Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa
File:                     b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa (raw, json)
Hash identifier:          pH441GukdG18GS4WdTKhY/3xJsw1T584KRV5DiIhn3g=
Subject key identifier:   97:7A:BD:88:FE:D8:37:10:53:84:B9:CE:BF:46:F4:F3:C3:39:67:FB
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E94EA521A341E6CA5649C2880
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        208.95.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:52:1a:34:1e:6c:a5:64:9c:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=245f0a57-48b2-4054-89f6-a9fff3056e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:69:3a:28:86:1b:8d:fa:4c:a1:af:a2:23:
                    f7:1a:eb:f5:59:46:33:5a:d1:78:6f:cc:76:fe:db:
                    15:59:2b:ea:09:8a:52:40:dc:f3:3b:bb:14:f1:3b:
                    dd:a1:b0:5f:37:d3:20:8f:97:44:a1:ef:dd:bc:23:
                    33:40:a7:64:55:84:a7:4e:26:af:22:b2:78:9e:60:
                    ea:d6:3d:c3:e0:bd:ad:38:72:fb:b4:22:5c:bf:5a:
                    a9:fd:10:ef:5c:69:0a:b4:19:ae:0d:2a:73:65:ab:
                    39:34:ae:3e:b6:ea:4b:8c:51:78:60:53:3e:05:72:
                    f6:3c:26:89:83:93:f7:15:18:77:e4:40:13:2e:46:
                    72:be:1a:c1:42:e7:0c:a8:7e:df:80:9c:6b:b7:46:
                    ae:02:8c:94:99:a6:ce:44:e2:9f:f5:b9:34:c8:32:
                    2e:0b:cb:8d:cb:7c:ea:4d:0c:01:db:59:58:c9:4a:
                    b4:7c:37:43:66:98:f4:0a:1e:df:47:a0:9c:91:73:
                    6c:9e:3b:66:04:94:c5:91:c8:bd:17:7f:03:51:d3:
                    e5:c5:94:e8:01:83:f4:02:95:54:bb:fe:b7:39:62:
                    5d:64:3f:86:f4:09:29:8d:bd:fe:81:98:cb:c3:b3:
                    7f:59:86:ef:39:68:d9:05:42:7b:da:db:e9:26:2c:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7A:BD:88:FE:D8:37:10:53:84:B9:CE:BF:46:F4:F3:C3:39:67:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:bd:44:7f:3b:8f:3a:bc:d6:9a:15:09:8a:17:59:aa:4c:
         1b:56:79:31:90:1b:4a:73:fc:85:a5:ec:d5:fa:e2:ec:ee:58:
         b4:3f:f3:bc:8d:f3:31:bc:e1:ce:52:14:8a:d3:dc:33:19:cf:
         33:be:6a:a6:16:e8:4a:62:6e:99:45:82:fd:7e:04:46:c0:64:
         7e:cd:41:46:eb:4f:e2:64:ec:9f:d2:79:79:be:1d:32:2c:7d:
         6e:36:54:22:bd:5e:11:cb:44:53:95:51:a9:0a:65:82:1d:3f:
         6b:5d:86:87:59:7e:5a:cf:fc:bc:e7:9b:12:14:39:00:96:fb:
         ae:32:c7:cf:ea:de:41:52:a7:33:ec:a1:40:3d:d6:e0:4c:3a:
         8a:3c:3b:fa:2a:80:68:9c:9b:db:fe:bb:98:3c:60:41:ab:3c:
         f2:79:4b:1f:02:7d:35:d7:da:2c:33:bb:c6:43:a3:16:6f:52:
         68:5b:ea:25:ad:4b:51:43:23:5b:5a:31:e9:c9:ad:cf:68:e5:
         5b:da:1e:cd:f5:2b:3b:63:a8:8c:6f:5f:0e:b7:a6:73:e4:dd:
         d1:52:a9:5a:a5:23:cd:46:59:10:e8:6f:fe:24:2c:45:57:b7:
         f2:20:07:6c:cd:55:3b:21:b6:8f:4c:a7:c2:33:07:ec:50:67:
         b6:3b:19:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lIaNB5spWScKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MjQ1ZjBhNTctNDhiMi00MDU0LTg5ZjYtYTlmZmYzMDU2ZTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7BpOiiGG436TKGvoiP3Guv1WUYzWtF4b8x2
/tsVWSvqCYpSQNzzO7sU8TvdobBfN9Mgj5dEoe/dvCMzQKdkVYSnTiavIrJ4nmDq
1j3D4L2tOHL7tCJcv1qp/RDvXGkKtBmuDSpzZas5NK4+tupLjFF4YFM+BXL2PCaJ
g5P3FRh35EATLkZyvhrBQucMqH7fgJxrt0auAoyUmabOROKf9bk0yDIuC8uNy3zq
TQwB21lYyUq0fDdDZpj0Ch7fR6CckXNsnjtmBJTFkci9F38DUdPlxZToAYP0ApVU
u/63OWJdZD+G9Akpjb3+gZjLw7N/WYbvOWjZBUJ72tvpJiwJZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJd6vYj+2DcQU4S5zr9G9PPDOWf7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjY3NGUyZjYtYzhkYy0z
N2QyLTkyNGUtMzZjZjExNGY1MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADehvUR/O486vNaaFQmKF1mqTBtWeTGQG0pz/IWl7NX64uzuWLQ/87yN
8zG84c5SFIrT3DMZzzO+aqYW6EpibplFgv1+BEbAZH7NQUbrT+Jk7J/SeXm+HTIs
fW42VCK9XhHLRFOVUakKZYIdP2tdhodZflrP/LznmxIUOQCW+64yx8/q3kFSpzPs
oUA91uBMOoo8O/oqgGicm9v+u5g8YEGrPPJ5Sx8CfTXX2iwzu8ZDoxZvUmhb6iWt
S1FDI1taMenJrc9o5VvaHs31KztjqIxvXw63pnPk3dFSqVqlI81GWRDob/4kLEVX
t/IgB2zNVTshto9Mp8IzB+xQZ7Y7GQU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:17 2026 by rpki-client