Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9923047c-b047-3e40-a49d-f407afe1692f.roa
File:                     9923047c-b047-3e40-a49d-f407afe1692f.roa (raw, json)
Hash identifier:          2BfvhadUwq/OFW8aU4ltdYhW4/DYJ+1HXsPbaTk+jp0=
Subject key identifier:   1D:DD:A6:BB:1D:6F:09:79:C2:F4:42:FF:EA:ED:23:F9:7D:3B:22:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119FD2EA1AFBED80B1397AB7
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9923047c-b047-3e40-a49d-f407afe1692f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        98.223.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:d2:ea:1a:fb:ed:80:b1:39:7a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=fcdfd812-a100-48ea-89f6-b748c6fcd563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:6b:16:ce:2e:1e:06:44:ed:d3:52:84:70:
                    99:96:b1:ae:9c:ce:ce:c1:d3:48:b1:5a:8d:be:1d:
                    d5:b3:b4:a5:6f:99:c6:dc:0a:2c:ca:1b:c1:e0:e7:
                    61:ed:11:53:f5:fc:ee:f0:29:1d:3a:72:cb:16:96:
                    14:d9:6f:52:eb:8c:ac:2c:54:80:26:f0:2e:7f:ff:
                    22:2c:62:cb:fe:30:ef:8f:34:3e:89:12:30:7c:ea:
                    f4:38:ae:f6:72:dd:79:22:a1:81:6e:74:cb:7e:65:
                    e9:a3:9c:41:83:94:af:44:85:d1:2a:35:98:e7:41:
                    b2:c4:ef:b4:ca:ba:d9:de:b0:28:72:ec:d5:85:87:
                    d4:c3:7f:dd:97:a0:21:d2:d7:43:86:9b:3e:4a:63:
                    6a:95:dd:37:99:b9:41:49:62:bc:ef:b7:2f:74:83:
                    77:99:dd:64:fc:c7:b3:bf:73:26:af:ca:e9:df:15:
                    a0:e5:0d:a0:c2:37:9d:de:b3:8b:ee:09:04:a8:ce:
                    94:2c:47:d5:2d:0f:4f:6f:52:78:e2:ae:cd:88:e8:
                    b8:d3:d0:72:36:d0:03:1b:c1:cd:32:18:5f:9e:59:
                    c5:21:77:43:8b:4f:5f:b8:90:c7:d3:21:00:5e:85:
                    0d:36:21:78:a5:f6:81:be:6b:1e:e6:dc:9e:46:fc:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DD:A6:BB:1D:6F:09:79:C2:F4:42:FF:EA:ED:23:F9:7D:3B:22:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9923047c-b047-3e40-a49d-f407afe1692f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.223.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:95:9c:2f:bb:8f:e7:cd:b0:05:0d:e4:7f:ed:c9:9e:e2:61:
         6a:76:c0:ee:44:e9:ab:f7:83:2e:a1:4b:a0:ea:82:02:ff:44:
         ea:c5:11:28:48:2d:28:19:1e:91:58:0d:bb:5b:ea:e3:48:b0:
         19:63:a4:d5:65:94:3b:82:b0:df:e8:e8:7f:06:ec:22:fa:3c:
         8d:51:c3:53:62:5f:6f:b5:ce:04:f3:82:4a:90:a4:b3:b8:2a:
         a2:0e:13:f8:6d:5a:dc:b6:00:38:1f:a6:6d:8e:3a:e5:35:d4:
         88:da:3b:6b:54:97:f5:2c:c3:b9:f5:02:d0:50:27:61:1c:d6:
         f0:f4:a8:87:bb:d6:48:64:12:d8:d2:84:40:d9:61:6d:ed:70:
         a9:99:23:2a:59:d6:00:42:2e:0a:22:b6:72:a2:cb:5b:35:f0:
         65:2f:e2:61:86:5f:24:4c:d0:87:5d:f0:38:8e:b5:cc:1b:b4:
         55:e9:b8:2e:53:4d:bd:9a:d1:f0:27:94:6a:09:94:4b:e0:ae:
         97:20:95:bc:1b:7c:10:8a:03:6a:ba:73:9b:51:62:48:c4:1a:
         75:60:7e:2f:12:91:d1:fd:df:7d:39:2a:1b:f7:79:d4:e2:44:
         42:dd:c5:e1:bc:50:45:9c:07:01:aa:a4:79:bb:6f:2b:f1:10:
         62:78:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:32:09 2026 by rpki-client