Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/636ca6a0-7378-3bcf-9101-988e4653de82.roa
File:                     636ca6a0-7378-3bcf-9101-988e4653de82.roa (raw, json)
Hash identifier:          nP2jNjLTi85E3vLtLdnYbMwmpjBtmk+pqZdDPh0Mgok=
Subject key identifier:   E6:96:A5:59:DF:1D:17:4B:92:45:B0:60:09:6A:98:7D:03:79:17:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E4963F310B0769E630E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/636ca6a0-7378-3bcf-9101-988e4653de82.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        98.216.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:49:63:f3:10:b0:76:9e:63:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=a3cf1d08-319f-4300-9916-9ab71d61e909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:56:45:04:a6:56:e5:5c:a6:36:85:5e:cd:
                    9c:d0:c5:0f:bd:64:61:ae:eb:7d:d8:b2:d7:48:fb:
                    64:27:4c:a2:f8:16:83:78:3e:48:e5:7c:fd:9a:e5:
                    53:4c:a5:46:e4:9a:d7:c7:95:c5:09:d3:47:04:0a:
                    0c:df:a9:42:d3:ae:3a:9a:f7:9f:9d:d8:50:69:41:
                    a3:cf:84:f4:0e:8f:2a:24:a0:b9:bc:58:a2:99:e5:
                    1c:1b:06:a8:38:47:c7:ab:75:97:0a:fc:ad:95:98:
                    22:52:ee:3e:92:c5:15:1e:54:5a:81:02:fe:bb:d5:
                    a1:ed:1e:3c:0c:c3:a7:db:bc:dc:64:33:9d:e5:80:
                    4d:c4:c3:3e:6b:0e:6f:56:0a:18:96:96:e0:06:0f:
                    70:e1:3d:ce:30:d8:a6:be:21:21:8b:2f:72:8f:dc:
                    23:69:ec:68:b2:d9:27:5f:87:50:c6:8a:da:ff:ae:
                    4f:cf:ef:59:ae:ef:c1:c8:54:d0:29:1d:f3:48:c9:
                    bc:e2:89:55:4c:15:c5:8f:b7:7e:1a:91:67:e5:21:
                    6c:f5:f7:3a:b1:76:d1:b9:53:a6:0d:84:b4:64:92:
                    be:92:56:17:57:80:13:50:4e:0c:73:85:45:d7:ea:
                    0b:5c:b0:12:fb:41:64:34:4a:ea:ed:82:e3:01:6d:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:A5:59:DF:1D:17:4B:92:45:B0:60:09:6A:98:7D:03:79:17:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/636ca6a0-7378-3bcf-9101-988e4653de82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.216.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:05:c5:78:33:41:cd:05:63:b6:0e:c7:17:1f:44:b9:79:
         a9:fa:0a:6e:67:be:94:7c:36:ce:57:6f:d7:ca:8e:cd:d3:4f:
         85:1f:d7:13:5b:f1:d5:13:29:8c:bc:cc:0d:f1:4e:fd:1e:bf:
         74:96:77:46:fa:0c:e4:4f:b6:30:a8:85:d9:09:dd:f1:c1:0b:
         4c:d7:c5:8d:b8:96:26:99:c4:d9:e2:6b:44:29:32:39:e3:ee:
         2e:68:dc:6c:52:9f:f5:85:95:da:7f:df:dc:e9:98:4b:0b:5c:
         b7:de:d5:aa:30:91:92:38:e4:66:89:4c:87:d4:a6:aa:da:2c:
         3a:20:c1:c0:cf:79:2a:8f:45:dc:14:bb:c7:ab:46:23:09:7b:
         0e:5e:d6:11:4a:9b:70:5d:d3:3a:b2:0c:37:9b:18:4d:62:7e:
         ec:01:59:18:e6:7c:05:7d:a2:b8:89:1d:95:f2:a3:6c:7f:a8:
         b6:d8:18:bc:a8:41:c7:95:cd:c3:e9:03:9c:94:6d:11:31:a8:
         f8:3f:56:7a:67:fe:93:e9:5e:69:58:05:32:e8:3c:7f:a8:77:
         2d:9c:92:ba:47:d3:71:e5:39:49:51:69:4a:71:77:0f:70:39:
         ea:a1:eb:20:71:8a:d8:a2:f7:6e:07:15:94:e0:5f:b3:ef:52:
         d6:1b:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:45:10 2026 by rpki-client