Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28efdffc-693e-3c5f-900c-df2055ea3458.roa
File:                     28efdffc-693e-3c5f-900c-df2055ea3458.roa (raw, json)
Hash identifier:          7WS2GQge73HniRhHtIpJYzMIXTuCAeAscMdcUXaC2VM=
Subject key identifier:   BA:81:39:98:01:E2:60:76:84:FC:6F:CC:14:4D:D3:7F:B8:C4:4B:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED432227F522AFA19D494FE60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28efdffc-693e-3c5f-900c-df2055ea3458.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        98.54.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:22:7f:52:2a:fa:19:d4:94:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=19be89b7-c2c6-444a-9cf8-e67bf1631916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:7a:03:66:ed:b8:62:6a:8c:9b:2a:13:44:
                    06:57:24:e2:c7:4f:45:eb:24:5b:36:a5:90:7d:cd:
                    c0:d6:1d:88:53:8f:a5:46:ce:aa:b8:70:d5:7e:1a:
                    1c:5a:52:8a:01:30:9c:cc:87:89:6f:80:31:7d:24:
                    62:a1:f4:49:7c:10:1d:bf:36:e2:38:41:ed:fd:87:
                    0d:85:c8:c6:36:d7:e0:c8:b0:c3:93:84:15:d8:e3:
                    41:de:35:d0:d6:4c:ab:03:3b:37:8d:7e:b3:50:10:
                    7a:2b:20:29:64:ea:41:58:24:2e:0e:30:3e:91:33:
                    91:39:d9:73:bb:63:7f:8f:bc:f6:64:bf:aa:21:54:
                    08:e5:3f:55:2e:c3:81:eb:db:74:6a:a0:08:d0:86:
                    2b:9b:89:d9:83:34:33:81:41:6d:f1:01:99:f0:84:
                    18:86:91:8f:5d:48:bd:7a:2a:ba:8f:9a:c1:09:8d:
                    59:79:ab:17:6a:c4:dd:e5:0f:66:01:41:c4:36:41:
                    3c:68:33:eb:09:1c:30:41:92:79:6e:93:43:53:69:
                    69:d0:ca:5d:af:f7:27:c8:90:ad:9d:67:83:6e:be:
                    0f:47:bc:b4:5c:cb:c7:e4:c8:ff:15:79:76:21:cc:
                    c3:93:3f:13:1e:9f:8d:54:d4:97:5e:7a:fb:cd:6d:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:39:98:01:E2:60:76:84:FC:6F:CC:14:4D:D3:7F:B8:C4:4B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28efdffc-693e-3c5f-900c-df2055ea3458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:10:e5:f7:32:f1:90:f9:55:0e:44:bb:7c:80:cd:27:fc:68:
         16:b7:cf:2f:d6:38:cd:75:70:80:28:59:7d:4b:74:df:82:27:
         d2:38:7f:c7:ca:56:46:fd:2f:39:38:76:f5:dc:ff:86:e9:aa:
         44:39:fd:6e:28:35:2d:13:f0:b0:8f:d3:d7:b3:0c:22:1f:17:
         2d:c6:0a:2a:e0:8b:72:55:c8:3e:9d:dd:61:a5:61:a7:dd:6c:
         76:63:97:f8:93:6e:c4:32:57:8d:69:23:94:01:e3:3c:b2:4b:
         70:33:97:8e:d2:68:82:e9:41:5a:4e:9f:09:34:96:63:3e:d6:
         eb:cd:dd:41:4d:37:35:0c:95:a9:9d:ef:f0:21:dc:fc:7f:4d:
         8e:d0:9d:a2:31:a2:9b:0e:30:4f:41:f3:cb:5f:ab:10:21:3c:
         4a:5f:f0:be:cd:88:3e:5e:e4:f2:ff:c2:b5:01:4d:26:c4:a1:
         8d:b4:63:cf:49:58:de:23:9e:9d:b0:c8:c7:db:89:9d:4d:62:
         a3:4a:ae:3c:ff:65:54:89:93:8c:7e:9c:9b:64:07:b0:62:a8:
         7a:d6:53:aa:aa:7b:18:71:fa:0d:9a:de:46:63:9b:d3:32:4d:
         1e:bf:e8:df:5a:58:07:c3:ae:49:0f:b2:3b:8e:93:d3:c5:47:
         77:2c:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:00:01 2026 by rpki-client