Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a5692e-142c-39c2-b527-e26b329c65ce.roa
File:                     43a5692e-142c-39c2-b527-e26b329c65ce.roa (raw, json)
Hash identifier:          gCirwG4OMaJZRnyg2tSzQrW818+fws0pYoOVnQRWxiU=
Subject key identifier:   F2:08:F9:32:9B:34:CC:4F:3A:93:80:4E:F7:E1:58:A7:9C:96:16:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E8AC625CE7D1C849E1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a5692e-142c-39c2-b527-e26b329c65ce.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        98.47.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:8a:c6:25:ce:7d:1c:84:9e:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=52b262e4-64cc-4706-a981-4f84ad7ca4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:c5:c2:e2:f5:ef:9f:f0:60:df:a5:14:0d:
                    c7:eb:71:92:3e:16:47:49:64:25:30:84:d8:e9:6f:
                    78:ab:5d:7f:19:b5:6e:67:f4:20:13:b2:be:1a:41:
                    42:22:1a:1c:aa:5d:1d:53:3e:53:d2:2f:11:72:28:
                    c7:8f:ba:2e:91:06:c3:64:45:02:00:1a:82:3d:d5:
                    b8:cd:59:85:88:aa:06:0d:fb:ba:c4:90:09:a8:65:
                    03:32:7e:c1:1a:b6:38:bd:a8:5e:14:63:8b:f4:87:
                    ac:a3:4f:67:67:1e:78:f7:cf:9f:06:1c:77:10:6c:
                    c7:de:1f:0e:1f:5b:24:d9:b8:40:6d:da:a4:8e:5b:
                    22:3c:5d:ae:a8:6d:26:d8:e2:2f:58:84:9d:40:6a:
                    c4:1c:c7:c2:59:9b:c6:97:02:7b:50:84:63:10:f8:
                    38:c7:73:68:71:f0:46:c0:97:96:aa:1a:1d:39:0c:
                    44:f3:0c:3b:9c:05:9c:78:90:c5:48:cc:88:07:8a:
                    d8:18:d1:27:26:d9:1a:20:36:4a:44:17:9c:63:c0:
                    01:66:06:75:aa:e2:80:80:a7:11:30:98:46:3e:33:
                    ec:ab:0a:f3:99:92:e0:b8:c0:98:92:fb:64:0c:ce:
                    e3:4c:3e:ff:e8:61:a0:07:a0:2f:45:4f:0f:88:22:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:08:F9:32:9B:34:CC:4F:3A:93:80:4E:F7:E1:58:A7:9C:96:16:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a5692e-142c-39c2-b527-e26b329c65ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:08:66:7e:72:ce:c3:e5:9b:b2:11:f4:59:80:95:03:59:cd:
         12:1b:38:d6:47:06:ee:6d:4d:69:98:fe:1d:7f:73:fe:c8:a4:
         fa:36:75:81:3a:a2:32:94:4d:31:c1:b4:39:74:2b:8a:da:22:
         a7:68:78:5d:de:c2:ad:f7:6e:13:32:cd:1c:41:4b:7a:ea:fe:
         b8:3c:c5:67:4f:3b:08:ec:8d:39:ad:11:c4:27:36:db:8b:ff:
         5c:74:e8:8a:70:a9:9a:76:b5:09:d4:2f:ad:14:d5:f8:df:14:
         6b:7b:ba:1e:62:4f:40:d2:88:7b:9f:e2:76:7d:9f:34:16:39:
         2c:0f:e5:d5:a3:fb:90:73:3a:f7:5f:d2:22:35:9a:00:8e:ae:
         8a:14:b7:0f:e2:5a:4b:2a:f9:be:e8:5b:e8:ab:d2:30:ee:05:
         31:08:ec:ba:d8:73:5a:63:c7:99:f1:e3:5f:81:79:76:2e:da:
         c3:06:ee:ca:2a:e2:89:d9:75:83:cf:57:7c:f2:e6:b8:e8:17:
         18:59:d1:81:e3:cb:20:52:3e:11:5f:93:21:31:90:25:19:3d:
         35:2f:96:a3:34:7a:59:c6:6c:b4:29:c3:dd:7e:2d:a3:c5:da:
         10:30:ba:32:0e:a5:da:1b:6b:85:b3:8a:92:55:8c:07:b7:7d:
         4e:d1:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:47 2026 by rpki-client