Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa
File:                     47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa (raw, json)
Hash identifier:          axYcJCVFCd+pxm4uZwHFUcRf+Sll76PoLaGLnHZJvQs=
Subject key identifier:   E0:E4:F8:9B:79:15:50:46:16:3D:09:83:75:0F:B5:5F:08:B5:01:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF806555C1643F9F1BEBCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        98.215.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:06:55:5c:16:43:f9:f1:be:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=cdd117e7-771c-4b15-8686-47b42679aa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:92:1c:5b:d2:0b:85:c2:43:be:a6:2f:f2:
                    82:79:76:18:d1:ae:47:31:fd:39:ed:a4:db:ff:f5:
                    06:5b:be:40:e5:a4:e9:2a:d5:b6:e1:69:bd:69:83:
                    10:d0:77:43:89:04:c0:12:e6:b3:ab:fa:bf:6d:64:
                    dd:4f:21:9b:5f:ce:83:3e:94:b3:b2:e0:19:d0:85:
                    05:0a:c9:97:02:c4:bd:a1:5f:8f:41:09:99:ca:91:
                    0d:80:25:c5:bb:44:0b:1f:07:db:dd:be:27:3a:ed:
                    2b:b1:6f:8b:ed:d3:02:2d:fa:e7:f6:2c:94:ef:9f:
                    f8:bd:b0:6a:1e:86:95:e6:e6:d1:89:97:33:9f:0d:
                    e6:b0:de:49:18:a4:40:c0:d0:c7:ab:bf:61:cd:20:
                    ec:bb:67:68:e6:63:14:d9:11:01:bd:b7:6e:ac:aa:
                    11:f2:ca:fa:ad:ef:22:6b:d1:1e:e3:85:e1:ec:c5:
                    4d:02:fd:ae:a0:3e:f3:b5:3b:b2:9a:81:e3:0f:ac:
                    9e:59:28:91:91:d2:57:ce:a5:0b:fc:99:f2:2a:c1:
                    6c:57:10:44:23:53:59:8a:3a:1c:8b:20:4a:84:9c:
                    3d:1e:cc:39:e5:23:3f:5f:3b:57:80:52:f3:cd:41:
                    f4:6a:37:33:8f:00:6f:6c:9f:e1:40:0d:e7:f4:c4:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:F8:9B:79:15:50:46:16:3D:09:83:75:0F:B5:5F:08:B5:01:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:41:9c:55:eb:85:cf:a8:ab:a8:28:3e:10:cb:24:3e:9f:51:
         1b:fc:3b:48:aa:ae:c7:99:cd:ff:23:11:a5:a5:6f:6c:1f:0f:
         bb:7b:55:34:a7:10:83:74:4b:9b:2a:7c:4b:31:a8:a9:2c:3c:
         76:d4:a8:74:c0:36:44:e0:fd:7b:8c:88:41:c4:54:46:9a:2b:
         21:59:87:29:16:75:aa:a6:1e:80:7c:3e:14:12:8b:74:1f:c8:
         63:7b:96:7c:6d:1e:1b:ad:be:aa:59:f1:8f:23:60:17:ad:2e:
         90:5f:63:06:05:b8:02:66:db:17:df:21:30:7a:f1:d2:cd:04:
         09:4d:90:e5:b8:8f:e0:28:aa:8d:eb:ac:e8:5c:9c:05:95:d9:
         8f:58:df:97:32:b6:bf:28:65:d7:79:77:91:ea:53:bf:6b:0b:
         3a:4d:d5:28:e7:be:f0:e7:9b:8c:58:65:bb:f9:06:88:8d:e4:
         30:f7:7e:63:c7:bf:f1:c8:4f:05:ca:9e:b6:22:e5:12:94:ff:
         63:0e:5f:ff:29:3c:18:ae:f7:34:96:78:0c:4d:32:aa:ae:46:
         d6:8d:77:5f:91:b1:8e:2a:8f:ac:8f:60:06:ed:be:4a:96:af:
         9b:b0:e5:ab:c9:19:1f:fa:5c:d9:ad:e2:88:ab:81:41:5e:b9:
         a4:5f:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:21:20 2026 by rpki-client