Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
File:                     c6f25adc-65f3-3187-9117-8c56465b1980.roa (raw, json)
Hash identifier:          CLp4tZ9FtreI8TUDHiX294OMX5ZdcKMyE3hka++Kmt0=
Subject key identifier:   B5:7E:A8:B3:E3:FA:AC:C2:5B:81:87:9B:F5:9D:A5:AA:CF:63:0F:D9
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584DBA3AE4CAEA1ACF7CC3065F00
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     395540
IP address blocks:        96.8.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e4:ca:ea:1a:cf:7c:c3:06:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d751c1b8-7fed-4281-84b3-8d16b629e23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:85:f1:8a:8b:de:40:6e:c3:5d:77:b9:66:
                    28:74:f1:00:d9:31:46:19:1b:11:a1:bd:9b:7f:7a:
                    c8:f0:be:52:09:bf:4b:3d:80:d3:52:29:6b:9f:83:
                    06:37:0e:c9:e6:4e:be:74:2e:70:0a:b8:f9:df:29:
                    2e:9a:b8:96:82:58:d9:80:a1:ad:54:de:b2:d4:69:
                    b6:7f:71:64:c4:56:01:30:18:43:11:29:ae:36:d1:
                    2b:f0:4d:65:e4:37:50:14:e2:fb:c5:2c:b1:29:a8:
                    60:b0:8e:3f:9b:3c:a6:56:66:71:d8:5f:53:e2:3a:
                    b3:a8:58:ae:62:3c:26:20:79:db:b1:d2:a9:e5:c0:
                    cd:9e:07:00:3b:33:65:7e:1e:89:76:8f:61:cf:48:
                    00:74:57:e8:af:1a:ce:5f:d9:72:f1:90:11:58:14:
                    ea:43:1d:40:6c:4f:e2:21:00:b3:64:c1:0d:c1:ae:
                    a7:43:63:07:d9:03:be:5a:2b:0f:96:ff:92:94:a5:
                    f3:76:03:f2:24:17:be:df:6a:50:b9:7f:51:8e:a8:
                    eb:67:38:99:0b:4d:3d:ad:f8:1b:20:64:62:06:1b:
                    ec:24:70:07:a8:67:57:1c:a0:6c:48:ac:9d:08:06:
                    9e:b1:c6:43:4c:cd:2b:ca:19:9a:39:30:0b:ba:f3:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:A8:B3:E3:FA:AC:C2:5B:81:87:9B:F5:9D:A5:AA:CF:63:0F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:49:33:46:c1:82:a0:24:a0:5c:48:00:a5:90:b5:56:d3:0b:
         0e:c2:9b:eb:5f:17:42:49:bc:bd:f2:38:fd:12:a0:03:a6:59:
         ca:01:7e:42:32:39:fd:68:f5:b9:3a:60:df:7d:a8:07:1c:05:
         9a:83:ce:5f:e0:6f:e2:71:e7:72:fe:27:e9:f6:d4:33:24:70:
         37:82:c3:84:97:1c:10:3c:ac:3a:20:83:bd:8f:66:05:d5:45:
         08:ce:23:11:cd:31:5e:a8:59:2f:34:0a:60:36:1e:d1:c7:bd:
         0e:26:9f:ae:e9:d5:c9:59:95:32:2c:0d:dd:23:f6:a4:ee:10:
         ce:7f:fe:2e:36:10:8d:95:2f:ae:45:5d:90:4f:b7:b6:13:35:
         db:61:7f:b1:f1:57:c8:40:8c:2c:e2:2a:bd:17:eb:a4:27:f3:
         af:0a:b3:ae:78:28:c3:43:41:4c:7b:9d:02:d9:3b:88:df:36:
         65:f3:15:7e:bf:fb:ec:1c:53:eb:92:20:c1:6a:ce:79:1f:8a:
         c0:1f:76:39:3f:65:56:4b:10:9d:32:1c:29:70:eb:5d:0d:6a:
         2e:e8:d5:76:59:ea:32:23:15:5f:ba:33:01:33:31:46:7f:8f:
         99:eb:dd:70:cd:c1:e4:af:0c:61:b6:a4:68:a1:ee:9f:66:47:
         b8:e1:cc:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuTK6hrPfMMGXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj
ZmYxMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
ZDc1MWMxYjgtN2ZlZC00MjgxLTg0YjMtOGQxNmI2MjllMjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloWF8YqL3kBuw113uWYodPEA2TFGGRsRob2b
f3rI8L5SCb9LPYDTUilrn4MGNw7J5k6+dC5wCrj53ykumriWgljZgKGtVN6y1Gm2
f3FkxFYBMBhDESmuNtEr8E1l5DdQFOL7xSyxKahgsI4/mzymVmZx2F9T4jqzqFiu
YjwmIHnbsdKp5cDNngcAOzNlfh6Jdo9hz0gAdFforxrOX9ly8ZARWBTqQx1AbE/i
IQCzZMENwa6nQ2MH2QO+WisPlv+SlKXzdgPyJBe+32pQuX9RjqjrZziZC009rfgb
IGRiBhvsJHAHqGdXHKBsSKydCAaescZDTM0ryhmaOTALuvPQqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLV+qLPj+qzCW4GHm/WdparPYw/ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3
YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYzZmMjVhZGMtNjVmMy0z
MTg3LTkxMTctOGM1NjQ2NWIxOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0
ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh
Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5
NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAhiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABJM0bBgqAkoFxIAKWQtVbTCw7Cm+tfF0JJvL3yOP0SoAOmWcoBfkIy
Of1o9bk6YN99qAccBZqDzl/gb+Jx53L+J+n21DMkcDeCw4SXHBA8rDogg72PZgXV
RQjOIxHNMV6oWS80CmA2HtHHvQ4mn67p1clZlTIsDd0j9qTuEM5//i42EI2VL65F
XZBPt7YTNdthf7HxV8hAjCziKr0X66Qn868Ks654KMNDQUx7nQLZO4jfNmXzFX6/
++wcU+uSIMFqznkfisAfdjk/ZVZLEJ0yHClw610Nai7o1XZZ6jIjFV+6MwEzMUZ/
j5nr3XDNweSvDGG2pGih7p9mR7jhzAA=
-----END CERTIFICATE-----
Generated at Wed May 13 15:42:41 2026 by rpki-client