Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa
File:                     2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa (raw, json)
Hash identifier:          pcGTgdJBBog5Zqz2MFBKlZsMR31/1M8RicEjQcG3z6M=
Subject key identifier:   91:58:7A:14:2F:C0:60:66:08:74:A7:C7:C3:68:6F:5D:BB:C7:DD:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862DE9931308C0C6998F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        98.250.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:de:99:31:30:8c:0c:69:98:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=95e02fdf-f4b7-4132-8271-a37c03c8ad3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:3c:a2:59:62:bf:b6:74:b9:08:38:23:1f:
                    eb:23:8e:ee:6f:a8:e3:4c:df:3a:aa:da:e0:5e:90:
                    e1:13:fd:46:b9:91:c7:c4:30:75:52:13:28:64:a3:
                    e0:ae:54:58:1f:63:f1:19:2d:f4:85:9d:7a:72:0b:
                    9e:19:ea:9c:72:33:1b:87:c3:c0:2c:fd:61:4b:a5:
                    4a:b8:70:5a:e8:f7:1c:54:51:d3:10:ab:70:19:60:
                    43:d8:37:37:48:5c:55:c6:e8:43:99:98:cb:48:94:
                    23:59:16:6e:2b:da:bd:73:c0:9a:6b:b6:3a:03:35:
                    26:bd:a5:18:d9:7f:4e:cf:61:8e:88:4a:e0:7e:f5:
                    99:14:fc:45:11:d3:ef:60:8d:1c:7f:23:38:8b:40:
                    04:1b:5b:47:da:5b:cd:4a:64:a4:13:ce:ec:34:83:
                    fb:cb:23:ac:15:3b:a7:7c:ab:c7:88:c7:7d:0a:74:
                    fa:b7:93:72:d5:30:d4:f2:21:16:b9:77:94:06:47:
                    4d:1e:d8:23:7f:b5:19:10:52:ea:aa:ba:8d:34:7a:
                    c1:0b:7c:17:3b:0d:85:2f:c5:9a:86:66:8c:ed:ff:
                    39:ce:0c:57:53:9f:8d:ba:39:67:9e:45:10:71:7f:
                    51:0b:d4:66:fb:d1:cc:6b:40:ed:1e:01:77:dc:8c:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:7A:14:2F:C0:60:66:08:74:A7:C7:C3:68:6F:5D:BB:C7:DD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:41:6b:3d:25:a7:40:5f:55:8f:d2:2f:7e:08:e1:cb:15:7b:
         fb:bb:6e:6b:1e:7c:09:1a:d9:6b:0b:5f:b8:97:6a:71:72:b6:
         97:21:fa:00:7e:41:c1:c7:8c:2b:f7:f8:b7:0c:d4:28:da:dd:
         18:b6:7c:2f:61:d5:15:e6:b5:78:c1:c2:74:2d:78:cc:83:86:
         4b:9a:d3:50:23:40:5e:df:8d:fe:0a:b3:47:00:96:28:cb:54:
         e1:c8:07:f8:44:2f:f7:5c:b1:f8:be:ca:99:fd:70:f1:23:53:
         5f:5c:34:ec:af:61:6a:50:45:d4:3d:15:96:40:1a:cd:a7:ac:
         af:ea:32:7e:c7:2a:c7:ba:2b:77:85:ba:a7:43:f5:86:03:c5:
         2c:34:33:d8:87:d8:71:3a:6b:52:1b:14:9c:9d:5e:96:e3:b1:
         eb:26:94:36:99:9e:53:dd:2d:39:c3:67:86:6b:e2:c2:ca:3c:
         15:8f:24:d8:c9:32:15:95:36:dd:61:35:f0:c0:14:ac:72:49:
         59:c3:27:22:37:e0:43:b6:83:0d:cb:60:aa:2e:51:04:50:9a:
         7e:3f:74:74:0f:e0:01:67:83:62:97:89:27:27:45:19:22:26:
         a2:f6:4c:11:8b:17:e9:ad:79:a4:c8:78:41:46:3c:62:03:c1:
         28:a3:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:14:16 2026 by rpki-client