Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b874789-b192-3934-8bb7-f0e3ff3a9636.roa
File:                     1b874789-b192-3934-8bb7-f0e3ff3a9636.roa (raw, json)
Hash identifier:          pUccJzlEyshIj5+X2YcuKC3xf6dwmyiTXtkSwvbBM/4=
Subject key identifier:   94:07:2C:51:D1:68:20:B0:04:39:C3:E4:B0:9E:80:32:4A:29:83:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF50C652000BF6C10DBDE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b874789-b192-3934-8bb7-f0e3ff3a9636.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        98.246.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:50:c6:52:00:0b:f6:c1:0d:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=5472cd16-1633-4cbd-940d-172802417e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:46:06:bd:b5:ff:9d:15:f8:93:a0:fb:83:
                    a0:4d:e1:cf:83:5e:84:65:0f:b7:f7:23:41:33:a8:
                    80:96:67:10:7a:51:46:61:2f:5f:6f:6a:35:f5:f3:
                    99:25:4c:97:7f:b3:26:3f:cd:f8:fa:db:14:82:ca:
                    dc:7e:e0:1a:c7:b8:24:bc:0b:2a:e1:14:ea:ac:fc:
                    c2:ad:37:a6:c3:ad:b1:c8:c7:13:b2:85:d6:c9:60:
                    cb:34:7a:17:55:94:f5:38:31:62:4f:0b:f3:74:49:
                    e2:57:40:58:71:7c:1c:e1:f0:76:b0:1c:4a:60:1b:
                    47:22:73:94:3c:c2:24:2e:b1:3a:b3:b5:ad:65:cd:
                    dc:89:89:12:58:47:a6:8c:8e:95:5c:2d:e5:34:70:
                    d8:38:10:77:e2:c4:fd:b1:67:10:87:25:d7:79:7c:
                    5c:20:e3:8f:04:6f:7e:fb:22:17:d3:d9:85:d1:b4:
                    00:5e:d7:8e:23:d4:36:7a:f3:ba:4e:b8:45:25:5f:
                    4d:83:1c:2c:f1:c2:12:9c:51:c4:d5:20:d8:3c:40:
                    59:dc:6a:e1:71:38:aa:d9:32:eb:07:6f:f4:8c:bb:
                    aa:af:66:e8:72:8b:14:9e:44:0e:21:60:4d:12:57:
                    b7:2b:49:fb:bc:5d:df:cd:d0:0f:47:50:85:a7:91:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:07:2C:51:D1:68:20:B0:04:39:C3:E4:B0:9E:80:32:4A:29:83:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b874789-b192-3934-8bb7-f0e3ff3a9636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:08:51:c2:96:3a:4f:99:7e:cd:4b:de:4a:6f:cb:3f:99:
         c4:3e:8b:4b:73:eb:fb:21:da:66:8b:80:62:bd:38:f4:f0:ef:
         3e:95:29:98:1a:3d:df:37:50:0e:8d:63:57:cd:ff:ba:f4:05:
         73:13:52:9e:bd:75:97:fa:19:be:32:09:ff:14:ce:6d:5e:ad:
         e2:25:f0:45:d7:ac:62:18:99:2b:19:58:a9:ab:43:8a:ec:55:
         24:3c:b1:26:57:43:dd:cb:d8:65:d5:6a:b9:5b:e5:96:15:f0:
         b2:b9:3f:a0:7d:8e:30:31:3b:83:5a:4e:87:a3:f2:1b:77:c3:
         e9:81:db:a7:65:02:18:ec:b1:12:3d:47:c0:3a:cd:65:d3:86:
         c7:22:8a:17:8c:2c:e5:42:cc:b8:34:3a:42:36:6d:ed:4f:6e:
         bd:dc:c8:7c:ec:55:de:5f:30:5b:8e:48:82:95:b6:ff:4b:46:
         d6:03:1a:6d:36:bd:77:ec:b1:bf:db:87:c1:3b:ee:da:83:84:
         a3:11:12:c8:6d:48:f6:a2:83:1a:50:b7:8f:98:76:f6:7f:7f:
         bd:d3:4d:45:28:ca:e5:be:78:d2:db:a3:c4:c0:d8:53:23:c8:
         5b:fa:8f:11:c4:bf:6f:57:13:2d:b5:e3:b8:fb:9d:5d:62:da:
         e1:65:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:22 2026 by rpki-client