Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ec2267e-1c82-37bf-bfe2-e05a5b9767f1.roa
File:                     3ec2267e-1c82-37bf-bfe2-e05a5b9767f1.roa (raw, json)
Hash identifier:          WKHVZIVo+YnVQ2gI67X1UOOt6Al06B+RlliRRyycRPg=
Subject key identifier:   03:A2:9D:73:1E:6A:83:82:D0:4E:5E:2A:21:AD:C6:3E:2F:C2:02:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BAADE17CC37BCF9CF3400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ec2267e-1c82-37bf-bfe2-e05a5b9767f1.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        98.202.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:aa:de:17:cc:37:bc:f9:cf:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=3b506714-266b-4cf4-a5dc-5b8f51b30e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:f0:ba:91:f5:98:4b:0a:4b:ea:3b:46:4f:
                    8d:4f:26:8f:c9:ab:d5:84:1c:2d:c9:b5:ae:44:8f:
                    0b:3a:d9:bf:a9:9c:b7:ed:86:81:0e:8a:2b:c3:d7:
                    9c:4d:92:5d:eb:55:93:bb:43:7f:3d:a0:6a:88:83:
                    59:8f:12:7e:1a:10:f3:a8:31:56:8c:64:20:55:7a:
                    74:a1:68:2c:f8:a8:c1:a0:99:77:07:b0:2e:f1:d0:
                    c1:1b:de:b4:a3:08:2b:98:b4:fc:7c:3c:6e:79:0c:
                    28:f9:97:88:77:25:83:26:b0:57:ad:1e:26:c1:04:
                    0a:0c:b6:fe:52:ca:63:ff:e5:42:bb:4b:eb:f2:8c:
                    a5:df:b6:64:dd:e0:77:9f:59:81:f6:de:5d:57:67:
                    2c:53:5f:08:a0:28:9b:2d:3b:20:6f:e9:10:5f:d0:
                    a6:ae:7c:2e:5b:38:90:ec:88:35:38:e4:8c:5b:ac:
                    e2:61:9e:ba:a2:11:d5:27:09:7b:d0:e7:c9:41:11:
                    63:c2:00:86:42:98:fa:61:36:2c:61:bd:39:15:54:
                    c6:72:e6:cb:a6:f1:a1:32:61:38:4a:20:c7:ab:58:
                    1c:0b:15:4d:a7:7b:ec:17:41:2d:38:72:eb:ec:6e:
                    e1:1c:34:45:e3:7d:d2:86:ac:3c:e1:b3:a8:c6:3c:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:9D:73:1E:6A:83:82:D0:4E:5E:2A:21:AD:C6:3E:2F:C2:02:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ec2267e-1c82-37bf-bfe2-e05a5b9767f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:8c:f2:4b:50:a3:48:f6:b0:bf:f1:36:eb:d1:ad:ee:6f:
         83:dc:c3:26:93:d1:4b:5c:f4:a8:7f:1b:9a:9d:14:d9:61:f1:
         a4:72:b8:e7:c6:d5:92:b6:49:d3:3a:50:36:12:23:a4:24:ce:
         ff:b6:bd:25:1e:69:c2:4d:31:ba:bb:94:ff:9d:58:79:d5:4a:
         17:ce:02:c1:5f:40:47:ae:05:c6:7d:f2:7c:1f:ea:b5:29:7e:
         97:ac:19:cc:e4:43:ee:62:31:18:06:c5:45:ff:de:0b:7a:70:
         00:0b:56:76:f5:d4:f5:57:49:d2:49:b5:30:f4:55:63:bb:11:
         f2:9a:77:0d:d3:4a:8b:59:16:42:c0:af:e0:d5:cc:9b:97:34:
         ad:a5:3a:75:c0:ef:fb:9f:ab:ec:7a:6b:5b:ff:d8:21:6f:53:
         56:8b:e7:90:e0:94:37:95:ff:ac:b7:f1:36:80:cc:02:09:e4:
         ad:27:37:68:8d:7c:e6:61:34:39:aa:5d:f8:02:d7:c5:00:01:
         ce:85:65:44:2a:ca:49:e6:2b:8e:f8:a3:74:e8:c9:82:7a:0b:
         92:13:d8:b7:55:64:be:d3:dd:9d:45:bb:2d:75:7a:1b:0e:ed:
         c1:8e:43:e2:8b:74:fe:b3:fe:8e:d8:b0:d2:a5:1c:f0:7c:9b:
         21:c4:61:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:55:12 2026 by rpki-client