Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c39d30-e705-307d-b73c-6751ea8190b9.roa
File:                     60c39d30-e705-307d-b73c-6751ea8190b9.roa (raw, json)
Hash identifier:          yWza3uBtVC5BlcjzZtQUaYaC4bjdAplfsI4Fc+4ETtg=
Subject key identifier:   31:75:F0:9C:B7:3B:A5:F7:4A:FC:00:2D:C7:F3:7B:5D:3C:01:D0:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D724BC459A6D5EF53BE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c39d30-e705-307d-b73c-6751ea8190b9.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        98.63.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:72:4b:c4:59:a6:d5:ef:53:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8ca5886d-e9eb-48a1-bff3-5f2191b73458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:59:01:65:33:28:95:51:05:8d:b0:53:61:
                    6b:02:e7:ae:6b:1d:48:6a:d7:84:94:37:0f:f4:22:
                    2b:b1:03:5c:00:b3:5b:d1:92:0a:f9:05:5f:83:5d:
                    ca:af:c7:f7:63:04:7c:e9:56:f2:d0:f9:a1:2b:4e:
                    97:48:7a:71:b2:5f:bf:cc:65:79:fd:e4:dc:fe:63:
                    9e:ef:29:a9:a6:1f:a5:74:14:ea:00:e7:2a:83:c2:
                    a8:f6:ba:dc:23:8d:1e:2a:2d:bf:3e:aa:f2:d1:e5:
                    d9:e1:40:58:1d:7c:5b:78:90:49:d9:e3:ae:c5:ca:
                    c2:cb:15:82:a6:56:9f:8f:5b:46:82:e4:fd:23:a7:
                    fa:10:3d:40:fd:03:b2:ed:1e:a9:fa:24:57:67:59:
                    a0:4d:7b:01:b1:88:07:17:c5:bf:47:a5:be:05:a1:
                    ac:37:1d:48:67:be:53:c0:c7:fa:ae:be:f3:5b:a7:
                    09:11:32:05:47:80:05:2e:71:f1:32:d7:94:77:61:
                    ca:c7:ad:77:23:b5:10:e0:a4:06:12:c0:c5:ed:77:
                    d6:f6:8b:cb:f3:d5:ca:2f:b3:c9:b2:d8:7a:78:5f:
                    04:77:30:73:c4:fd:dd:60:90:04:b5:53:1c:df:b3:
                    85:8a:50:68:19:28:e2:69:4e:95:bb:cc:e5:0c:de:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:75:F0:9C:B7:3B:A5:F7:4A:FC:00:2D:C7:F3:7B:5D:3C:01:D0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c39d30-e705-307d-b73c-6751ea8190b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.63.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:9d:73:6c:09:d6:a7:bd:cc:6a:a0:97:31:1b:79:9a:fe:
         68:75:67:bc:70:01:5d:1d:b0:ac:87:dc:3a:3d:14:6d:ef:fc:
         37:47:f9:17:08:98:d1:c2:ce:ae:97:19:ca:f0:dd:61:3a:49:
         ef:b9:a5:01:cf:2b:0e:ca:af:a6:b2:e2:ae:73:70:06:67:60:
         2c:6c:15:da:14:c0:cc:ec:b9:27:c0:0f:a9:58:89:03:00:6b:
         32:b7:f0:62:0b:47:26:5c:02:81:e8:1a:8a:5b:78:5c:2f:19:
         b6:19:92:a7:35:6d:e2:93:38:7d:f1:cd:36:cd:94:62:e6:a9:
         d8:f2:94:fd:30:93:3c:77:2c:1a:61:e1:13:65:04:9a:aa:3e:
         4b:1a:9a:04:ab:fe:36:42:70:52:13:2e:49:29:7f:c6:3f:d4:
         b5:0f:f2:1d:3e:d8:31:d0:45:8d:f2:a0:6c:4e:49:a0:c1:2e:
         5a:19:52:1a:04:7b:74:0f:ba:8e:c6:bd:9e:48:8d:a0:c1:ee:
         4c:cb:5f:a3:96:52:dc:9e:fc:a4:51:c7:ab:2b:d6:47:60:52:
         38:db:dc:be:2c:70:42:22:d8:60:da:43:4a:fb:66:cb:23:8a:
         f3:2f:98:af:44:58:16:d6:ac:ae:cc:b6:40:ed:33:19:52:eb:
         63:b6:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:11:04 2026 by rpki-client