Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/6a6fa473-b587-3ddf-a03e-95fcb379c266.roa
File:                     6a6fa473-b587-3ddf-a03e-95fcb379c266.roa (raw, json)
Hash identifier:          RiDrfKqpYqN8dPi+zvPEy4xilHDsPZzNvhEGrAMS8Ro=
Subject key identifier:   C7:DB:A0:CA:73:1E:C1:BD:D0:9D:C7:8E:7D:D7:7A:0E:67:8D:A7:8D
Certificate issuer:       /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
Certificate serial:       010D0C9F4328584E8F550003F6FA6019F2822680
Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/6a6fa473-b587-3ddf-a03e-95fcb379c266.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     51601
IP address blocks:        98.158.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:00:03:f6:fa:60:19:f2:82:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=2d4dde48-591b-4d07-bdcb-2adfc1df59a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:0a:36:52:fa:9e:16:27:52:8d:16:f3:ed:
                    e1:95:96:12:a0:90:de:04:4f:02:bf:89:8e:89:c3:
                    db:c7:56:45:72:a7:b7:22:2a:2d:21:61:50:62:e8:
                    b9:8a:8d:80:6a:64:9a:b5:ee:f0:17:4c:93:57:fe:
                    68:d3:c9:62:89:e2:0e:1a:fc:0a:5c:df:9f:96:8c:
                    d8:d8:bb:88:9b:04:17:d4:e7:e4:4e:7f:08:3b:57:
                    28:6e:8b:86:b4:c9:2d:68:3e:23:ab:f6:61:b9:49:
                    74:8e:4f:f4:8e:ef:0a:bf:c7:7e:40:67:cc:eb:b5:
                    3f:a5:53:f5:df:7f:c0:37:12:3e:fa:15:2d:f3:dc:
                    4d:45:83:0b:4c:28:68:75:d5:76:7a:b2:cb:fb:dc:
                    d7:ec:74:bd:c7:76:a3:b1:26:dd:c6:f2:92:74:3b:
                    15:1a:e4:a2:13:5c:1c:47:f6:b8:77:e6:4f:5c:5e:
                    78:6c:46:5d:0c:f8:76:e9:86:b4:31:99:8b:17:67:
                    06:e3:6f:45:fc:c4:09:ba:4a:ea:71:c6:f3:c7:3c:
                    fd:9d:61:f5:28:32:bc:db:78:50:b6:f3:90:63:74:
                    b4:d1:a6:9a:04:35:a9:36:04:a7:d1:ba:2a:d7:a4:
                    ae:43:97:36:95:2a:16:07:2b:2e:cf:14:21:fa:ee:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:A0:CA:73:1E:C1:BD:D0:9D:C7:8E:7D:D7:7A:0E:67:8D:A7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/6a6fa473-b587-3ddf-a03e-95fcb379c266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:d6:9a:4d:15:b7:d6:b6:ee:23:7f:a6:6a:91:8b:68:1b:d7:
         d3:3e:b6:b3:70:ed:5b:e4:0b:b3:2b:d8:3e:af:d8:dc:2f:5f:
         69:76:4a:d1:74:22:dc:b9:a0:39:ce:46:98:cc:56:94:62:4c:
         ae:b3:64:90:32:43:8f:12:ec:aa:93:8b:03:20:01:26:b0:da:
         61:a4:0f:07:1a:8c:ed:14:d9:96:32:0b:89:b3:c3:8c:a2:44:
         4a:a5:7d:a1:ac:4b:1f:78:11:f5:2b:6f:fc:c4:bc:b1:c5:f3:
         7f:3b:30:31:e4:37:86:3c:e0:73:32:f0:1b:28:7f:16:f4:5a:
         8f:cd:b7:9b:a3:32:94:58:36:22:66:58:92:f7:62:80:a6:72:
         61:3b:60:94:dd:d7:19:0c:09:70:37:25:37:cd:d8:db:f6:da:
         c3:36:90:96:32:d1:d6:69:8d:19:a6:55:9a:d6:d0:83:8d:34:
         1e:14:76:b5:5b:8c:31:b0:fc:b0:66:c0:7e:1f:84:71:7a:34:
         47:c8:3f:c7:64:3e:12:f9:15:0e:5e:ed:1f:79:41:a7:a6:78:
         55:2c:b2:30:ad:73:db:8b:b4:97:f9:ab:af:4c:3e:0b:14:e8:
         be:2d:01:c5:67:42:0e:2e:9e:3f:2b:a2:bb:ed:38:ec:0e:48:
         60:fc:fd:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQAD9vpgGfKCJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy
ZTVlMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk
MmQ0ZGRlNDgtNTkxYi00ZDA3LWJkY2ItMmFkZmMxZGY1OWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXwKNlL6nhYnUo0W8+3hlZYSoJDeBE8Cv4mO
icPbx1ZFcqe3IiotIWFQYui5io2AamSate7wF0yTV/5o08liieIOGvwKXN+flozY
2LuImwQX1OfkTn8IO1cobouGtMktaD4jq/ZhuUl0jk/0ju8Kv8d+QGfM67U/pVP1
33/ANxI++hUt89xNRYMLTChoddV2erLL+9zX7HS9x3ajsSbdxvKSdDsVGuSiE1wc
R/a4d+ZPXF54bEZdDPh26Ya0MZmLF2cG429F/MQJukrqccbzxzz9nWH1KDK823hQ
tvOQY3S00aaaBDWpNgSn0boq16SuQ5c2lSoWBysuzxQh+u4cxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfboMpzHsG90J3Hjn3Xeg5njaeNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1
ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvNmE2ZmE0NzMtYjU4Ny0z
ZGRmLWEwM2UtOTVmY2IzNzljMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0
M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0
MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw
MWIwNDJlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp5uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANrWmk0Vt9a27iN/pmqRi2gb19M+trNw7VvkC7Mr2D6v2NwvX2l2StF0
Ity5oDnORpjMVpRiTK6zZJAyQ48S7KqTiwMgASaw2mGkDwcajO0U2ZYyC4mzw4yi
REqlfaGsSx94EfUrb/zEvLHF8387MDHkN4Y84HMy8Bsofxb0Wo/Nt5ujMpRYNiJm
WJL3YoCmcmE7YJTd1xkMCXA3JTfN2Nv22sM2kJYy0dZpjRmmVZrW0IONNB4UdrVb
jDGw/LBmwH4fhHF6NEfIP8dkPhL5FQ5e7R95QaemeFUssjCtc9uLtJf5q69MPgsU
6L4tAcVnQg4unj8rorvtOOwOSGD8/Zw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:24 2026 by rpki-client