Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6265f6d7-df2a-3946-b754-c6b96ed10b1a.roa
File:                     6265f6d7-df2a-3946-b754-c6b96ed10b1a.roa (raw, json)
Hash identifier:          YNJ+aJSM8qFmtztkCo1N0u0Vbq3KB7wm6UzCwmjZeU4=
Subject key identifier:   C8:38:EE:16:E2:C1:C4:23:C4:7E:46:45:A5:25:78:78:86:FD:1F:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36014C0CCAB965991BDA2326
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6265f6d7-df2a-3946-b754-c6b96ed10b1a.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        98.194.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:4c:0c:ca:b9:65:99:1b:da:23:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=6b4c1c62-6c61-43dc-97ee-7374c98a3a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:8c:f0:15:dd:ad:f9:f2:dd:4e:20:d6:8a:
                    7a:0b:8a:8e:0e:7b:07:fc:dd:a3:d8:24:be:8c:bb:
                    df:3b:72:3f:38:26:9a:72:bf:6e:b7:17:33:65:bc:
                    b3:e2:2e:41:ac:41:93:5b:ef:99:53:d3:17:17:10:
                    5f:ce:8c:31:bd:df:66:d4:ec:fe:27:ba:04:a0:f7:
                    ea:b7:9d:ae:9b:e2:59:51:cc:4e:f8:0b:80:6b:67:
                    2f:ec:79:0d:35:2e:13:3f:08:65:af:dd:24:e7:b8:
                    d0:0d:5e:e4:80:1f:2f:3a:50:27:58:56:05:8f:9e:
                    5c:36:f8:df:25:ef:de:7b:69:95:69:fa:3e:b2:c1:
                    ac:4d:89:bd:17:d8:3a:af:05:d1:58:c9:3a:cf:4d:
                    ad:22:ea:34:c9:f5:32:20:ab:36:3f:0a:d6:97:42:
                    e6:aa:07:49:b8:fa:3a:48:02:9d:ac:16:d0:5e:4a:
                    42:b4:cd:a3:e9:0f:9f:29:a7:1a:20:02:a6:c9:75:
                    ca:80:35:ba:4d:04:07:89:f9:95:14:bf:32:6c:e0:
                    e3:eb:df:ff:41:f9:1c:7d:ce:1a:65:30:db:5f:b1:
                    f0:ba:06:ea:ec:81:9a:bb:9b:d9:fb:74:2a:76:8a:
                    ea:16:b5:4c:9c:85:19:4f:c5:61:bf:f8:ad:ab:fe:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:EE:16:E2:C1:C4:23:C4:7E:46:45:A5:25:78:78:86:FD:1F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6265f6d7-df2a-3946-b754-c6b96ed10b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:b4:a1:b7:3d:4a:ae:83:dc:86:5b:63:b2:f1:db:72:b8:
         6a:37:1d:64:d8:f9:b3:51:22:49:f8:f1:27:4e:e4:bc:46:76:
         c2:7a:b8:a1:c2:1a:ea:8a:01:58:ba:78:19:f2:6e:64:15:ec:
         cb:be:c8:9a:7b:1c:47:5f:3c:54:8f:55:86:c2:43:fa:46:e4:
         6c:68:d6:ad:73:de:49:27:0f:39:d9:0a:eb:2a:32:43:93:fa:
         3d:63:55:f3:a7:b0:1a:50:e3:9f:af:39:8d:5c:8e:5e:d6:99:
         e0:9c:a7:c7:1a:a3:36:ad:2d:65:76:39:01:8a:f4:aa:09:e5:
         d6:5f:c4:16:33:79:94:b1:97:e6:02:07:b0:25:a7:68:73:57:
         8e:b7:94:0b:4d:12:3c:9c:23:f1:3e:b9:ee:6a:5b:de:a7:f8:
         58:29:1f:a5:5a:0c:74:df:ab:2f:0b:1d:34:58:8c:ab:f0:1b:
         bd:18:e0:09:7a:00:f9:bd:0f:9a:f9:e8:02:45:de:3a:ff:e6:
         de:17:e4:32:e5:b6:19:4a:d6:39:d7:74:4c:a4:53:40:d7:b2:
         b5:31:6a:04:69:0a:09:d7:d6:c7:6a:d3:f3:90:89:97:a1:f9:
         eb:93:a1:dd:ae:2d:20:2b:55:71:db:bf:e6:11:42:c4:71:b7:
         83:55:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:39:16 2026 by rpki-client