Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/149c72c0-f49c-3d9a-864a-0689f380903b.roa
File:                     149c72c0-f49c-3d9a-864a-0689f380903b.roa (raw, json)
Hash identifier:          KNrTlMMZhhlhqqqCXybzIkNQurzXxbpee4RluEMwxPE=
Subject key identifier:   26:3C:4D:FC:2C:41:46:D1:1D:B6:C8:11:79:CE:1C:F9:02:F6:97:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E7DE37171584AB3700500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/149c72c0-f49c-3d9a-864a-0689f380903b.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        98.45.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:7d:e3:71:71:58:4a:b3:70:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=86762952-716e-441e-a003-bfaab701d356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:4e:47:e1:f5:46:20:2c:7c:5b:2f:64:60:
                    77:d6:7d:bd:94:52:ba:1e:59:a6:52:d1:f5:82:db:
                    5a:ea:78:39:5a:c2:72:00:9d:06:5a:c9:4d:52:66:
                    89:e7:de:dd:90:4d:a3:9b:9f:ec:d4:54:f1:6a:8d:
                    75:bf:cb:5e:c2:dd:85:63:c3:43:3d:86:78:ee:7d:
                    4e:83:83:2a:84:81:58:87:ce:61:ff:13:17:1e:26:
                    6a:81:70:60:4f:79:3f:c1:8c:5d:98:40:25:d2:7d:
                    02:c1:b2:be:0e:55:45:ea:58:ed:c4:fa:d6:ce:68:
                    09:49:29:9d:dc:e7:47:c2:86:14:12:66:44:6d:6d:
                    4e:9f:8d:19:06:66:bb:85:a4:b3:ff:0d:6f:c5:5e:
                    b0:54:3a:52:19:b1:64:0a:bf:f5:7c:e6:07:7d:5f:
                    6f:24:88:5d:3b:11:73:b2:20:07:14:86:02:33:40:
                    19:34:ef:8f:f2:e0:e0:fe:18:65:68:ab:75:e6:30:
                    aa:07:30:f4:99:37:34:3e:66:1a:45:d6:99:b2:79:
                    84:17:e4:65:94:1e:0c:1a:f1:d8:10:03:0f:f8:8c:
                    f4:ce:f1:1c:f1:5e:aa:af:93:62:66:32:00:4f:33:
                    6d:26:70:33:86:c6:fc:7d:8c:d7:68:e5:aa:54:c3:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3C:4D:FC:2C:41:46:D1:1D:B6:C8:11:79:CE:1C:F9:02:F6:97:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/149c72c0-f49c-3d9a-864a-0689f380903b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:49:7b:d3:62:78:08:a2:b6:52:a1:6e:9f:bc:2a:ca:c1:
         d7:d1:52:cc:d1:f7:f5:10:9f:d8:1f:55:b5:ec:fb:da:04:e3:
         40:82:2c:c4:85:dd:ec:d2:d6:30:02:32:f6:9f:94:6a:a7:80:
         d4:be:d2:73:2c:c7:fa:91:ad:56:f9:16:d9:69:8d:4e:6d:32:
         7e:44:7d:5e:21:1a:95:12:b3:45:8c:94:cd:6d:2e:e4:c1:08:
         ec:a4:d4:ed:81:1f:2a:a2:fa:48:b0:84:2a:c1:e3:43:45:3d:
         86:12:b6:28:79:de:b2:2d:84:4c:5e:f9:eb:e6:39:0d:2b:9f:
         cf:05:ab:fb:a9:61:ed:55:bb:13:98:2b:33:73:76:96:36:1d:
         e3:65:30:46:0e:31:dc:1b:70:77:c3:7d:97:a6:33:ee:57:23:
         81:12:b0:e6:37:08:f2:a9:55:89:dc:7e:9a:24:30:51:2b:b1:
         d1:f3:05:76:4f:f3:2f:2e:3b:47:f3:0f:c1:f1:d3:65:d8:be:
         a6:ae:7d:99:df:5c:34:d6:d3:27:7e:5a:1e:b5:a6:71:31:85:
         bb:ed:5d:e7:bd:9f:41:a8:45:2c:19:c7:cd:2a:15:ba:79:70:
         c7:1e:f4:f5:a8:83:92:eb:e7:d3:7b:50:82:7e:d7:9a:6e:a3:
         6a:30:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:24:18 2026 by rpki-client