Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0401ea78-602d-3cde-b3e2-575c0280c0dd.roa
File:                     0401ea78-602d-3cde-b3e2-575c0280c0dd.roa (raw, json)
Hash identifier:          EV90m4Ke6atjmOs9aqRTa8shFr9260Q+g8if3J7GWyo=
Subject key identifier:   63:99:B8:7B:1E:7D:F9:3C:85:54:3A:90:17:DA:C6:78:9B:F6:0B:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BA9BA71C5B4A395AD6300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0401ea78-602d-3cde-b3e2-575c0280c0dd.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        98.202.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:a9:ba:71:c5:b4:a3:95:ad:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ad3b112a-baf6-4464-888e-d0fcf8799b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:6d:43:72:25:59:4a:2a:77:f8:fa:77:0e:
                    0a:e4:92:f6:88:d8:5e:1c:f5:f2:a4:e8:6a:84:a9:
                    3e:88:78:39:7e:da:1f:5e:55:63:53:77:4b:8f:9d:
                    9b:a5:68:1e:8f:b9:78:2c:58:f5:9d:b9:4a:48:bb:
                    78:bb:31:af:f5:d5:b7:8b:c5:cc:f3:a1:63:7a:2b:
                    0d:77:6d:83:37:f9:b3:47:66:7c:81:0e:8c:74:0a:
                    32:8b:d1:ea:5b:9b:7f:02:11:65:33:9b:6f:01:29:
                    a7:43:1f:87:3b:01:60:a6:c6:f9:b6:47:2b:73:0e:
                    b0:1a:ae:ae:fb:40:1c:b7:3e:d4:b5:40:b5:f1:e1:
                    08:2f:55:82:64:09:34:53:43:c3:8b:29:e7:ce:dd:
                    9f:80:62:69:ad:0d:23:00:32:33:f0:a3:d1:e3:6a:
                    7a:3f:e8:87:f0:89:70:8c:18:cc:03:27:13:4c:bc:
                    5a:31:4b:68:19:25:18:68:07:17:5a:0e:d9:1f:b7:
                    a2:e3:20:8d:fb:3b:68:79:6e:0b:00:21:c8:cf:9e:
                    03:a8:1c:44:bb:cd:9f:96:34:b4:83:a4:53:b8:30:
                    e4:b8:53:4d:5e:8c:a1:13:42:df:88:2a:d2:bb:f9:
                    9d:52:f2:9b:ce:17:23:6f:90:a7:1b:6c:f0:81:7a:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:B8:7B:1E:7D:F9:3C:85:54:3A:90:17:DA:C6:78:9B:F6:0B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0401ea78-602d-3cde-b3e2-575c0280c0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:b4:d7:de:dd:93:e1:ba:26:ec:57:35:03:ad:87:f6:f0:
         25:e0:71:95:9c:fe:19:09:87:e8:1a:14:4d:16:e3:15:5b:08:
         f5:81:c2:fe:f1:3e:ae:c3:26:3d:c0:a5:17:fc:f3:0d:ba:57:
         2d:db:d4:14:11:ac:09:f7:f9:0e:08:72:31:0e:78:42:45:af:
         29:17:ab:5f:ef:cd:1f:06:9c:bb:95:e2:e6:2c:60:c0:bc:8a:
         3b:c7:5a:95:42:f1:97:3b:12:18:86:5b:11:1c:04:37:00:8f:
         e5:6e:f0:88:8b:e5:ee:d8:ca:3f:9b:a2:62:a2:b1:69:7c:55:
         30:40:8c:eb:f9:bb:08:e0:fb:bc:e4:75:42:ec:2a:46:f3:79:
         77:b8:a4:0c:bd:a8:e3:d9:8a:12:d9:e6:1a:5c:5d:c9:55:72:
         93:4b:64:ff:51:13:3a:87:d4:78:55:69:81:f3:5e:8a:61:6e:
         55:8d:b0:29:c0:a2:e2:80:66:5e:ab:be:a4:e7:eb:e9:fe:17:
         99:e3:62:fe:60:12:55:f4:07:31:22:4e:44:10:cf:74:d4:76:
         f4:2a:86:2f:8b:30:f2:9f:0c:f5:02:c9:c3:52:72:db:93:3c:
         7b:05:15:07:a5:90:cc:62:c7:02:6b:06:a7:7b:ac:34:55:34:
         cf:a6:49:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:07:37 2026 by rpki-client