Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74a9338-3a85-325b-b7bd-8c996e58d445.roa
File:                     a74a9338-3a85-325b-b7bd-8c996e58d445.roa (raw, json)
Hash identifier:          aXXJ1JbMQkWQ0v5xwmg3C7LNfWuni7B3wtW2ZPK9zd8=
Subject key identifier:   68:BD:5F:CD:A0:9A:14:11:8E:FB:38:D9:7C:C6:C6:70:B6:E1:8B:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61454F952A96E79C61989900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74a9338-3a85-325b-b7bd-8c996e58d445.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        98.54.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:4f:95:2a:96:e7:9c:61:98:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=0e14a38e-9522-4be9-87dd-2372cd44a41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:d5:b3:e2:ff:06:3e:5c:ba:0d:92:09:8d:
                    a0:15:5a:e5:68:02:6b:bf:fa:4a:75:f9:c5:27:8b:
                    bb:f6:31:74:a3:b9:c2:73:ee:39:c6:21:72:96:1c:
                    7b:fb:59:ec:4d:97:0e:44:23:64:91:27:58:62:b0:
                    f4:67:e3:7f:c2:28:3a:21:4f:41:f3:28:c7:a0:e1:
                    f5:9d:97:01:ff:cc:e0:ce:9f:e9:8d:b4:80:19:9d:
                    ef:b9:78:12:f9:64:eb:e7:43:d1:37:d8:e0:62:7e:
                    89:b3:b5:5b:a3:ee:65:b0:4c:86:a1:ed:dc:6c:18:
                    a4:cc:30:c7:ad:1b:29:e4:f0:da:d3:60:94:77:7b:
                    ba:6b:0f:6b:1e:1f:d7:e0:c4:b1:bf:fd:14:9f:09:
                    32:fd:2d:cb:17:62:29:0b:f5:1e:53:b9:e4:0a:81:
                    bd:ed:ff:92:b3:79:92:3c:e0:a2:7d:f9:c2:50:8f:
                    68:23:03:aa:4b:18:88:f6:f8:3b:a7:db:4b:bf:9a:
                    9e:46:85:31:0e:15:d8:cc:dd:f6:86:05:fc:0d:30:
                    59:26:5a:bd:bd:d1:70:ba:e4:3b:71:dd:dc:b2:24:
                    c9:b6:5a:0a:59:40:ac:6e:f6:b5:b5:2f:99:6c:f2:
                    ea:3c:ec:95:11:6a:5a:ca:99:85:67:0e:1e:96:64:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:5F:CD:A0:9A:14:11:8E:FB:38:D9:7C:C6:C6:70:B6:E1:8B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74a9338-3a85-325b-b7bd-8c996e58d445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:65:48:43:12:7c:1e:4b:cd:c9:25:f5:c8:2d:c6:88:3d:0e:
         27:65:b8:0d:21:a8:35:43:b6:c6:d7:99:99:f8:8f:33:8d:10:
         e0:83:ac:77:bd:9e:3f:d1:4b:07:2b:bc:10:76:b9:01:42:7c:
         a1:78:b0:d9:f1:a1:c2:b7:d0:ab:aa:e0:b2:d5:09:9d:c2:8d:
         90:c5:e8:63:8e:be:a3:88:1d:13:e9:65:54:93:b7:d6:03:bb:
         b8:45:7b:08:ba:46:66:3e:a1:29:0f:44:d4:41:84:c3:e3:ff:
         78:a7:60:95:d3:53:cb:af:79:e0:04:55:05:21:b7:c1:12:66:
         84:06:31:ca:5a:6c:11:aa:f5:30:8d:65:30:aa:5a:cb:78:4d:
         b6:b9:49:d1:aa:5e:44:00:67:6b:76:e8:bd:d8:70:e9:c6:3b:
         74:86:54:8e:b2:45:5d:ff:1c:84:59:d1:ed:fd:43:01:c8:89:
         e9:10:0d:55:d1:f4:82:e7:f1:61:81:09:bf:1a:f3:45:21:3b:
         33:21:78:20:2d:5e:60:6e:a2:87:a3:0b:18:93:0b:ca:1c:b0:
         a1:d5:eb:72:0c:2a:1b:a2:ef:96:e9:5b:16:62:a6:2e:3d:be:
         60:b9:b6:71:3b:e6:a7:28:56:7b:de:eb:43:a8:d1:83:cf:30:
         a7:30:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:34:21 2026 by rpki-client