Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/124dcc24-0d22-36f9-8392-d55a9a4a7fee.roa
File:                     124dcc24-0d22-36f9-8392-d55a9a4a7fee.roa (raw, json)
Hash identifier:          ViRaXdqUT4Q5heRqZh1RytzPGMNBfbWmoxlV69CpGOI=
Subject key identifier:   9E:A0:E9:81:97:4B:15:13:FB:8E:1C:AF:41:FF:55:E0:B6:F9:6D:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8634D0EC9B142A191CFD540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/124dcc24-0d22-36f9-8392-d55a9a4a7fee.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        98.246.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:4d:0e:c9:b1:42:a1:91:cf:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3d04e82e-b50d-431f-b282-4447c537af51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:3b:44:0d:26:a6:d4:cd:38:f2:7c:fd:35:
                    2a:72:39:d3:6a:a5:4c:28:b5:fb:e7:02:7c:5b:c0:
                    d7:81:76:24:94:bf:70:f5:0e:6b:56:2f:86:a5:10:
                    65:cd:2c:1d:1a:f4:a9:35:e4:d9:8e:38:10:52:a2:
                    10:8c:3a:e4:e7:9d:10:73:9a:de:63:59:7c:d2:2f:
                    eb:4f:89:a2:3c:a3:11:51:b0:b3:7c:29:10:33:81:
                    f5:a6:d5:7d:07:74:d6:3b:15:91:f9:10:56:1a:96:
                    02:6c:1b:2f:2c:88:da:51:75:7f:ba:42:f7:9a:45:
                    bf:7e:b5:da:a9:b4:e0:cd:78:b2:86:50:13:de:36:
                    ce:2b:bb:c8:79:65:38:3e:2f:70:39:20:94:86:26:
                    ac:4b:09:da:35:1e:ee:a2:c7:60:45:94:b5:c7:58:
                    a2:fa:8f:25:11:b6:e4:48:19:0b:57:4f:98:f8:de:
                    e0:99:3d:ba:bd:3c:59:9f:9f:8e:d5:ff:7c:17:6c:
                    6d:f4:2b:ad:24:85:c0:f6:42:ff:88:af:50:7a:3a:
                    fa:09:49:ad:fd:fe:d0:2b:01:7e:89:fd:f4:a0:58:
                    14:90:f6:31:4b:bf:00:31:a7:2c:24:4b:99:c6:48:
                    bc:57:e3:d0:9e:6f:bd:60:8d:90:bc:26:4e:d9:1c:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A0:E9:81:97:4B:15:13:FB:8E:1C:AF:41:FF:55:E0:B6:F9:6D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/124dcc24-0d22-36f9-8392-d55a9a4a7fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:24:bf:c7:0f:5c:02:64:6c:52:fc:4b:93:36:94:5e:9f:
         7a:26:b1:b5:d0:f2:42:d6:d3:0a:20:ee:b5:35:ba:2a:16:ec:
         64:bb:d3:75:6f:ee:a9:61:a1:e4:a7:e2:d7:76:08:98:6c:ef:
         77:84:dc:29:39:3e:5b:54:1c:54:56:dd:b8:7b:23:c9:98:60:
         80:7e:b8:da:18:73:46:23:e3:90:13:87:d2:2a:3b:a3:88:a2:
         60:50:0b:38:12:46:05:a1:3d:cd:d3:e2:ae:33:d2:ca:2e:84:
         a2:4f:cb:f8:f8:d7:60:33:26:ff:9a:1f:7e:3d:b0:1b:87:06:
         6d:1f:a1:84:b0:34:84:fe:e3:62:39:64:c7:8b:c2:bb:16:7f:
         67:a8:cd:5c:95:96:f2:ac:f1:13:48:ec:3d:47:78:83:ba:ba:
         c2:f4:1e:2c:3d:59:b1:44:a0:1c:f3:cf:e6:86:7e:3c:81:ec:
         2c:0d:d7:0d:2a:a5:66:53:f4:65:38:82:b1:a3:0d:52:5a:c6:
         94:89:6a:38:42:e6:a9:34:47:91:3f:fc:eb:f1:49:55:ba:c5:
         ef:b2:0a:65:8d:e1:85:04:fe:04:83:5e:87:b3:68:9c:cb:db:
         8f:33:a0:0b:25:89:7a:b6:03:95:9a:fe:94:b0:49:5f:64:b4:
         d7:39:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:28:45 2026 by rpki-client