Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a80ba6a2-88c1-3f01-aeea-d55439088577.roa
File:                     a80ba6a2-88c1-3f01-aeea-d55439088577.roa (raw, json)
Hash identifier:          JMQl9Y0S4nvxvN45xCw+RRNSe3SskHTuCuHv7iZPg/o=
Subject key identifier:   07:86:2C:65:BE:8A:9F:A1:DE:C3:DF:03:A0:B2:C8:1C:5E:C4:BD:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED4322192FE1792C99CDD9A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a80ba6a2-88c1-3f01-aeea-d55439088577.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        98.54.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:21:92:fe:17:92:c9:9c:dd:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=e0e5fa3a-b745-4db4-a35a-097fcf72876c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:a8:2a:c7:b0:be:21:6e:bb:2d:2e:b9:2e:
                    93:90:51:38:8f:5d:cd:84:47:11:c3:c8:cd:ca:65:
                    b4:21:42:f5:c4:b1:eb:fc:00:59:b0:cc:8d:d9:0a:
                    b2:61:f3:ae:ba:fd:08:c4:15:f8:65:f8:78:82:26:
                    5e:48:30:09:8f:a5:fa:87:10:08:fc:eb:df:b8:e4:
                    50:b2:b7:38:32:5a:ac:15:e7:7e:3a:61:ed:d3:fa:
                    65:1b:a1:c6:25:51:90:2a:59:2f:6b:09:ff:f8:8f:
                    ae:d7:80:4b:bb:83:91:c4:0a:46:dc:5b:e9:f2:96:
                    b8:a5:8c:8c:56:33:59:fd:77:d7:41:02:ea:68:b4:
                    0c:14:e0:c0:e4:ab:09:4e:4d:bf:36:92:7c:c5:95:
                    fb:71:fb:70:be:7e:7f:f6:c4:e3:2f:3c:06:a4:41:
                    fb:6d:37:86:4e:61:7a:04:c4:9e:18:e0:e2:4c:8f:
                    91:76:4c:0c:3e:32:31:ed:da:50:c8:26:92:4f:76:
                    84:36:46:38:52:a5:0f:d1:1f:52:dc:8d:94:3c:15:
                    9f:d4:24:0d:3b:38:e3:81:20:de:da:f9:b8:43:ed:
                    20:1b:b4:23:f0:f0:22:c8:c4:82:5b:b4:b5:b1:3f:
                    16:d4:60:ff:bc:4b:1e:f2:66:37:65:0e:b8:5f:21:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:86:2C:65:BE:8A:9F:A1:DE:C3:DF:03:A0:B2:C8:1C:5E:C4:BD:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a80ba6a2-88c1-3f01-aeea-d55439088577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:5a:5a:c8:08:65:50:05:4f:aa:1b:c9:91:a5:97:d7:bf:
         df:b4:43:a0:4c:45:30:33:28:db:3d:34:2c:59:15:a6:17:7a:
         13:b4:1d:f5:97:cd:03:12:dd:46:c8:2c:6d:de:8f:7c:00:ff:
         d7:3d:e6:4b:61:08:9d:82:ea:5b:1b:3f:09:c9:a6:ff:f6:56:
         a7:30:c1:4e:9e:30:d7:be:c9:0f:41:94:eb:6c:88:31:2d:d3:
         c0:ae:25:30:82:a9:1c:29:d3:ab:89:1d:c7:70:b9:35:34:1f:
         cc:5c:df:f9:91:ac:ff:c8:94:58:fc:56:0a:76:8a:d7:83:67:
         f0:54:91:b2:97:f2:14:3e:09:0f:2e:9a:9a:07:fb:af:1b:8d:
         c6:5b:45:3f:d3:a9:11:a9:38:60:e6:ea:62:49:35:4d:30:e1:
         26:ce:6e:ce:d9:c7:7d:4a:dc:13:65:0b:7a:bd:d3:98:c0:dc:
         e2:74:31:c0:67:fc:e1:85:ce:6e:44:8b:22:61:ae:9d:0a:60:
         1e:3f:fe:31:99:63:10:bb:08:ec:c4:fb:5a:21:c5:17:02:54:
         d2:dd:50:86:be:7d:0c:97:98:56:d0:76:f8:ba:93:be:66:8b:
         39:4b:66:2e:7c:8b:fb:23:46:1e:2c:16:c8:ea:ce:c9:28:c5:
         fb:fc:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:23:12 2026 by rpki-client