Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d158a99-afb7-310d-8c28-89e043eef5c8.roa
File:                     2d158a99-afb7-310d-8c28-89e043eef5c8.roa (raw, json)
Hash identifier:          hTtKf/GSSWklKuFdsCOkjN1W//K/JsvsLopQclA3hHU=
Subject key identifier:   E5:F9:93:FA:31:0D:7F:4E:FC:AF:A7:88:65:18:A1:8B:38:A1:EE:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7E93EAA4741E1FCA9D700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d158a99-afb7-310d-8c28-89e043eef5c8.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     33490
IP address blocks:        98.246.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:e9:3e:aa:47:41:e1:fc:a9:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=b1827b90-a0d3-4275-b89b-98948660ac13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:b9:7f:78:83:e1:ab:59:b8:05:e7:74:5b:
                    7d:62:4d:fb:c6:a4:c6:05:13:da:01:e0:d7:14:54:
                    e9:4b:e5:da:b9:bd:7b:3b:32:2c:23:59:d7:f3:a0:
                    b8:6a:74:38:bd:da:a5:43:fa:2a:1e:43:6e:bc:d2:
                    e2:ee:ad:63:64:1f:0e:40:4b:ca:86:9d:17:c4:e3:
                    f4:6d:61:68:3d:76:eb:4e:f8:07:4a:fa:2c:80:3f:
                    50:dd:0b:35:28:d0:23:44:cc:ad:ea:b3:e5:53:4f:
                    f3:ca:55:ef:e9:a8:c0:5e:3f:fd:11:26:21:f1:e6:
                    01:ff:76:a3:df:96:56:e3:d6:61:75:08:2d:47:f6:
                    91:42:0a:74:c1:1e:76:e6:4c:d6:4d:02:ef:32:94:
                    a2:11:ad:90:e4:75:5a:d9:a8:7c:23:22:f3:6f:87:
                    4c:50:0f:4b:3f:d8:53:af:aa:fb:3f:ea:74:b7:5f:
                    51:f0:22:b9:d6:25:46:f7:55:e5:19:68:6d:f8:6b:
                    c3:0f:d3:e4:d0:fd:57:a5:2d:80:92:c4:2c:76:17:
                    c9:a1:2d:59:f9:54:0c:09:c9:d6:74:dc:9b:57:e8:
                    73:a8:6e:99:d0:c5:61:43:56:dd:14:e4:6c:5a:d8:
                    d5:e1:cd:2a:4e:d8:e3:52:1f:b4:cd:bf:09:01:76:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:93:FA:31:0D:7F:4E:FC:AF:A7:88:65:18:A1:8B:38:A1:EE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d158a99-afb7-310d-8c28-89e043eef5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:09:54:fa:2d:d2:ed:30:ae:13:e1:5b:1b:e8:10:21:f3:56:
         c0:20:e1:27:71:f3:66:48:e1:8a:b2:d1:f0:05:e9:c7:e9:19:
         62:e3:74:55:24:a2:db:fa:5b:8b:53:e5:6a:fb:b0:56:92:c4:
         de:91:d4:46:26:08:91:db:a3:0b:f4:f1:6d:d2:46:56:da:c6:
         0f:cc:39:2d:0b:8c:24:26:76:7e:77:ce:36:dd:36:3c:85:0f:
         af:a0:4c:63:3b:f8:b9:1e:e9:59:dc:56:0b:7c:1b:b7:96:26:
         54:c2:64:46:fb:1c:73:fc:cc:3a:29:9a:76:a0:90:dd:97:81:
         f2:a5:7e:cb:4f:6e:eb:9f:ca:06:f0:bb:56:69:d7:88:7c:1a:
         43:8d:26:d9:1a:41:b3:a8:8c:a4:75:9f:94:49:dc:dc:56:33:
         f6:57:8b:fc:04:35:a8:96:19:3b:0e:20:6e:98:12:4c:0e:55:
         33:b8:6a:69:8d:a7:2b:1f:fe:34:09:6a:23:d5:20:84:83:dd:
         9d:34:40:17:90:6c:ba:b0:94:98:ea:af:7a:a7:6a:2e:4d:49:
         0f:e5:a1:17:af:60:59:6b:8b:90:be:dc:25:3f:10:36:f7:37:
         da:64:8a:13:79:e5:2a:22:82:dd:98:20:5d:73:42:10:f5:e8:
         e9:03:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:06:53 2026 by rpki-client