Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/98c8a868-0f60-3198-81d3-df38a20ed5a0.roa
File:                     98c8a868-0f60-3198-81d3-df38a20ed5a0.roa (raw, json)
Hash identifier:          MYmVCQXbpWwOU2CPbWSk5MQRtzoQUE17Fl4sbL4oyIg=
Subject key identifier:   ED:52:47:17:15:E5:07:A5:60:34:E7:D4:57:92:0D:53:77:3B:4C:53
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584F268D0B02A4CB2F2FB9E29380
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/98c8a868-0f60-3198-81d3-df38a20ed5a0.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     10361
IP address blocks:        69.191.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:0b:02:a4:cb:2f:2f:b9:e2:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=c047c6e5-b23e-4927-a976-548c392af26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:91:b2:06:da:aa:e1:2d:c1:a8:86:2f:b0:
                    f4:b9:5d:63:51:69:96:0c:4e:e7:56:5d:5d:2c:08:
                    e8:13:5b:1c:92:13:b9:a6:1a:8e:72:d1:3f:e1:7a:
                    fe:1e:2f:2c:a9:cc:29:26:fc:d6:f6:4e:f9:0d:37:
                    67:28:4d:9c:87:11:ad:d9:65:a9:96:b1:e1:24:f6:
                    1f:87:85:0e:b1:e2:e4:c1:f8:29:4c:ce:a6:bd:41:
                    11:4d:fa:ea:26:23:e8:96:4a:d4:7c:b4:1b:45:b3:
                    9a:18:b0:1e:3e:9f:1e:cc:3f:fa:b3:ba:da:3c:6b:
                    1b:17:55:00:49:ea:96:26:53:e2:8b:66:4b:2b:90:
                    c9:db:5d:68:b3:c2:cb:1c:fb:da:2b:6e:0b:50:6a:
                    00:b7:f3:c3:29:dd:65:d6:2e:fb:2a:ca:57:5c:98:
                    69:df:49:36:e5:19:fa:63:18:27:e4:22:b5:23:80:
                    b3:50:05:09:d6:56:b9:87:36:6c:9b:59:12:5f:06:
                    19:8a:7b:d7:4a:0e:5d:a2:4c:8f:24:7d:35:9b:6c:
                    3d:98:89:b1:93:af:c6:19:e7:fd:ea:fc:a2:15:a6:
                    4e:4f:bd:bc:54:6c:35:9a:18:15:54:1c:ba:68:58:
                    86:3d:48:8d:58:a6:42:dc:90:79:5d:e5:43:b5:17:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:52:47:17:15:E5:07:A5:60:34:E7:D4:57:92:0D:53:77:3B:4C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/98c8a868-0f60-3198-81d3-df38a20ed5a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:af:c1:40:16:37:0f:bb:5a:60:44:39:1c:ea:56:e1:83:4c:
         d2:d2:bb:fc:f3:70:dc:e4:36:eb:dc:dc:d6:47:17:6f:9c:c5:
         e3:e5:93:89:d3:f0:e4:e6:22:f0:5d:e2:4b:f6:aa:01:f3:1f:
         d6:5a:fa:c5:7a:4c:22:5d:72:7d:4e:f0:bf:94:8a:70:48:ac:
         3e:54:ef:32:e2:78:f9:cd:56:61:3b:7c:50:fb:e5:64:32:c3:
         ce:38:fb:e4:ea:89:ca:a7:ba:ff:49:c3:8e:89:6a:cb:10:92:
         3d:fd:cf:0d:dc:ac:b5:36:0d:e3:9b:18:72:e9:38:18:11:f5:
         b3:20:66:3e:16:e8:e6:f6:86:9e:36:bd:35:34:16:3c:7a:14:
         52:6a:e6:0a:5f:47:db:b5:f3:00:9a:13:5e:97:56:ad:88:99:
         46:41:28:3f:21:ac:e9:7d:ba:f3:7d:51:c4:70:10:26:87:c4:
         13:f7:0f:91:20:1b:5e:60:ea:75:c6:c8:c0:7e:7f:bb:b2:84:
         a2:72:d7:46:ca:40:36:20:f9:dd:df:9c:22:7c:b0:48:33:78:
         9a:c2:e4:97:a3:8d:65:4f:e6:d6:60:1d:8d:56:cf:4e:6a:28:
         13:83:d9:ac:ee:21:ce:bd:a3:ea:56:ac:b8:29:8c:73:6b:03:
         56:8d:12:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQsCpMsvL7nik4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI5NDAyNmUtMjJmYi00ZDEzLWIwNDAtYTBkNzQzMDJl
NTdlMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk
YzA0N2M2ZTUtYjIzZS00OTI3LWE5NzYtNTQ4YzM5MmFmMjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQiRsgbaquEtwaiGL7D0uV1jUWmWDE7nVl1d
LAjoE1sckhO5phqOctE/4Xr+Hi8sqcwpJvzW9k75DTdnKE2chxGt2WWplrHhJPYf
h4UOseLkwfgpTM6mvUERTfrqJiPolkrUfLQbRbOaGLAePp8ezD/6s7raPGsbF1UA
SeqWJlPii2ZLK5DJ211os8LLHPvaK24LUGoAt/PDKd1l1i77KspXXJhp30k25Rn6
Yxgn5CK1I4CzUAUJ1la5hzZsm1kSXwYZinvXSg5dokyPJH01m2w9mImxk6/GGef9
6vyiFaZOT728VGw1mhgVVBy6aFiGPUiNWKZC3JB5XeVDtRfkUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1SRxcV5QelYDTn1FeSDVN3O0xTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0
MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3NDMwMmU1N2UvOThjOGE4NjgtMGY2MC0z
MTk4LTgxZDMtZGYzOGEyMGVkNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTI5NDAyNmUtMjJmYi00ZDEzLWIw
NDAtYTBkNzQzMDJlNTdlLzUyOTQwMjZlLTIyZmItNGQxMy1iMDQwLWEwZDc0MzAy
ZTU3ZS5jcmwwHwYDVR0jBBgwFoAUAZqCpLSr3NqeNZ9acrsak1mXe8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3
NDMwMmU1N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARb/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKvwUAWNw+7WmBEORzqVuGDTNLSu/zzcNzkNuvc3NZHF2+cxePlk4nT
8OTmIvBd4kv2qgHzH9Za+sV6TCJdcn1O8L+UinBIrD5U7zLiePnNVmE7fFD75WQy
w844++Tqicqnuv9Jw46JassQkj39zw3crLU2DeObGHLpOBgR9bMgZj4W6Ob2hp42
vTU0Fjx6FFJq5gpfR9u18wCaE16XVq2ImUZBKD8hrOl9uvN9UcRwECaHxBP3D5Eg
G15g6nXGyMB+f7uyhKJy10bKQDYg+d3fnCJ8sEgzeJrC5JejjWVP5tZgHY1Wz05q
KBOD2azuIc69o+pWrLgpjHNrA1aNEoE=
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:27:34 2026 by rpki-client