Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b97796-794c-3fee-b8f7-36a110897e30.roa
File:                     15b97796-794c-3fee-b8f7-36a110897e30.roa (raw, json)
Hash identifier:          sgKcZX1WfkAIqpnn0Fmh58BZ+xqPpXQVe5I3ziScLMw=
Subject key identifier:   7D:60:06:3B:1A:9D:95:9C:2E:33:A5:71:6F:F8:2C:7C:72:B0:6E:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E360002D9C445A094C09B0D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b97796-794c-3fee-b8f7-36a110897e30.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        98.224.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:02:d9:c4:45:a0:94:c0:9b:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=b3a26235-6234-405b-8fc7-392992ddfee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:c6:f2:cd:ec:cc:c1:4b:ee:82:4a:ec:e2:
                    54:56:8e:27:32:8a:19:a2:ef:2e:84:17:77:2f:fe:
                    c9:c1:df:1e:f2:a2:40:16:3a:d2:11:e0:a1:26:ab:
                    8e:4d:5c:d9:10:5d:ed:fd:c3:7d:39:7a:af:b2:48:
                    75:7a:0d:84:25:01:cd:8a:4d:86:5a:4d:82:33:75:
                    dc:9b:7c:59:13:b8:e4:18:b4:64:fa:80:72:b2:4a:
                    46:ac:f7:fe:34:a3:a1:67:97:09:ca:bf:11:d3:73:
                    18:8b:9c:e1:fa:31:61:43:bb:28:00:4c:c1:5d:80:
                    67:72:32:74:8f:98:26:ce:f3:da:f0:3c:03:21:d8:
                    dd:c0:72:a4:c9:e1:63:d3:33:90:f0:f2:99:ac:0d:
                    78:f0:29:b8:91:64:45:7b:ab:78:22:e6:85:52:a3:
                    c3:22:28:91:dd:35:c1:c5:30:a4:a9:e9:a0:f6:aa:
                    59:bf:40:f7:77:e9:93:4c:02:1a:e5:49:38:ba:97:
                    8b:d9:7f:f5:90:47:51:a2:0d:0c:7b:2d:bb:d9:c9:
                    2d:db:07:fb:f9:20:88:60:41:1b:c2:5b:35:7b:96:
                    d3:7b:22:a9:d8:f1:98:56:86:e6:ff:d1:7d:a1:91:
                    33:2b:fa:94:fe:56:65:0b:a4:c1:aa:83:ed:11:58:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:06:3B:1A:9D:95:9C:2E:33:A5:71:6F:F8:2C:7C:72:B0:6E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b97796-794c-3fee-b8f7-36a110897e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.224.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:21:c6:34:54:94:1c:62:0b:8d:d5:d6:a8:83:88:9e:77:74:
         ca:27:98:98:ce:95:84:2c:53:e6:8b:f5:ca:d0:0b:c3:87:94:
         87:4c:bf:fc:a4:26:67:72:cb:ae:a7:4d:74:6f:91:62:18:75:
         82:2c:2f:a9:64:ba:a0:0d:9f:8c:76:ca:16:98:00:10:bb:49:
         71:cc:e6:ea:ae:8b:30:b2:15:16:16:85:26:60:b0:6c:99:1e:
         45:cf:b3:5c:be:5c:a0:17:10:7d:92:ea:d3:9d:a9:3f:e9:19:
         c0:2f:f2:c6:d1:b4:87:64:af:d3:0b:2b:b9:a1:8b:30:84:c2:
         4b:b1:38:c0:7b:69:36:63:7c:d5:a7:78:90:f3:a5:6f:56:64:
         19:f4:03:b5:0a:07:c1:a5:83:fa:87:ef:ca:7e:a2:bc:61:b4:
         fa:85:8f:62:66:3c:9b:94:cc:a9:5e:c0:1e:03:8a:66:e0:3b:
         b6:fa:14:81:54:60:8b:af:67:a2:d5:a1:ef:62:9f:f3:c6:bc:
         ef:d4:83:bf:c0:2c:21:2e:56:f6:2a:80:af:37:23:16:20:d6:
         ad:e9:ea:5a:62:d2:76:78:34:f4:03:f0:37:c2:6a:6b:14:5a:
         e7:38:c9:96:10:24:b4:d8:b8:bb:7f:58:23:8c:0d:cc:5c:a2:
         96:34:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:27:38 2026 by rpki-client