Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248285-92aa-3521-a438-a0834dda9d09.roa
File:                     0c248285-92aa-3521-a438-a0834dda9d09.roa (raw, json)
Hash identifier:          xfavC1Ez3HEqGmQEb8mpMEGk6+zKg+87Yfou/A+HP/E=
Subject key identifier:   68:7F:9D:97:75:F7:84:29:1F:CB:EE:42:73:8A:94:4B:F6:C0:2F:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E0DB1D89834E2A30825C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248285-92aa-3521-a438-a0834dda9d09.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        98.212.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:0d:b1:d8:98:34:e2:a3:08:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5ed11d3b-5e1a-4a25-8057-72e3a218819f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:a7:f3:48:61:93:a1:af:9c:4c:b0:7c:e1:
                    19:0b:49:d9:a0:60:6f:99:28:33:71:21:73:72:59:
                    ec:0a:dd:d9:bf:0a:b0:4c:13:45:4d:f0:43:a7:af:
                    c4:17:c8:8b:54:8a:e6:ea:d2:21:58:bf:a6:76:50:
                    cc:8c:a3:a4:83:e3:d9:85:7d:62:ea:67:e5:7b:09:
                    13:8c:6f:3b:a7:05:5a:48:5d:61:b5:81:0d:a2:76:
                    da:5b:6f:af:69:b1:32:85:1d:a0:b8:86:e3:82:11:
                    55:a8:8d:35:70:c7:01:1c:d2:71:df:b8:8a:4f:f3:
                    e7:d2:d5:55:57:f4:cf:3f:7d:94:6d:53:c1:14:64:
                    cd:92:9c:7d:07:fb:a8:8a:dd:49:99:98:e1:50:95:
                    51:92:f4:29:39:6f:30:43:22:ad:53:be:4c:04:cf:
                    68:55:1e:5c:d9:93:50:21:95:86:c8:b9:f6:97:71:
                    f4:4b:45:a6:7b:d9:38:bc:dc:3b:b8:13:e4:de:70:
                    e8:a5:37:e9:79:50:cf:4b:de:e4:6c:0c:e4:dc:59:
                    ef:5c:06:21:36:3a:e4:db:5b:18:d6:4f:37:95:0b:
                    c5:b4:05:0f:31:75:cd:05:1d:66:e2:e6:a6:31:44:
                    15:d4:bf:b3:12:89:bf:b6:84:26:f1:6b:cc:6b:58:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7F:9D:97:75:F7:84:29:1F:CB:EE:42:73:8A:94:4B:F6:C0:2F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248285-92aa-3521-a438-a0834dda9d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.212.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:46:ce:74:24:bd:94:66:0c:b2:f9:30:92:d2:a8:71:e6:
         57:8d:66:d0:f7:13:be:b8:83:73:3f:c8:02:45:0a:1e:f6:c7:
         bb:61:d4:5a:1a:47:89:92:b1:62:9b:23:3d:67:dd:5f:0f:cc:
         07:d1:64:95:af:7d:9f:f0:e6:17:49:7f:6a:be:45:51:56:c1:
         65:35:73:e7:fd:32:05:c4:3f:98:a2:27:0c:6a:eb:f8:48:2c:
         7e:bc:cc:d2:73:52:3e:d4:61:7a:e2:80:b6:71:dc:f0:5f:86:
         c2:45:4f:c7:6e:0e:15:c3:96:14:8e:c7:33:f8:2b:61:17:04:
         41:09:2b:00:8d:47:8e:dd:2b:dd:8a:8f:2f:8c:f0:26:a1:8d:
         44:57:92:10:90:e5:41:fb:11:38:7d:5a:03:19:7a:03:02:67:
         af:7f:7b:84:52:4f:da:12:fa:69:00:1d:3a:a4:da:05:38:54:
         14:0a:2c:d7:d6:7f:5e:a2:23:70:6f:40:6c:36:28:ca:98:34:
         7c:d4:d8:a2:f2:c8:ec:23:f3:54:3e:b1:a8:a6:ba:b8:db:2b:
         a7:92:f0:0c:50:8a:5e:48:32:74:33:d4:b6:b1:9a:9c:ef:13:
         75:74:f7:ac:a6:0d:34:81:89:60:6a:3a:35:b7:18:c5:b3:0e:
         92:80:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:30:29 2026 by rpki-client