Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9342af-85e8-3028-b639-0f6a1e944901.roa
File:                     4b9342af-85e8-3028-b639-0f6a1e944901.roa (raw, json)
Hash identifier:          gvrithkxGgNPhS8NGFC11xMXjyROoBawsWPoKe6v2bU=
Subject key identifier:   8E:30:C0:16:4D:8B:3F:74:69:AE:01:0E:C2:A3:BF:53:C2:3D:EF:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FFF498BBE3113FEFDF3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9342af-85e8-3028-b639-0f6a1e944901.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.201.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:ff:49:8b:be:31:13:fe:fd:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=c7755c71-4274-4653-a870-4e020d2e5211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:9a:80:de:e6:22:d3:9e:2b:1f:c6:1b:72:
                    6a:b0:b3:6b:b2:c2:ca:58:f1:12:cf:47:b4:2a:1b:
                    7c:99:e2:58:82:b0:41:88:f6:22:55:9b:29:a7:08:
                    0b:64:b7:1b:2e:3b:86:7c:06:d4:05:81:57:18:1e:
                    1e:55:ce:fa:05:51:d1:3e:b0:41:01:93:58:2e:73:
                    3e:8e:50:59:4d:92:3e:45:ab:dd:7d:77:08:cd:63:
                    d7:9a:d3:3c:66:26:1a:41:0e:83:80:73:0b:b7:ef:
                    49:0f:89:c8:89:32:57:55:c4:5d:cc:7d:81:ee:b7:
                    4d:99:60:f1:1e:57:77:e3:dc:87:49:96:0b:55:1b:
                    e7:a3:f3:cf:96:cf:1b:fa:b2:ca:86:d1:7f:76:1b:
                    4c:8c:df:00:3a:fa:5f:f5:0f:b9:46:21:55:47:9d:
                    3f:1d:9b:82:79:dc:1e:95:2d:1b:57:a1:cc:bc:f1:
                    10:d5:ac:06:e0:93:90:21:e1:0f:c7:2a:00:ac:c4:
                    16:21:5e:23:78:72:9b:96:8c:a1:0f:91:e6:22:08:
                    58:06:d9:3c:8b:08:99:84:ce:3e:cd:34:31:a3:21:
                    89:91:d0:be:1f:61:9e:9f:68:e1:f4:10:f1:fa:c1:
                    60:d1:f5:f0:51:5f:e6:79:b3:3d:0c:1e:33:82:cf:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:30:C0:16:4D:8B:3F:74:69:AE:01:0E:C2:A3:BF:53:C2:3D:EF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9342af-85e8-3028-b639-0f6a1e944901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.201.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:19:7e:16:c4:9c:28:3f:c6:84:eb:27:0e:df:7e:30:78:86:
         37:71:bd:cf:92:9b:0c:0d:ac:56:24:53:17:ec:ad:a6:f8:db:
         0a:57:26:68:3c:2e:5f:d7:e9:f5:b7:8b:48:1e:31:b7:0d:d6:
         55:10:26:8c:70:10:31:9b:8d:12:74:b2:6c:26:33:23:1e:7c:
         55:33:b8:03:ef:49:22:c6:cc:6d:e1:76:c7:fd:96:e6:5d:78:
         e6:b1:43:aa:b9:30:c4:0f:79:9c:14:ba:ce:65:a3:60:df:fb:
         38:37:a7:74:6e:27:d8:fd:c7:da:90:e9:73:5a:b6:c4:ca:1e:
         c0:e2:fb:40:86:53:6d:20:c4:9c:c3:1c:89:bc:72:f4:02:70:
         47:c6:11:fa:3a:ab:fb:c6:78:cd:2f:f9:61:40:69:28:08:ee:
         82:83:1d:51:1d:40:91:84:2b:bc:9a:e1:dd:93:5e:4d:b0:41:
         58:e4:e0:36:96:3f:d8:9a:ff:e9:80:ca:c5:5f:97:32:97:9f:
         2d:e9:8d:7e:57:04:4a:81:ba:29:0f:60:46:55:0c:b8:2d:2e:
         99:71:db:eb:90:b0:b6:6c:2f:e6:75:8b:bf:e6:d9:03:ff:de:
         1f:ba:b8:0e:47:64:14:39:6f:90:9e:98:bb:e0:73:9c:58:50:
         39:46:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:20:20 2026 by rpki-client