Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa
File:                     9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa (raw, json)
Hash identifier:          /G7XPq7R8UftOIb6PUJTb2fkS3lGH9qdebg/nnWtdtE=
Subject key identifier:   4A:89:0F:2F:00:DD:8D:A2:BB:3F:24:B2:58:60:5D:5C:8E:5A:71:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF83EE2B2AEF9B1C0B75A60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        98.52.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:3e:e2:b2:ae:f9:b1:c0:b7:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=8a865dc0-0b25-46c2-a6b8-e46f0bfa341a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:55:a2:66:5a:b3:fb:22:e1:f0:96:22:d8:
                    f2:9b:5d:6f:aa:f8:8a:3a:01:f9:cc:bc:f8:21:8c:
                    0b:16:12:25:18:ff:a9:18:a7:1f:91:cf:1b:81:b8:
                    ee:e6:f3:1b:96:44:2d:80:62:d7:cf:a0:9a:78:38:
                    2e:a0:9d:c0:2b:6b:0b:36:13:3c:c9:ee:b6:8b:e6:
                    19:33:07:b5:81:da:03:c5:d6:2a:66:ff:0e:72:d8:
                    f1:f9:b6:29:82:f0:92:90:9f:aa:4b:94:63:3d:2c:
                    7b:3d:b0:af:5f:3f:74:d8:dc:8c:72:3f:ea:c7:c9:
                    47:58:87:f9:f9:d4:45:e8:47:c9:a4:6c:2a:81:d3:
                    a1:fd:f1:b8:b7:af:63:79:59:af:7e:de:1d:26:5f:
                    ba:ce:9d:5e:ce:85:71:79:0c:d1:63:9d:6e:d5:95:
                    f9:74:7d:2e:22:d6:d6:ce:09:3a:a3:0d:33:35:d8:
                    57:35:65:af:22:d3:5d:c1:65:fa:72:13:05:a8:67:
                    59:c3:84:37:e3:d7:de:64:16:76:3c:f6:e9:31:86:
                    1a:16:cc:86:4f:1e:c7:16:08:d4:72:0e:0c:ca:d4:
                    a4:99:1b:34:20:fa:a3:3a:47:9f:e3:51:f9:91:a0:
                    a8:4d:85:11:b1:55:0a:89:ed:de:bb:5b:bd:42:e9:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:0F:2F:00:DD:8D:A2:BB:3F:24:B2:58:60:5D:5C:8E:5A:71:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:46:2b:64:48:29:81:8b:3f:86:5b:13:e7:47:39:a9:4e:
         f3:57:92:b7:c7:65:98:89:2b:bc:c4:79:48:74:65:5a:bd:77:
         d0:af:70:58:cc:56:c3:59:11:3b:c1:d4:ab:cf:80:89:10:51:
         8e:f5:8c:98:55:ba:0f:8f:df:83:1d:3f:b4:5f:d3:8b:ac:dd:
         46:2b:cd:fc:c0:15:0a:46:f7:dc:07:10:f0:04:16:b1:55:9e:
         6f:b3:2a:6d:dd:79:11:24:4f:e5:43:08:9d:f9:ff:69:f9:d8:
         56:5c:8b:9e:3e:2c:ed:0d:85:38:72:d7:ea:0a:22:35:7b:a0:
         54:2f:91:45:51:fd:bd:51:52:3d:2b:43:94:67:2c:92:3e:fa:
         ee:44:6e:5d:4b:e1:af:63:fe:07:ef:26:33:20:77:8e:43:33:
         27:39:0e:1c:50:e5:33:4f:61:d6:a6:0d:97:a0:10:3c:9a:70:
         ce:af:be:30:7c:bf:54:fe:d6:a2:06:53:5e:53:78:13:5b:89:
         a1:b5:16:1e:b9:f1:2f:8a:d1:20:09:e1:57:43:83:3b:8c:8e:
         11:93:5e:e0:7c:ef:a5:93:a9:14:09:1f:de:0c:ce:f3:12:93:
         e4:eb:9b:f3:04:05:37:10:79:7f:e7:92:9f:3c:1d:b3:52:a1:
         c3:93:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:28:42 2026 by rpki-client