Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eb69891-e9bb-34e8-8856-3bab03bb9d84.roa
File:                     1eb69891-e9bb-34e8-8856-3bab03bb9d84.roa (raw, json)
Hash identifier:          S96Xn+idays3d/uxTa8/40OYJo4RaKpo1hRgHhvIEyY=
Subject key identifier:   17:3B:C8:4A:CE:2C:B1:57:A0:B7:35:15:B7:87:77:BD:7A:E3:B2:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B35D1FD3BA9179F9E9880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eb69891-e9bb-34e8-8856-3bab03bb9d84.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        98.220.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:35:d1:fd:3b:a9:17:9f:9e:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=e54a70a3-e5f8-4f94-90b5-3994f00c54c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:de:e5:53:80:e1:82:4f:70:58:39:3a:0f:
                    89:2a:78:75:7c:b6:f4:75:20:ba:42:6a:84:6f:55:
                    67:d0:5a:03:ea:80:1f:85:de:5a:50:a5:64:a2:0e:
                    ca:28:9e:90:90:8f:05:35:39:cb:b2:77:ac:a9:60:
                    db:2a:e6:e9:0d:5f:d4:d0:44:13:22:a9:23:f8:c5:
                    e2:3d:9c:d5:f2:65:f3:98:53:91:1a:61:d0:2e:b3:
                    a9:41:12:37:16:ae:88:10:36:ce:fc:2e:e7:6d:38:
                    86:d3:0f:a3:22:51:71:55:16:fa:73:4f:15:39:66:
                    98:19:f1:45:f6:ce:4b:24:d2:25:da:3d:41:b4:b1:
                    87:d5:de:da:62:16:f3:5c:68:3e:1b:e9:dd:ed:0b:
                    81:e8:d5:d9:e6:94:80:54:de:44:cc:29:26:c7:a0:
                    11:8b:93:03:67:b4:92:42:08:85:62:bd:f7:43:ec:
                    20:a6:1b:05:4e:84:8c:44:a1:ce:8b:e0:05:99:ef:
                    0b:3f:d9:f5:0f:9b:9d:d4:b4:ca:d6:70:9b:3d:bd:
                    c7:74:d1:7d:05:a7:2f:ae:31:62:61:b7:ee:3f:df:
                    76:69:eb:40:19:3e:24:b1:c1:78:54:43:34:d6:4f:
                    97:61:0d:88:4c:d6:4c:48:38:92:31:47:60:d5:7e:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3B:C8:4A:CE:2C:B1:57:A0:B7:35:15:B7:87:77:BD:7A:E3:B2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eb69891-e9bb-34e8-8856-3bab03bb9d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.220.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:94:f5:05:07:9b:92:7e:99:68:9f:fe:0f:ce:af:36:41:ac:
         7f:40:7c:7b:c7:72:b3:40:44:7e:46:8b:ac:b7:ea:d4:8d:01:
         dd:0a:a6:bf:87:a3:5b:11:40:2e:82:34:c8:e0:f0:e6:ae:90:
         9b:5f:79:49:14:b7:89:8f:d9:ca:d6:54:04:68:b4:ae:57:6b:
         64:3b:13:29:54:ea:22:ad:12:fc:4d:b2:63:57:21:9f:de:b3:
         31:ba:fe:4a:06:8b:45:13:44:06:8b:c4:b6:01:67:66:19:14:
         3a:a4:c8:71:9e:1a:43:5b:e5:77:85:8d:1d:07:53:a2:d5:64:
         d7:f3:6f:7d:60:b8:0a:7a:e0:32:06:04:27:2e:8c:d8:e2:4e:
         db:4e:28:69:94:4a:43:0b:10:27:92:07:77:56:b2:ec:f1:2c:
         df:bd:90:4b:a8:2e:a1:7b:d9:dd:02:b3:cb:0d:51:f7:06:0a:
         6b:76:54:ba:f3:3a:e3:e9:c7:54:ec:f7:d0:e0:f5:55:b2:40:
         19:19:20:59:63:76:47:5e:ad:ce:1a:52:a8:df:9a:13:93:a5:
         ec:ef:1b:a8:76:7e:f1:7a:7a:67:b1:95:33:b8:05:9a:fb:95:
         3c:a0:a3:51:a9:27:7b:4e:7c:b5:b2:47:42:ca:96:a0:9e:a5:
         f5:fe:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:07:48 2026 by rpki-client