Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c23094e0-3521-312e-bcf4-8b0ee854186f.roa
File:                     c23094e0-3521-312e-bcf4-8b0ee854186f.roa (raw, json)
Hash identifier:          rNuYA4+Jb4D/fsV/T4cS/vLptc8qDQRu38DAripdCLI=
Subject key identifier:   74:73:63:58:54:CB:DF:C3:A5:6F:1D:07:96:41:4F:8C:03:08:13:2E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F23C2605362E13F03EB3933C0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c23094e0-3521-312e-bcf4-8b0ee854186f.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     14956
IP address blocks:        144.172.87.0/24 maxlen: 24
                          144.172.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:60:53:62:e1:3f:03:eb:39:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=f3c11c56-a990-4e47-af9a-aef91458ac99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:ec:37:27:1d:f5:27:30:31:77:12:ca:15:
                    6c:76:75:fb:9f:83:0e:9f:aa:a7:bf:b0:55:66:71:
                    ae:de:90:29:a5:04:3f:17:f2:b6:c8:64:89:68:f8:
                    e0:d0:43:90:c5:34:2b:77:0f:d6:0e:a9:70:33:b2:
                    36:0a:c4:0e:df:ad:ce:a1:f7:76:95:9c:e6:84:6b:
                    ec:13:36:de:00:84:d0:e0:e2:dd:5d:d9:22:d7:35:
                    b5:d0:54:2a:8a:49:d9:bd:66:b7:db:74:31:18:dc:
                    64:27:23:bb:8e:85:24:4f:a4:bd:4c:c8:e5:e2:cf:
                    6b:9c:cc:2b:6f:55:08:2d:70:a8:d3:74:6d:42:50:
                    44:74:36:79:77:f3:51:7e:0e:39:96:5e:33:7a:41:
                    95:14:cc:39:57:02:21:f7:b7:fa:a5:e9:43:1b:59:
                    5e:01:af:10:23:9b:61:33:14:00:e0:a9:ff:9a:05:
                    c4:d0:1f:7a:30:c0:28:aa:3d:5c:87:ff:01:18:4c:
                    c0:35:81:f1:7c:be:3a:c5:16:0e:9f:12:77:8b:64:
                    07:8a:50:10:0f:5b:24:df:ce:ad:89:fc:d1:96:d3:
                    23:48:fc:1d:c1:30:b9:cc:60:df:9a:8e:fe:ba:6f:
                    ab:80:fa:a7:e5:4f:07:04:f6:a7:1b:60:e8:12:e1:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:73:63:58:54:CB:DF:C3:A5:6F:1D:07:96:41:4F:8C:03:08:13:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c23094e0-3521-312e-bcf4-8b0ee854186f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.87.0-144.172.88.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:17:23:b4:69:ce:ed:61:d2:9c:29:3b:3b:5f:5c:c8:c0:fa:
         75:33:f2:15:70:a9:3d:ee:13:55:9a:b1:b0:b3:49:72:ff:43:
         8a:9a:72:19:bd:c5:2e:9f:bd:51:18:f7:60:80:48:0c:e7:2f:
         36:43:f2:6a:29:29:dc:31:a7:73:70:9e:07:07:f9:59:44:ab:
         57:30:00:8b:ba:73:3b:d6:0d:26:09:05:97:fa:01:d8:6e:b4:
         b0:19:04:54:ed:97:d9:d0:b6:ef:9c:b6:9f:db:2c:1a:f8:49:
         44:1b:0f:c9:a8:66:94:e6:26:52:2d:ef:00:71:29:85:5f:1a:
         bf:4d:7e:58:ca:1d:2d:04:34:3c:2c:18:5d:15:fa:5d:ef:56:
         8d:ce:f8:18:9d:f4:9d:11:ef:8a:cc:be:34:4f:71:91:a5:aa:
         16:92:ab:0d:1b:01:24:d4:28:4c:b5:c0:f6:b0:5e:a7:1c:7f:
         11:b6:4b:f5:5f:68:5b:8d:e2:a7:48:5d:88:92:dd:32:28:96:
         2d:6a:85:e3:c7:e0:91:92:cf:45:70:21:a4:0f:be:db:7c:5e:
         9f:29:0c:31:7c:86:52:f8:5d:55:00:07:1f:fe:ea:1a:5b:37:
         ce:ef:ce:c1:0e:75:2b:ab:79:6f:b1:30:d6:f3:57:e5:96:8f:
         1b:fb:3c:10
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8jwmBTYuE/A+s5M8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZjNjMTFjNTYtYTk5MC00ZTQ3LWFmOWEtYWVmOTE0NThhYzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApijsNycd9ScwMXcSyhVsdnX7n4MOn6qnv7BV
ZnGu3pAppQQ/F/K2yGSJaPjg0EOQxTQrdw/WDqlwM7I2CsQO363Oofd2lZzmhGvs
EzbeAITQ4OLdXdki1zW10FQqiknZvWa323QxGNxkJyO7joUkT6S9TMjl4s9rnMwr
b1UILXCo03RtQlBEdDZ5d/NRfg45ll4zekGVFMw5VwIh97f6pelDG1leAa8QI5th
MxQA4Kn/mgXE0B96MMAoqj1ch/8BGEzANYHxfL46xRYOnxJ3i2QHilAQD1sk386t
ifzRltMjSPwdwTC5zGDfmo7+um+rgPqn5U8HBPanG2DoEuGqbwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHRzY1hUy9/DpW8dB5ZBT4wDCBMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvYzIzMDk0ZTAtMzUyMS0z
MTJlLWJjZjQtOGIwZWU4NTQxODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACQrFcD
BACQrFgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAZhcjtGnO7WHSnCk7O19cyMD6dTPyFXCpPe4TVZqxsLNJ
cv9DippyGb3FLp+9URj3YIBIDOcvNkPyaikp3DGnc3CeBwf5WUSrVzAAi7pzO9YN
JgkFl/oB2G60sBkEVO2X2dC275y2n9ssGvhJRBsPyahmlOYmUi3vAHEphV8av01+
WModLQQ0PCwYXRX6Xe9Wjc74GJ30nRHvisy+NE9xkaWqFpKrDRsBJNQoTLXA9rBe
pxx/EbZL9V9oW43ip0hdiJLdMiiWLWqF48fgkZLPRXAhpA++23xenykMMXyGUvhd
VQAHH/7qGls3zu/OwQ51K6t5b7Ew1vNX5ZaPG/s8EA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:40:43 2026 by rpki-client