Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe206-55b6-3109-bf57-0688ea7fcffc.roa
File:                     a38fe206-55b6-3109-bf57-0688ea7fcffc.roa (raw, json)
Hash identifier:          t1+KEYMJib6G/tvVLt+TegErCoW0v4JrdxJnhQqQZjc=
Subject key identifier:   7B:CD:E8:F3:FF:67:C5:C6:63:91:4F:9B:46:6D:85:36:89:AA:DE:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FBD728FD92B039DFCF100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe206-55b6-3109-bf57-0688ea7fcffc.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        98.243.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:bd:72:8f:d9:2b:03:9d:fc:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=5ecfea46-637e-43d1-bc00-911af3304564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:5b:f8:ec:cd:1c:46:86:45:27:15:46:28:
                    4b:d6:bf:65:19:93:fd:e6:bc:ef:3a:ea:43:ad:56:
                    2f:6f:9d:d4:ae:b6:0c:37:5f:f0:9b:f2:f2:45:c1:
                    78:a9:72:10:d5:c9:8d:16:56:ec:8d:c1:de:ef:84:
                    93:ec:94:ed:6b:e5:b7:85:69:d5:c6:ee:c5:8c:92:
                    fb:f4:8b:58:38:2b:32:13:db:5c:5b:50:82:51:22:
                    bc:63:18:df:ab:a9:c0:f1:81:a9:09:b2:9a:94:6e:
                    af:d3:23:7d:95:13:8b:f7:ee:13:d5:0b:f8:dd:67:
                    48:3a:06:cb:8a:88:e5:bd:65:2f:d3:62:0c:40:47:
                    0a:b8:80:f2:01:c4:c2:34:97:fc:a9:53:5a:a4:91:
                    b7:7e:45:a7:b4:20:c0:b9:ea:11:df:a9:2c:21:11:
                    7a:d6:d0:06:90:21:b3:a9:d6:dc:e9:b2:ac:4d:78:
                    9e:63:c2:3c:e8:aa:5e:0c:ca:21:56:31:3d:22:79:
                    34:3f:49:6f:9b:5a:39:47:3b:7f:e1:a7:50:89:bd:
                    6c:b3:be:6b:18:2b:bb:c8:0f:56:11:22:b2:99:1f:
                    fb:f7:5f:e5:62:d4:8e:26:b7:fe:ec:5e:1a:0a:d5:
                    1a:a3:fb:c3:03:5c:24:e6:70:e3:22:5e:a5:7f:4b:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:E8:F3:FF:67:C5:C6:63:91:4F:9B:46:6D:85:36:89:AA:DE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe206-55b6-3109-bf57-0688ea7fcffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:f2:db:a0:d2:3d:b3:d7:32:7b:8f:64:64:e8:34:9d:42:
         b5:c3:57:55:0a:7a:f5:e4:09:be:92:9c:96:f7:1e:a2:6a:fd:
         2c:67:ee:ca:e3:df:dc:53:6a:66:d8:7d:5b:17:ba:22:45:46:
         09:98:ba:e4:80:62:ad:d4:d9:73:c5:50:44:f3:e2:9f:e4:d0:
         60:63:80:83:02:be:44:b2:e5:01:1d:96:6e:de:d4:cf:b8:b6:
         88:21:bb:46:1a:5e:20:41:4b:44:5e:cb:3c:0a:49:c4:c0:ba:
         f2:4f:a1:a0:2c:32:17:a5:f8:85:bf:8b:f5:31:18:02:d7:fd:
         fe:a5:24:8c:3a:ad:44:10:1f:47:ea:24:33:17:d8:a2:26:8f:
         29:a8:d5:d8:3c:46:f2:01:57:1b:3e:c4:98:b4:26:a0:b1:d9:
         15:46:81:d4:38:cf:07:ef:ab:a0:0e:56:54:57:1b:01:e0:3c:
         b5:d7:cc:3a:f2:8d:d4:94:38:a7:fe:1f:02:c0:17:5e:51:6a:
         76:66:1d:ee:26:16:75:6a:bf:3e:36:94:e0:c1:39:d2:e8:93:
         73:91:e3:08:75:3f:aa:a9:f2:e3:e9:a6:9a:79:dd:15:d1:e8:
         7e:60:28:b2:da:df:92:84:7d:38:83:bf:6e:6d:f6:43:1e:96:
         dd:b5:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:33:33 2026 by rpki-client