Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d61edb-eba8-3ef6-8313-131f64d7cefb.roa
File:                     02d61edb-eba8-3ef6-8313-131f64d7cefb.roa (raw, json)
Hash identifier:          o6mNdCVtkU1NAJVwZPG0VJNFRvm4ZRabyyhhg4cSU4w=
Subject key identifier:   AF:86:F1:FF:5D:A6:AC:AD:87:BF:03:23:D8:FE:63:98:A0:43:93:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FFC80AC7160B15E55DC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d61edb-eba8-3ef6-8313-131f64d7cefb.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.200.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:fc:80:ac:71:60:b1:5e:55:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=326c729b-8121-482d-a0df-9d636b66d4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:56:eb:f0:e4:7f:05:ee:65:5e:63:75:90:
                    c1:f1:8e:4d:2f:4d:dc:68:73:3f:ed:de:aa:fe:59:
                    46:34:ac:eb:a4:cd:3a:a3:22:bd:61:b6:08:f9:9b:
                    ab:36:09:47:46:79:fd:92:06:2a:31:43:5a:5f:5b:
                    f6:e6:8f:97:34:e0:7d:40:3d:16:74:37:45:e2:61:
                    19:ea:11:fd:6e:63:cc:78:f6:cd:c3:f5:11:02:4d:
                    e4:64:73:71:15:b0:72:2b:d8:de:38:82:c3:ca:af:
                    62:dd:90:fb:5d:9b:22:bd:37:2f:94:69:01:52:c5:
                    8a:22:4e:11:ae:9c:9f:89:a1:f7:3a:d7:05:a1:a7:
                    03:07:31:f9:47:32:fe:cd:a8:ee:ab:e5:53:b8:7e:
                    e1:11:03:19:86:c7:c4:1a:21:21:cf:e6:a1:13:15:
                    3e:50:20:e5:fa:e5:1d:3f:90:a0:eb:12:d1:c6:e5:
                    6a:a4:be:6e:eb:97:8f:87:ae:7f:39:a4:a1:3b:1b:
                    12:6c:5d:a9:35:f8:27:7e:e0:47:5b:e1:95:dc:38:
                    d0:07:e7:b9:7f:a7:c7:4c:8d:de:a3:fa:7f:e2:49:
                    d3:40:4d:ae:57:21:9b:a9:af:11:ef:f8:c1:2f:0e:
                    cb:c7:61:39:6e:e1:13:d7:e5:1f:c4:7a:14:c6:9d:
                    1b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:86:F1:FF:5D:A6:AC:AD:87:BF:03:23:D8:FE:63:98:A0:43:93:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d61edb-eba8-3ef6-8313-131f64d7cefb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:27:aa:c5:d9:49:6a:d0:e4:ca:6c:1c:45:af:70:cb:63:
         7d:33:f2:ea:df:d6:6c:ad:2e:67:b2:50:76:ea:f8:37:cf:b1:
         d1:df:3a:2a:3b:8d:f4:24:80:58:2c:8a:6e:58:9b:c3:81:25:
         b2:71:a6:30:0a:6b:bd:a7:a1:1f:e9:23:8b:a7:d5:b2:fa:7f:
         8a:a0:41:ea:0f:40:7c:90:3d:67:bd:dc:a7:b7:87:cb:6b:1a:
         67:67:6e:fb:89:ed:97:4b:ba:c1:a6:8e:f1:68:09:e9:86:b8:
         c2:fe:19:e6:9a:6e:d5:14:e8:b9:00:a4:33:ac:1b:41:ed:d7:
         6d:ee:51:86:5f:bd:f7:bc:18:3e:dd:92:5c:09:c3:8c:95:4c:
         d3:45:64:7d:d4:78:cb:a7:06:eb:19:74:bc:9d:d0:a7:dc:58:
         95:c2:c1:f6:54:a8:29:e4:94:79:01:67:3a:85:bb:a4:1a:81:
         0b:13:86:a8:55:ba:55:80:95:32:6f:b4:3d:12:fc:f9:84:57:
         0c:a1:41:25:99:e6:25:33:ea:59:22:50:cb:7d:e1:bd:f7:5a:
         5f:fd:0f:a4:6a:32:4c:76:2b:4f:8e:05:db:03:1a:9d:8f:54:
         f0:8b:eb:31:ba:3b:ee:75:4f:12:cd:1f:08:02:62:8b:b0:05:
         cd:6a:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:26:36 2026 by rpki-client