Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11236ff-4204-3b2e-882d-78bf664c557a.roa
File:                     b11236ff-4204-3b2e-882d-78bf664c557a.roa (raw, json)
Hash identifier:          hDJ7mwSaF/u50dBd8SbX8IyeEsrqK1frEg/qElmObaI=
Subject key identifier:   1E:96:24:77:78:AF:5E:63:E9:33:C6:0E:1A:1C:BF:02:7A:04:0C:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A501072C1FA1E4C05ABDB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11236ff-4204-3b2e-882d-78bf664c557a.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.44.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:10:72:c1:fa:1e:4c:05:ab:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=ec5faa0e-8d50-4757-8a82-294c061cfb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:f9:8f:08:47:4f:ff:3b:2b:42:61:66:da:
                    84:f7:a3:ff:4a:cc:1b:7b:96:cd:dd:43:39:63:9d:
                    19:e2:bf:48:7d:81:40:65:18:9f:75:1c:a5:1f:37:
                    c0:41:56:6e:d8:7f:5e:fa:2e:62:7d:4a:c2:08:3e:
                    8e:27:f5:55:b5:e9:6c:c9:80:25:7e:2f:14:07:a4:
                    0e:c8:cf:28:fe:78:2f:5e:18:52:3f:4d:19:59:21:
                    87:63:33:d7:19:f4:2b:6a:56:56:73:78:a9:a2:0e:
                    0e:89:f8:1f:10:d5:46:1d:60:b0:10:86:b3:fc:b9:
                    d3:0a:71:fa:f3:1d:2d:47:23:e6:cf:4e:eb:f2:73:
                    3a:0a:2c:fb:ab:26:78:c3:0e:6f:52:46:86:99:62:
                    d0:4c:92:2c:3b:6c:fe:80:1a:5e:95:dc:48:64:a7:
                    c7:47:8f:b1:ad:ef:4a:3d:26:bc:56:bf:14:93:4d:
                    d9:4d:b2:2f:88:1a:53:3c:99:68:7e:96:6b:53:06:
                    e4:ec:d2:0e:62:8d:8a:a8:db:54:6a:f2:2b:ea:47:
                    9e:4e:b1:04:0f:d0:0b:90:db:f0:e1:69:54:fe:46:
                    90:0b:07:5a:7c:de:2f:fa:d2:c3:76:5c:4f:e2:f6:
                    e8:41:9c:98:32:60:dc:2c:1f:79:da:0f:5c:ea:6b:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:96:24:77:78:AF:5E:63:E9:33:C6:0E:1A:1C:BF:02:7A:04:0C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11236ff-4204-3b2e-882d-78bf664c557a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:e0:ee:2b:1a:80:bb:db:a2:8b:0d:5a:56:26:52:0e:40:
         94:39:26:87:14:89:9b:62:db:aa:ec:1e:e9:f4:50:29:d8:5b:
         af:fd:fb:02:6e:37:83:98:28:8f:07:56:63:bc:b9:5b:33:87:
         db:ba:1d:ef:13:8e:eb:fa:94:3f:6d:89:c2:f9:be:ee:02:e1:
         c3:0b:2f:3f:ad:06:a9:23:c9:9b:98:e7:16:42:32:dc:02:2a:
         8f:e7:c7:30:ba:32:b6:0a:5d:ea:89:5c:82:b7:2d:96:6b:9e:
         bf:e1:fc:03:6d:8b:5c:a0:17:6a:8c:91:ff:06:4c:4f:2a:ec:
         dd:dc:c3:39:10:ad:d0:73:64:33:ad:7c:d1:b1:48:48:3b:5e:
         bc:a2:04:d2:cb:cd:45:c6:2b:8d:24:32:b3:5c:6c:37:eb:50:
         a4:85:c2:35:7a:44:86:b8:76:38:d5:be:bf:b2:06:a4:78:9e:
         9a:08:03:83:47:c6:f1:7f:98:d7:87:75:15:45:ef:a4:1a:40:
         8e:82:a1:34:06:7a:9a:5d:a1:d2:2c:e2:45:a4:b5:d6:6b:8b:
         4e:0c:f1:7d:13:9b:53:c1:8e:74:a6:75:13:07:4c:55:27:0f:
         90:b7:c6:1b:b4:76:bc:a5:40:e6:32:fe:9f:3a:a7:04:0e:41:
         86:71:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 08:10:10 2026 by rpki-client