Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5982747d-efb7-3624-a9c8-a1ab4653369f.roa
File:                     5982747d-efb7-3624-a9c8-a1ab4653369f.roa (raw, json)
Hash identifier:          I7dQOhpq494cBQME9FWWWNp8dmxPPp3JyV2MSOfSVDk=
Subject key identifier:   47:EE:D8:0F:91:29:F0:15:11:B7:96:4D:44:88:8F:03:E5:30:4A:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B319A1BF236F651F2D540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5982747d-efb7-3624-a9c8-a1ab4653369f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        98.206.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:31:9a:1b:f2:36:f6:51:f2:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=6660d2ee-6876-4997-8f8b-7a89f6735822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:8c:a7:84:f5:86:6d:16:23:ed:b4:80:0a:
                    bc:4f:3d:f1:08:28:36:cf:09:77:9d:e0:81:80:01:
                    a7:d6:98:da:7a:ac:2b:8c:7f:1a:db:00:c0:fa:50:
                    f3:c5:ce:c7:b2:cf:07:b4:55:22:96:d9:13:ef:c2:
                    c8:37:d0:bb:d3:18:75:92:7f:99:81:c3:f3:12:f9:
                    0a:c0:50:d2:98:1c:da:48:bf:71:78:df:34:5a:2a:
                    aa:25:e4:0b:d9:57:c5:64:9a:27:73:02:da:6d:16:
                    02:cb:07:ef:70:6a:67:e2:1d:41:b7:84:ba:5a:0f:
                    5c:53:60:8c:d8:b1:12:e9:b2:98:81:e1:23:82:14:
                    59:10:6f:27:a9:27:81:f7:ae:17:7b:96:c5:d9:3c:
                    95:de:2c:3c:00:5d:4e:47:a7:21:d9:20:b6:0c:82:
                    9a:85:24:c1:3b:2e:02:f6:be:b3:4d:a4:e4:70:6b:
                    fd:9b:71:12:b1:76:43:51:45:b5:ae:55:92:a4:d5:
                    36:30:4d:33:55:27:4a:fb:fe:0e:39:e1:8c:57:7d:
                    9b:e9:a2:35:a0:38:b0:2f:48:87:b8:a9:58:a2:f1:
                    1b:e6:42:14:2f:78:a7:2c:a6:73:f4:74:0b:41:5b:
                    23:b1:8b:ef:de:c2:ce:82:b0:d4:97:3d:0e:3b:1b:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:D8:0F:91:29:F0:15:11:B7:96:4D:44:88:8F:03:E5:30:4A:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5982747d-efb7-3624-a9c8-a1ab4653369f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.206.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:84:84:b9:7a:a7:50:c1:65:a1:1e:29:ff:58:50:7b:8a:
         02:76:16:38:ca:9c:cb:e9:f9:41:11:d8:20:76:6f:bc:aa:2c:
         da:41:d9:1b:ab:09:f3:50:e1:fc:e5:a3:31:64:9d:07:8d:b8:
         10:df:3d:34:84:bb:89:e3:35:09:e3:49:e8:0b:b7:67:90:6c:
         53:d1:b1:39:f0:e5:1f:d5:6e:bb:1d:24:49:3c:a0:2e:9e:f1:
         35:50:86:65:04:6c:db:32:2f:f7:94:95:05:d9:36:6c:b6:69:
         f0:eb:29:4f:75:ae:62:13:e6:69:c6:0a:5d:f7:89:fd:0a:68:
         7b:af:cd:ce:83:c3:18:61:1a:ae:d3:f3:40:33:e4:f2:40:94:
         8d:f1:5d:4a:12:9f:f9:1b:f1:af:f6:5e:28:e7:dc:24:95:34:
         69:d0:bc:fc:9f:3c:be:db:00:b2:3d:23:17:2a:b2:4e:b7:aa:
         a8:fa:b6:33:f2:c5:d1:ec:25:09:28:68:a9:b6:8c:d6:84:34:
         94:1a:87:40:54:81:9e:41:29:9d:c8:61:cd:ca:d7:90:44:0d:
         d2:2d:62:d5:47:e5:10:d9:29:de:b6:61:eb:5c:79:8f:6f:4b:
         aa:11:d6:df:60:5e:a9:95:54:b1:74:bf:d4:74:87:32:4a:fd:
         6c:c3:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:12:51 2026 by rpki-client