Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fc193ee-2b5e-33b0-a6bd-d30955533771.roa
File:                     0fc193ee-2b5e-33b0-a6bd-d30955533771.roa (raw, json)
Hash identifier:          1MMD4Mo/3m7Ac8KTfM8WETuPkkFGC0gbDsomb6XEWbI=
Subject key identifier:   81:1D:6A:17:2C:07:CF:4F:80:19:3C:20:73:1C:CD:B1:9F:94:E1:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6EF2494F7E27687D9E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fc193ee-2b5e-33b0-a6bd-d30955533771.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        98.45.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:ef:24:94:f7:e2:76:87:d9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=fc7a9db1-dd14-48e3-92a9-dca586877e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:f5:96:03:a4:84:da:e6:be:d4:dc:3a:25:
                    00:07:63:a6:25:e6:57:e4:65:99:58:90:3a:d0:40:
                    03:3d:82:38:46:7f:0d:60:e0:62:c4:ba:d0:d6:fd:
                    32:8c:4b:55:b3:27:0b:77:67:57:d4:b2:55:30:05:
                    9b:92:05:cf:9a:5b:de:7f:09:ac:10:72:08:3f:ec:
                    43:22:6b:bb:47:8b:a6:34:be:c9:95:f2:31:b0:a0:
                    ec:a6:73:5a:ee:64:3d:1b:f1:e0:bd:4e:b0:3e:75:
                    e6:20:e2:ed:12:4b:ae:57:9e:73:44:d9:ca:26:37:
                    e2:31:67:e6:e2:02:74:7b:2a:45:ca:a4:15:b6:b0:
                    d5:1f:0c:ff:ef:a2:b7:83:7c:94:e6:cb:8b:5c:44:
                    37:c2:89:d3:27:e4:b2:cf:eb:51:89:b0:c2:4d:7b:
                    21:34:1f:73:54:0a:b4:72:7f:b4:1b:c7:01:58:98:
                    d3:2d:90:a2:10:09:c1:e5:7c:b5:47:df:4d:27:64:
                    30:a2:07:98:32:ae:4e:fa:89:02:2e:85:5b:b5:a6:
                    b9:ad:82:b5:e1:84:ff:7c:dd:d0:2f:4b:84:dd:a5:
                    19:26:7f:7c:f4:d9:f6:d8:35:2c:e8:f5:8c:ad:b5:
                    1a:e9:ad:de:f1:40:0f:dc:3a:cd:88:44:aa:44:54:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1D:6A:17:2C:07:CF:4F:80:19:3C:20:73:1C:CD:B1:9F:94:E1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fc193ee-2b5e-33b0-a6bd-d30955533771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:40:55:a6:0d:da:98:d9:d0:5a:38:3f:35:b4:0e:ab:91:
         ce:b9:bc:0c:9e:9f:1e:a3:90:ef:b8:7d:be:0b:56:8e:e4:e2:
         b7:6e:eb:69:76:f5:85:74:de:83:01:09:75:2b:30:36:60:16:
         46:f8:53:19:b1:43:7b:82:43:b5:0c:2d:e8:ea:ce:62:be:13:
         e2:ea:7e:30:7b:68:8b:f1:df:9c:35:d7:51:13:59:7b:cf:31:
         e8:91:c8:eb:6b:58:06:b1:df:6e:af:44:a4:ce:5f:ae:45:38:
         95:3b:dc:fd:c2:5d:42:14:7c:cc:8c:9b:e0:f7:a8:84:09:4a:
         69:a9:54:58:c2:65:96:e9:e6:bb:7d:a1:11:5e:ca:e6:35:9a:
         e3:b3:05:14:a5:70:f7:23:48:5e:4d:23:1e:91:87:93:0f:bb:
         9c:be:66:6a:03:b4:8f:fb:41:3d:e3:90:ea:4e:e6:34:65:91:
         e4:78:63:c8:d2:7e:8e:4f:1f:c1:a5:c8:d0:32:98:e4:12:e3:
         76:72:79:12:34:98:24:84:33:f4:59:1e:95:64:91:17:f7:e1:
         83:69:1d:69:b6:8f:a5:e9:1a:42:f9:51:79:c7:ec:1e:ed:f2:
         4a:74:19:af:59:ad:1f:f7:a2:d7:05:65:5c:31:3e:7a:dc:15:
         fe:2e:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:13:35 2026 by rpki-client