpLK7sUqno2TSnnoAT/j2rfadyJRBec
p9hr4AoQleLCDs5DF4Lo3X3xCLvetnQJuoWr9F3Xr7inm5jsxSoRDLG0WrxZNH26
O4DVUXKqXlxSqf5hsFBwEL/eCj+N0a92pi3mR/qAzhA2Qe1FFRpnnOXE9GiZ67gN
prUCMKtYdzz9n4i/b2q+5E5C9giD0d6IXvZVKojnBMkFS8910AFJLy0M7iJwp3d+
X+mcnh5gOm2FL+m+mzWQxc48Bx7VSTKETTM97XtW31hJ7z7B1lOAzPeK7U0tvt0h
7NZpNKcwVwgOL5uU4sBlFpkH7ZPMPk4fSQvZXEwlOk1tr69p8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKxS5YTICEpTlfbjF3zMvj8iruGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWJmODEyNjktMWIyYy0z
ZTAwLTg5M2QtN2VhYWQzNDY2NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNgSku9tCbOJXPgnZsrlCQ30KwmCsYXCk2qxYjKJ6P6aYCFib/D67A0
A8knW0DFRvOL3KsqkTl5EXN2jp+jtXzF/d5WeDZyV7fFZoAvlwkoRa+IgnDtE58e
0bidHsgxKdM62OySXmlLVekSYbddzhV5f3U2CxiaBbIuGQqvAnPiWpmrxMPlMc0w
+xxDNUXssptgvQOU7sn/c14jtkWH/J/SPUELcSQ2Pt247vGiyk0X1Qo3bFcYpvzP
r40LNUejZMMR6WPvG4sQVDMkVoJvSCdmyR1X3+s0ZUqQ2tWUgr4QP/U7Ql8+VEHf
qxqrCKe9e+C4dr+wmQkyIdEwlRZ+N6I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:20 2026 by rpki-client