Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d577-23d1-3700-98c8-440a6febdcce.roa
File:                     4323d577-23d1-3700-98c8-440a6febdcce.roa (raw, json)
Hash identifier:          IbBTR35iTg+4bJmQ7dXLgx7B+rDdi3hB/JKGFcynaw4=
Subject key identifier:   21:87:A6:33:01:05:CA:12:30:4F:5C:EC:67:32:ED:41:BB:75:64:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862D8F72D4A78103B436500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d577-23d1-3700-98c8-440a6febdcce.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        98.224.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:d8:f7:2d:4a:78:10:3b:43:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=26e9f5e4-66c8-4d56-aded-dda9f27eae8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:8e:05:f5:5e:a7:53:10:2f:7a:83:97:d7:
                    23:19:f3:14:1d:d0:ed:bc:b4:a6:9b:3a:71:d4:b9:
                    ba:33:1a:26:e5:da:14:77:29:5b:23:ed:ea:07:a4:
                    52:52:dd:ef:0f:d3:d4:d1:97:52:df:4f:27:cd:69:
                    3b:50:72:93:78:20:90:27:20:70:d7:0b:a0:b8:42:
                    fb:d9:ea:1e:9b:eb:41:85:79:2d:9f:e4:57:e5:aa:
                    bb:72:3f:11:d1:6e:17:c4:d3:a5:75:eb:53:18:a1:
                    9a:85:ef:42:95:be:20:0a:52:5c:2c:91:22:ff:a3:
                    06:66:fa:d4:14:b4:6b:fc:06:40:08:e8:75:47:38:
                    47:d8:a0:71:b7:60:09:4e:36:c2:98:7c:74:70:05:
                    83:55:67:2d:ef:b9:a6:79:8b:7a:b6:de:22:94:ad:
                    08:e9:8c:89:de:60:bb:8b:36:88:4d:25:40:61:f2:
                    e9:53:3e:84:11:1c:b2:78:31:bb:42:db:08:64:74:
                    c1:61:5e:9a:77:fb:78:2b:05:1e:d6:3b:d9:ad:40:
                    15:9a:2b:15:f1:c8:da:b2:e3:42:9e:79:e2:03:f1:
                    1c:30:94:88:11:55:55:b4:4e:07:b4:08:cc:87:05:
                    24:e7:2b:6c:0c:3f:35:c4:e7:ad:95:c1:72:fa:7d:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:87:A6:33:01:05:CA:12:30:4F:5C:EC:67:32:ED:41:BB:75:64:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d577-23d1-3700-98c8-440a6febdcce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.224.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:07:14:95:56:02:47:23:35:8b:e4:c5:d4:f1:d3:30:1a:
         52:ea:8d:91:9e:95:04:fd:59:81:3f:e9:2d:5c:1d:12:0b:a4:
         da:fd:56:3e:ce:7e:40:8e:c1:2a:7a:1d:5c:bc:14:98:d5:da:
         ea:e8:5f:bf:a5:12:0f:1c:2b:6f:09:1e:db:cf:e9:c5:ab:cc:
         ca:7d:1d:1d:ff:97:d7:83:8c:49:18:99:a7:af:fd:be:3a:54:
         82:43:f4:c3:55:b3:a5:07:19:b1:41:ae:db:fe:63:f2:5c:4e:
         86:32:bc:2b:ae:81:ae:a0:d0:e2:70:3a:b7:84:89:6c:30:e4:
         59:3e:19:b6:9c:92:32:1b:8c:3d:07:cd:5e:16:b2:d2:6f:86:
         ba:6b:30:55:98:59:6d:88:98:e1:46:48:a6:74:e1:30:8f:0a:
         dd:5b:62:26:9b:bd:4b:4f:42:4e:65:65:35:f6:7b:7f:8f:5c:
         36:bf:a3:68:42:a6:01:47:61:01:45:1e:ea:9f:c9:f1:47:1f:
         13:1c:b2:ba:51:df:e7:62:a4:6b:3c:3c:db:e3:99:12:2c:1f:
         0a:9d:39:d0:32:00:ba:7e:ad:c1:47:b0:5e:de:ca:f2:bc:90:
         eb:af:8a:30:cb:c4:20:77:ce:90:4d:80:6c:10:5e:82:65:bb:
         c8:4e:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:22:03 2026 by rpki-client