Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80552a45-729c-325a-9aa9-0a3a399692b8.roa
File:                     80552a45-729c-325a-9aa9-0a3a399692b8.roa (raw, json)
Hash identifier:          y8EZeIjrKtUAutWTjiVU2Nl87P4IGwvNjt2EQdm3buo=
Subject key identifier:   88:E6:43:6C:EF:CE:A6:C5:A7:EE:74:99:56:9D:85:E2:49:EF:60:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF686DDE56EDC1958CA4780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80552a45-729c-325a-9aa9-0a3a399692b8.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        98.222.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:86:dd:e5:6e:dc:19:58:ca:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f623e41f-1a58-44fb-ab68-5a306e814a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:85:8f:8c:bd:9b:8f:4a:34:65:44:3f:1c:
                    85:c6:d5:f2:93:3d:95:26:55:ea:a7:f0:99:37:38:
                    82:73:e4:de:71:5d:32:b3:10:7f:bd:6e:47:3e:6e:
                    7e:8c:67:7f:8b:11:34:99:09:fd:b3:4d:ea:9b:16:
                    cf:4b:e0:79:4e:be:34:b2:12:75:a7:53:16:53:aa:
                    92:ea:ff:3d:04:35:07:4f:cd:26:62:6f:03:c9:5f:
                    f1:31:50:04:d7:87:cc:8b:06:fc:64:11:9c:44:7a:
                    72:83:6d:7d:fa:6c:ca:96:89:d5:78:a5:9c:42:e3:
                    89:3c:f3:a0:b5:29:18:c5:e3:80:c8:39:af:40:a9:
                    a5:8f:c5:6a:f8:ce:bf:1e:9f:b6:39:fb:d7:44:49:
                    e7:d8:20:72:3c:6a:b2:49:fb:ba:f3:c4:4e:ce:a0:
                    f0:2b:a2:ac:ba:61:69:80:57:5c:c9:bf:80:96:a1:
                    7f:83:96:17:9f:eb:d1:c8:85:05:0b:95:2f:68:ac:
                    bc:62:f4:90:72:aa:7e:34:db:46:82:c9:3c:8d:2a:
                    52:ab:53:9f:78:c0:a4:12:1b:ea:d1:0d:4d:c7:91:
                    3e:05:74:57:43:5d:4e:0b:21:31:5a:53:e9:c4:f0:
                    42:97:d0:38:76:64:6e:9d:15:d8:a1:f9:9e:55:fb:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E6:43:6C:EF:CE:A6:C5:A7:EE:74:99:56:9D:85:E2:49:EF:60:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80552a45-729c-325a-9aa9-0a3a399692b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:15:d0:12:15:d8:2c:e9:fc:7e:d3:87:4e:d1:05:c7:a4:8b:
         18:38:40:4f:38:fe:08:b9:7c:c5:ce:20:09:a0:07:1d:c6:c6:
         c6:f5:4b:89:a9:3b:c4:37:25:b6:c3:d7:0c:a0:f6:52:8b:7e:
         2a:9b:3a:69:45:82:ff:26:be:3b:2f:c7:2e:4d:37:0a:4c:2f:
         05:d2:4f:dc:97:7a:b1:94:09:e3:ac:28:82:e1:84:f1:b6:21:
         2f:d8:70:a6:b6:78:3c:0c:f3:d8:2c:14:81:39:6b:28:f6:93:
         33:c5:ee:28:02:6c:70:ce:29:1d:94:be:68:a9:1d:17:55:ca:
         d0:8d:b6:1e:e1:10:13:79:89:49:65:3f:f4:28:29:a8:dc:d0:
         df:c7:84:ef:8b:63:9b:f9:18:02:82:4f:1b:d5:c6:33:d0:99:
         55:40:38:1e:64:1f:44:71:d5:59:a9:02:52:4d:72:d3:c5:3e:
         05:4a:93:b7:2c:6e:51:40:1c:9b:e2:4d:5f:8a:ba:39:0d:b2:
         8e:97:57:fa:93:70:0e:7c:53:1b:0c:59:66:c2:a9:28:64:21:
         13:a3:48:e5:c2:d4:e7:e3:8f:fb:7f:1e:94:3a:86:65:d1:e9:
         6c:c5:e0:6f:21:11:d3:a7:33:75:8c:1f:86:ef:e3:1f:0c:b9:
         95:42:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:02:20 2026 by rpki-client