Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f4ef47e-a672-34f0-b522-badafa2cb064.roa
File:                     3f4ef47e-a672-34f0-b522-badafa2cb064.roa (raw, json)
Hash identifier:          PU0UMWOrvF3gdBJYW1lUEIbWtVoQsSAE8YLOSZZkAgU=
Subject key identifier:   47:A4:4D:94:FA:C9:88:B3:C5:31:16:B8:A7:29:18:FE:3B:A6:3A:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E614551BD8E019E5181C46A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f4ef47e-a672-34f0-b522-badafa2cb064.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        98.62.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:51:bd:8e:01:9e:51:81:c4:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=0edff3f6-9a2e-4c8c-b97d-816799691e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:93:a9:e1:48:fb:a8:83:68:2c:f2:1f:68:
                    4e:f8:c4:d1:1e:1a:24:0a:04:a9:c4:56:6b:11:de:
                    4e:08:e9:4d:c4:37:68:8a:b8:23:94:db:41:4e:4f:
                    94:1b:b0:73:ef:9a:e1:30:c3:ca:5d:07:49:99:e8:
                    c9:d8:36:a8:ba:3d:34:b9:ce:e2:1a:a4:e8:15:cc:
                    6e:20:24:1f:74:52:85:08:8d:4f:23:67:08:ea:c9:
                    b1:17:e1:77:bc:96:54:56:78:47:a3:69:f6:14:63:
                    be:ae:11:99:4f:32:9d:c3:98:9d:28:09:c3:c9:38:
                    af:89:db:06:31:94:0e:9f:ee:1d:d9:83:79:69:29:
                    14:73:1c:7f:36:31:99:e0:5f:eb:ac:01:f9:59:23:
                    94:9c:e9:b2:5b:5b:15:2e:13:32:a7:82:6b:3f:ea:
                    7c:9a:bf:57:99:39:97:4c:6e:bd:15:42:fb:de:75:
                    2d:e4:b2:81:71:0a:b8:ea:06:f9:bb:13:2f:ed:83:
                    f1:45:cf:7d:b4:27:f9:09:ad:8f:7a:08:b8:f7:a3:
                    eb:4b:d3:f0:79:bb:0e:ff:59:14:c9:72:5a:d0:6a:
                    6f:43:66:ee:d8:22:b6:22:1e:c0:d2:cf:81:9e:32:
                    53:12:98:3a:be:0c:e7:ea:a6:cc:34:e0:4f:a7:51:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:4D:94:FA:C9:88:B3:C5:31:16:B8:A7:29:18:FE:3B:A6:3A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f4ef47e-a672-34f0-b522-badafa2cb064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:eb:98:9d:b1:93:5c:96:60:de:0d:90:aa:b9:3d:cf:c5:
         de:e6:ff:e8:af:17:a9:05:b6:11:82:3c:96:91:e9:d6:ce:f1:
         f5:1d:db:40:07:a9:5e:88:fc:30:18:dc:a0:f5:ae:67:44:c2:
         0e:b0:e4:bf:41:52:9d:22:77:3a:15:65:cd:f7:bf:16:16:1a:
         f9:79:7f:9c:a2:d5:6a:24:73:0c:ef:d4:50:72:cd:61:d7:22:
         f9:a0:aa:e4:39:fb:ae:89:4b:54:98:3c:77:56:47:38:3f:c7:
         4a:23:82:b4:74:be:e4:40:d0:4f:2b:64:a9:02:d2:cc:8a:40:
         a5:0d:69:3b:28:da:f5:9b:33:fc:59:74:a4:ce:1d:96:ee:08:
         c0:fb:b8:67:0a:b5:3d:c4:b1:95:da:9c:84:f2:7b:db:5e:b0:
         5b:9d:d3:7b:77:31:dc:2a:5e:5d:e2:95:69:04:09:9a:d2:6c:
         6d:39:46:3a:12:74:0b:6d:17:41:3c:a2:7f:93:b0:8e:e7:2f:
         ac:24:da:70:c7:61:97:05:18:ae:e0:6a:e0:40:aa:70:fe:ec:
         a4:e4:ef:40:37:64:04:61:b6:07:6a:df:d4:e9:d1:99:8b:74:
         08:5a:e2:e6:8f:6a:26:04:e9:c2:8b:7a:bc:75:cc:b7:e8:98:
         c8:a8:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:31:38 2026 by rpki-client