Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa
File:                     ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa (raw, json)
Hash identifier:          0fYOgPQZP0s1FQfm3av9nbTLVIFJDGWDQnYcP1odkfo=
Subject key identifier:   C5:1A:0E:69:2C:E3:51:F5:77:2C:49:99:3D:D1:48:77:C6:75:6A:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E2295238446163DA8DC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        98.63.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:22:95:23:84:46:16:3d:a8:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=61a195fa-7a02-4147-b617-7e622fa68004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:e1:51:e5:97:bc:c3:c8:f6:75:3a:d7:18:
                    1d:6f:5b:18:54:bb:01:68:60:82:27:ce:7e:a3:5e:
                    0e:d8:42:4e:cc:4f:d0:9c:de:18:04:bd:e2:b9:d0:
                    ed:49:0e:2d:03:98:8a:dc:99:9f:c8:d5:31:af:d2:
                    dc:fc:7d:3a:a5:ff:e6:99:0f:48:72:02:a8:3b:00:
                    c7:96:9e:a6:7b:45:f4:67:9e:bd:49:b3:b5:fe:d1:
                    6a:8a:81:2c:08:f1:8b:57:f5:05:4d:5f:1f:1e:47:
                    fb:58:e1:81:90:b0:71:e4:1a:a2:dd:00:4f:c9:db:
                    d2:fb:40:0c:34:28:87:d7:79:b7:ea:52:31:82:2a:
                    1a:3e:46:ad:91:79:dd:83:d1:f0:aa:d4:9a:51:a2:
                    96:95:5e:6e:75:ce:c9:18:8c:03:17:2a:b7:8a:61:
                    83:eb:7b:44:e7:8c:8d:72:99:f6:cb:e3:cb:2c:ec:
                    8b:6b:10:5f:8f:fb:0c:43:90:fa:42:57:fb:6c:ec:
                    f0:d8:c3:4d:ab:bc:91:f6:19:c8:9d:b3:6a:69:e4:
                    29:68:cb:57:6d:c3:ed:7e:0b:99:a8:c3:94:43:dd:
                    3d:2b:19:8b:c5:bf:af:dc:87:4f:6c:1e:73:6e:c3:
                    d6:36:cb:78:24:27:c8:b3:8d:16:5b:95:24:44:fe:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1A:0E:69:2C:E3:51:F5:77:2C:49:99:3D:D1:48:77:C6:75:6A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.63.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:79:5b:bc:61:7b:77:e0:f3:12:14:ff:7f:d6:c5:ab:f7:8a:
         12:5d:5e:47:56:d4:18:43:a3:b8:c9:35:7a:9d:9c:7a:ed:35:
         2f:5a:02:4c:8e:1f:24:1f:41:4f:8a:5c:f6:66:d6:9c:b8:11:
         0e:de:28:8e:27:36:19:c0:7d:0f:3a:89:a7:11:3a:7e:6e:8c:
         7e:05:0a:97:53:a2:c7:d4:dc:02:53:d8:68:12:ec:d3:1d:21:
         ba:cb:b2:ad:63:93:84:d0:cf:0b:d9:4c:81:8c:0f:c9:80:f5:
         2c:74:2a:b8:1e:e3:54:b3:03:fc:d0:6a:c3:f4:9c:6b:46:36:
         3a:50:50:0f:76:3e:4e:ea:2c:46:1a:9d:38:8b:e6:ff:db:35:
         46:d8:6a:34:c2:7b:27:64:5f:64:c7:ce:8a:12:ed:94:ac:1d:
         79:71:df:30:81:77:4d:57:a8:6a:d3:a2:90:79:fa:04:7d:bf:
         16:c4:4f:f9:07:26:f9:2f:a2:5d:7b:39:cd:57:ea:06:aa:8b:
         81:7c:ed:88:b1:ec:a2:f5:59:7a:c9:57:23:76:f7:98:e9:fc:
         00:aa:23:6d:f3:9e:74:d1:ed:73:2d:ff:72:b6:31:0e:1b:de:
         4e:5f:79:8f:3b:4f:ab:8d:89:f8:cb:37:ce:f8:99:fe:46:ec:
         b7:f0:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:12:30 2026 by rpki-client