Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81334b25-26df-3fdf-923a-09a8f3576c0b.roa
File:                     81334b25-26df-3fdf-923a-09a8f3576c0b.roa (raw, json)
Hash identifier:          4/8X9I7ir06sadaHO15q0X6EC3xDIkSPd+wVdrYwMbo=
Subject key identifier:   D1:11:7F:78:E2:2C:87:F5:45:2D:19:D5:6A:A8:A3:C6:77:34:ED:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7F7B2E94F0F200052DD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81334b25-26df-3fdf-923a-09a8f3576c0b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        98.212.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:f7:b2:e9:4f:0f:20:00:52:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b00c032b-81b7-4904-beec-5e1855f0f2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:06:5c:69:cf:e1:77:8b:e6:97:c8:e1:39:
                    36:3f:93:4d:e7:5f:d9:f4:60:8d:9b:ab:0e:ec:5e:
                    af:f9:f3:4f:be:26:71:f1:89:bf:4d:0d:3b:6e:2a:
                    1e:47:73:5d:b9:e5:1e:8b:af:38:04:14:f2:0a:1a:
                    e7:45:1f:c1:b4:40:65:b4:0d:e1:5a:dc:bb:bc:67:
                    ba:f0:95:69:44:72:ba:1f:28:f7:5b:1e:26:7e:a7:
                    c5:7c:1b:25:0d:9b:43:26:50:e6:e8:e6:cf:eb:65:
                    cd:b3:dc:34:e0:c0:ce:3f:ca:e0:8f:f8:15:cc:c3:
                    d9:c8:05:17:a0:c8:2b:f6:8f:95:f1:f7:fb:2b:93:
                    75:f7:aa:83:d7:f6:cb:14:dc:2d:a5:77:29:9d:3e:
                    a5:29:f0:4e:2d:be:6a:52:b3:6f:95:06:9a:81:63:
                    fc:9c:a9:f3:dd:d7:4c:1e:1b:2b:73:72:42:4f:9c:
                    c9:3e:d4:1c:d5:ee:5f:60:da:20:a1:2a:cf:cf:f5:
                    5b:28:d7:bc:af:28:27:d6:59:cb:93:08:5a:64:9a:
                    12:2d:13:d7:7b:5e:e5:6c:14:a9:6b:57:9f:f9:0d:
                    90:48:24:d5:45:dd:6f:db:9f:b3:01:9f:2a:73:97:
                    8c:71:71:54:3c:de:d1:49:53:30:1d:a6:f8:3e:11:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:7F:78:E2:2C:87:F5:45:2D:19:D5:6A:A8:A3:C6:77:34:ED:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81334b25-26df-3fdf-923a-09a8f3576c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.212.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:2a:2f:1f:48:07:d1:fc:d7:19:44:b8:20:e0:fd:ce:fb:
         92:2e:90:4e:20:9f:26:ae:73:27:23:0b:96:de:7f:e3:40:b9:
         ac:1e:2e:1d:5c:df:30:91:97:66:94:c5:00:03:9a:28:51:a7:
         89:4c:dc:47:c4:05:d6:b1:91:20:ed:dc:98:8a:82:0c:1b:09:
         85:60:7b:95:be:99:2d:9f:0a:b7:6a:f4:bf:af:86:8c:7a:14:
         82:3b:ad:24:80:48:2a:94:2e:23:af:01:5f:c9:5e:90:fc:e6:
         ab:9c:fa:e1:29:58:eb:d7:dc:8a:5b:0c:1d:5a:fa:98:84:b1:
         8f:a4:87:2f:93:b2:a2:b9:2b:ed:75:09:92:3e:c2:cb:9b:aa:
         0b:48:b1:77:34:86:1a:d0:6c:22:c1:44:54:17:ed:86:12:0e:
         3d:33:20:fb:4a:89:51:4b:eb:7e:fa:7b:17:6c:79:a1:00:96:
         91:c5:a3:16:e3:8f:2b:ba:ae:e3:fd:c5:f3:67:8e:10:81:a4:
         34:40:26:37:2c:fc:f5:e1:5f:1e:c7:ea:ce:8f:9e:eb:9e:f5:
         75:54:72:24:d1:36:55:05:bb:b6:0d:86:30:04:d5:50:b7:ac:
         2f:88:29:e0:37:b5:ec:1e:db:29:58:85:15:52:4e:b7:e5:16:
         b2:07:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:23:53 2026 by rpki-client