Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f4d4c0c-2772-3040-9caa-d3177833b66f.roa
File:                     4f4d4c0c-2772-3040-9caa-d3177833b66f.roa (raw, json)
Hash identifier:          tfz/d6o2TmhbdoNWeVkaHguYERkkx2RJlcgvOxif/Xs=
Subject key identifier:   6A:88:E6:FA:52:BB:71:F2:C5:FB:DA:5E:14:F2:58:B3:E5:27:F5:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E8BEB2456F336B500EF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f4d4c0c-2772-3040-9caa-d3177833b66f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        98.209.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:8b:eb:24:56:f3:36:b5:00:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b05e92da-3564-4885-80fd-8c31643dee8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:cc:aa:91:fb:06:d2:e9:42:f3:d5:f7:69:
                    9c:fa:a9:88:04:80:ac:fe:68:18:62:f4:7c:74:49:
                    9b:54:1f:c8:e7:b2:92:a5:45:52:ee:75:87:2a:09:
                    eb:3c:b4:52:1b:61:dc:ae:4e:8e:9a:57:4a:ee:93:
                    b6:5c:2a:14:31:07:75:1f:7c:1c:7b:60:c0:d5:3b:
                    27:5a:75:69:3d:f0:12:c1:9d:8a:3c:84:e2:9d:30:
                    5a:0d:82:d5:3c:e4:2d:c9:b2:7a:30:1d:7c:41:9d:
                    29:26:2b:bd:8d:65:8a:0b:36:01:3f:ba:53:b6:b7:
                    f0:30:f5:e0:bc:2f:72:af:e6:10:2c:3d:d8:88:c5:
                    27:61:4c:27:13:3b:f9:2c:83:35:24:66:b7:e6:fa:
                    55:42:93:af:42:bc:d2:73:36:ed:9c:b6:cd:93:52:
                    2a:51:55:4f:85:87:2b:88:37:c3:2e:9c:c4:f1:07:
                    b7:d9:71:49:ac:e1:54:67:55:89:d7:5d:6a:6f:41:
                    16:87:40:fd:db:7a:cc:64:00:39:b6:ba:07:d1:75:
                    77:0b:0f:d2:4f:a3:cc:bc:98:3d:d4:0c:b4:ec:96:
                    6d:af:c6:36:9f:ce:c8:ca:f5:92:d0:f3:c6:1a:4e:
                    6c:dc:93:00:8d:03:ca:c8:2e:d9:5e:a6:7a:fe:24:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:88:E6:FA:52:BB:71:F2:C5:FB:DA:5E:14:F2:58:B3:E5:27:F5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f4d4c0c-2772-3040-9caa-d3177833b66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.209.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:24:30:d5:de:1d:b9:cc:df:c7:15:77:83:59:1b:f9:32:5d:
         79:8e:0c:1a:9e:a4:06:79:28:d0:89:fc:83:f4:a2:80:3b:cd:
         ae:6b:61:69:85:52:fa:52:26:cf:ad:09:e8:5b:4f:9a:fe:d1:
         ad:53:04:c6:6a:cf:62:e1:e7:cc:41:4a:23:2f:84:89:45:85:
         ca:bb:95:d0:9c:4b:6e:b4:b4:4d:b3:15:99:e9:68:85:16:61:
         78:81:75:7b:1e:8b:99:4f:65:5a:33:96:36:20:33:b5:2c:a6:
         f1:93:59:18:42:0b:91:53:9e:b7:6e:84:fa:4d:3f:4c:69:78:
         20:63:e7:b9:b0:44:f1:a9:20:16:0d:4a:59:0f:5f:a9:3c:af:
         de:48:d0:71:d4:27:8b:40:bd:78:9f:e1:d7:33:20:76:e1:24:
         87:c8:cc:b8:bd:58:d4:88:97:b2:12:91:1d:fe:de:39:0a:a0:
         27:b0:fa:a0:98:14:6b:36:f3:c9:32:59:db:0e:2a:f3:b1:1c:
         a4:84:55:22:52:51:42:df:eb:f4:c3:03:61:16:16:49:08:ba:
         e6:9e:dd:53:de:80:74:99:44:93:9b:e6:11:40:c0:f5:3c:a3:
         f5:c3:a5:fa:be:e9:13:5a:dc:0f:be:5b:41:4b:af:31:82:04:
         15:52:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:02:25 2026 by rpki-client