Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49daaef5-4658-3472-80c5-d285fea5e85d.roa
File:                     49daaef5-4658-3472-80c5-d285fea5e85d.roa (raw, json)
Hash identifier:          SwXSxqiPJAuC1UZTQpnfzChNcokA0OVtX/rmobT3ioA=
Subject key identifier:   A8:40:FD:DD:51:D7:F9:BA:CA:B1:27:5C:2A:99:85:39:24:B5:07:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36003CF590EAF13947280620
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49daaef5-4658-3472-80c5-d285fea5e85d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        98.199.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:3c:f5:90:ea:f1:39:47:28:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=cfedd509-5870-4451-ba4c-23b67ed4c682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:94:8a:e8:ef:8a:a2:81:df:d9:6d:e3:24:
                    64:2c:f6:ba:15:2b:92:f1:2f:76:6f:b2:97:26:ff:
                    3f:80:ec:7f:b7:81:10:c2:7b:84:97:90:3a:7e:33:
                    8e:0f:9c:6d:24:80:f1:b7:e7:51:0e:18:a2:57:85:
                    36:43:ed:52:c0:2b:ed:63:f0:35:63:5d:39:7f:b0:
                    09:82:e4:80:4e:9a:47:f0:cd:62:04:40:f2:0d:79:
                    bd:82:2d:bf:51:eb:6d:8e:3b:67:aa:a2:ae:e0:e1:
                    b6:7b:b3:b1:9c:e6:44:cc:3a:f0:3c:1b:bc:66:28:
                    88:70:66:ac:a2:8e:c6:03:db:a9:ce:52:82:80:5c:
                    11:54:ee:f9:48:55:41:25:f4:71:19:d2:11:8d:cb:
                    72:2c:ec:3c:17:00:82:65:74:e9:3e:86:44:d2:f1:
                    e1:64:01:4b:61:c5:27:c8:9c:e2:8f:5e:c2:fb:85:
                    22:6b:dc:cb:ec:9c:97:81:e3:10:4f:06:be:57:ab:
                    09:3b:41:94:65:ea:67:44:fd:a1:8d:ff:fc:13:e5:
                    03:50:ca:f5:08:be:e6:2d:e2:11:ca:ee:26:2e:7f:
                    fd:49:8c:a0:a1:70:d3:38:45:c6:82:a4:f7:41:9e:
                    e5:e6:d4:51:a2:5b:20:dc:1e:10:05:35:4c:1d:0f:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:FD:DD:51:D7:F9:BA:CA:B1:27:5C:2A:99:85:39:24:B5:07:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49daaef5-4658-3472-80c5-d285fea5e85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:82:31:f5:f0:13:9b:f6:64:6e:4e:e5:cf:45:68:2f:de:1a:
         7a:9e:3e:a0:5d:8f:e8:f1:e5:3c:d8:4c:8e:a9:55:10:f9:af:
         46:85:d2:e9:74:86:0e:05:b4:8d:9b:10:5c:0e:5f:30:e2:c3:
         6e:ef:6d:b5:59:85:03:92:ee:4a:73:b9:05:c6:c0:60:76:b9:
         d5:12:80:50:20:12:6b:27:bd:ec:75:01:f2:8f:31:db:1d:85:
         4c:6b:de:db:c6:1a:52:7e:20:ef:c4:7c:42:dc:2a:0f:f5:1b:
         e2:6b:57:fd:b7:d1:e8:5e:2e:4e:11:6d:bb:ff:18:01:1b:20:
         9e:80:61:dc:b1:83:c7:d5:e3:e5:28:27:b4:1a:39:fd:02:5c:
         f8:73:e2:4b:c4:4d:74:b3:5a:eb:5e:5f:2f:c2:80:d8:70:72:
         31:cd:3f:3b:6a:cc:53:7d:d6:53:19:fd:9e:74:15:93:af:40:
         0f:b1:a7:fb:e7:0f:3f:f3:0c:46:09:3e:4c:13:bb:89:53:4d:
         a8:fe:29:3b:85:71:6d:16:80:2f:03:32:d9:76:95:d4:70:a2:
         bc:d6:c2:86:81:ca:ca:e7:96:e2:ba:5c:ce:e7:d6:a2:52:d7:
         ac:db:35:b1:e9:b2:98:15:ad:6a:74:44:63:70:17:04:70:27:
         a3:cb:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:40:26 2026 by rpki-client