Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69d33979-d6a6-3b89-92cc-cea8809a7f21.roa
File:                     69d33979-d6a6-3b89-92cc-cea8809a7f21.roa (raw, json)
Hash identifier:          CtAPveVrS0mCdpaU9QQ+hUV97ZAZmxfUvv7jdN62oI0=
Subject key identifier:   B9:3E:A0:75:E4:93:7C:C5:AC:8F:56:7A:D5:35:8B:7C:69:B1:F2:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF82F1E403CF0073F1BF800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69d33979-d6a6-3b89-92cc-cea8809a7f21.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        98.46.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:2f:1e:40:3c:f0:07:3f:1b:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=65a61d39-159c-40f6-a97f-c3b05ef2e549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:8f:a6:2e:4e:c7:3e:f4:61:aa:ef:e3:9d:
                    14:05:7c:27:a3:93:78:df:ac:c0:ad:3b:bb:e4:51:
                    2c:65:50:a1:09:a4:1a:4c:84:8e:6c:37:65:1c:1e:
                    16:e3:90:c1:c2:2c:35:98:ec:08:97:66:ca:07:1e:
                    35:10:d6:da:20:44:35:6a:1a:8f:85:d9:15:a4:13:
                    14:8f:a5:70:6d:11:a8:13:09:e8:2a:2c:65:ca:9e:
                    78:c3:ad:e4:b5:e1:78:8e:c1:63:b7:22:48:fb:c4:
                    dc:b7:79:b9:c7:11:ef:25:d3:48:91:99:91:f0:ad:
                    7a:4f:fd:f1:b6:ea:62:8e:70:9e:30:03:54:a4:57:
                    bf:aa:31:1f:1a:a6:85:44:13:ef:63:85:e1:5e:a8:
                    1f:74:af:e3:1c:8d:12:1a:c6:3c:ae:1b:6b:5c:d8:
                    a8:64:2d:e2:04:aa:c7:1e:50:01:f5:d4:17:96:a8:
                    f7:13:fa:28:a9:bf:fe:06:03:f5:41:f8:e8:0a:4d:
                    c3:ee:b8:17:a5:93:24:23:da:94:a8:c0:6f:88:93:
                    74:f5:3f:e2:80:de:50:88:7e:cc:5b:41:89:ee:55:
                    61:e5:55:64:68:55:04:21:4b:c0:cd:0e:19:07:ed:
                    65:fa:f2:a9:ec:4f:44:e4:ee:07:e8:42:c3:82:39:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:A0:75:E4:93:7C:C5:AC:8F:56:7A:D5:35:8B:7C:69:B1:F2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69d33979-d6a6-3b89-92cc-cea8809a7f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:b5:21:b6:5d:11:37:3b:8b:37:c4:03:6f:98:3c:95:24:
         3f:13:9d:83:13:ff:19:cc:3c:bd:a6:54:b6:58:ab:92:07:bd:
         1e:f4:ca:2b:ce:c4:0d:fe:95:11:3a:65:a3:7a:7e:a2:09:7d:
         c7:50:1d:07:84:61:5b:e2:3b:0f:66:7d:cc:43:6e:62:f9:c9:
         6f:b1:d9:78:cf:73:1e:c4:be:b3:da:12:a3:5f:4b:91:6c:e7:
         55:d0:90:e1:6a:a7:61:a4:90:66:bf:89:af:57:34:33:3b:19:
         dc:72:7e:77:7a:d2:64:24:61:cb:da:ad:ed:af:ae:98:ea:e2:
         5c:f6:5a:77:12:7d:fb:ad:6c:54:b1:b5:1b:e8:ae:86:73:b4:
         32:1c:15:55:37:cb:64:23:9a:38:ea:22:b4:b0:b5:02:fc:74:
         2d:0e:17:91:43:fe:ee:67:fb:e5:77:40:ff:9c:86:dd:3f:22:
         d4:f6:0e:e8:65:54:05:0c:62:9b:7e:f5:d6:f5:21:42:62:f4:
         8e:ab:1c:dc:05:71:e7:88:d7:c7:b3:30:e3:9f:8b:65:ab:2e:
         07:01:ef:64:be:40:dc:d3:d8:4a:e0:b5:47:90:d6:19:f7:92:
         bd:fc:2c:b3:e4:d9:3c:68:13:47:33:a9:f7:43:c8:41:01:13:
         59:41:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:47:07 2026 by rpki-client