Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa
File:                     4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa (raw, json)
Hash identifier:          6UBifqfzpDOdaD75rPN9TjoYsGBq5ZGqKKaVse7pNLc=
Subject key identifier:   20:1F:62:A5:62:48:03:8E:ED:14:91:A2:B2:11:B8:25:B4:09:A7:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B3C9AE66EC37DB8ACED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        98.227.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:3c:9a:e6:6e:c3:7d:b8:ac:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=69cafd7d-6d7e-48ee-aed0-a9d7a6aad823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:f7:3a:65:22:03:e4:31:c6:ce:4b:07:9b:
                    68:bf:ec:c6:0f:56:03:bb:3a:ae:80:7d:65:29:78:
                    c7:61:11:8a:96:06:66:fb:a7:31:c9:33:c3:e0:59:
                    79:e3:21:a8:75:8c:5b:19:7c:66:f2:90:97:1a:19:
                    4a:2c:e0:92:82:09:f5:9b:09:59:2d:9b:de:cf:4a:
                    e7:0e:7d:23:2b:db:ee:a6:96:e1:6b:6b:8e:b9:9e:
                    44:6c:61:fd:2c:78:1a:64:c7:dd:48:0c:7a:7e:5b:
                    dd:92:3e:7f:55:2d:0d:b1:af:c2:d5:34:19:c3:a5:
                    3e:3a:71:3f:1d:ec:15:c0:64:5e:8c:66:b7:e7:ca:
                    7e:de:ad:91:73:d9:ff:37:4b:68:0a:93:f2:cb:41:
                    82:2a:c0:b8:1f:c9:d5:bb:a7:1f:02:1c:8d:ad:09:
                    ac:c2:6e:af:70:1b:c9:e2:1e:ac:f4:c4:1f:ef:ae:
                    7a:37:31:2d:9a:7c:5a:eb:cf:1f:1c:83:1c:91:da:
                    2c:f2:54:1d:fd:8f:ce:29:e5:68:bb:af:fb:bf:17:
                    33:85:c5:a5:87:52:ce:5b:f6:42:1f:dd:8a:e6:44:
                    85:29:39:9c:b1:4b:64:52:d9:3b:7d:6f:d3:06:b7:
                    0c:4d:e2:3b:df:4a:fa:31:8a:1e:13:df:9f:b8:04:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:62:A5:62:48:03:8E:ED:14:91:A2:B2:11:B8:25:B4:09:A7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.227.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b9:11:c1:4b:33:92:78:a2:7b:8b:bf:98:d8:78:87:e5:ed:
         30:81:92:38:5c:b5:7b:01:25:3d:fc:6b:78:9d:80:1e:66:5f:
         57:37:fc:dd:c1:4f:e0:9d:b6:0f:7f:9a:b9:1c:2a:51:e3:36:
         c1:be:72:37:9d:82:82:d5:a4:53:53:88:a2:99:d5:d8:14:7e:
         12:76:cb:79:d3:9e:00:85:8d:de:8b:a1:a5:dc:3f:4e:71:b9:
         b5:d0:4d:02:74:22:17:0f:21:26:54:3b:29:ee:a6:e5:f2:1a:
         6e:42:85:e3:01:c2:22:63:ca:5d:74:94:1a:d7:8c:62:af:33:
         0d:7c:b0:bb:fe:da:cf:44:1e:cd:41:5a:f7:02:67:05:55:24:
         cc:63:a3:c6:11:e3:b5:2b:1e:5e:57:0b:99:fc:15:6b:1b:0a:
         47:94:72:df:19:e7:ef:5b:0e:28:e8:70:a3:6f:85:87:30:bc:
         f5:98:be:f6:bf:2c:09:21:d5:9d:84:c0:30:fd:91:35:5f:6c:
         6e:e6:f1:68:3e:a1:cf:1d:8a:3e:66:e5:64:52:90:b1:d4:99:
         99:e4:cf:21:40:29:5e:23:59:2e:a5:5f:6d:d8:22:f4:79:83:
         00:e1:dc:74:40:8c:bc:e8:72:9c:6f:db:fe:4f:5b:2d:4d:71:
         ec:cf:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:11:23 2026 by rpki-client