Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6db5947-fdb9-35b0-b599-5b438d90d618.roa
File:                     b6db5947-fdb9-35b0-b599-5b438d90d618.roa (raw, json)
Hash identifier:          ChvuTeXg21qYyPKGP4cMLY9i3l1O5gtgg3e8hXsIxiY=
Subject key identifier:   32:2F:68:CC:4B:F9:16:47:12:D0:8B:F5:D3:65:6F:A6:81:7A:E4:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B89AFE5E4261B427B13C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6db5947-fdb9-35b0-b599-5b438d90d618.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        98.210.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:89:af:e5:e4:26:1b:42:7b:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8393a22e-3a8b-4f82-81ba-d98a9d0e0722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:92:5f:f8:ab:55:0a:f4:e1:6b:51:41:5b:
                    5d:f5:64:73:cc:6a:60:a8:05:15:7a:e3:8e:6d:28:
                    da:6a:51:a3:53:bc:be:75:e1:36:27:65:3c:6a:6c:
                    dc:ff:61:ac:78:eb:3a:db:9b:04:e9:60:30:a9:c9:
                    1d:5d:2e:16:4d:d1:c5:5e:3d:02:7e:a9:53:ef:9c:
                    f2:fd:00:55:5b:f7:4e:f7:cf:8e:62:1f:fe:2f:4f:
                    6c:73:ce:f5:a7:35:0e:3f:fe:ee:84:66:01:ab:16:
                    51:d6:0c:be:ba:e7:f5:69:08:ad:1d:ac:55:53:cb:
                    e1:35:c3:48:ec:0c:04:51:c3:1c:96:25:df:0b:8d:
                    af:08:94:56:9e:db:9b:a7:c8:10:2a:1a:3b:6b:67:
                    aa:cd:80:60:95:83:59:8a:c1:c4:25:ef:47:3c:4c:
                    77:a5:67:58:bc:81:9e:25:7c:db:fd:e4:45:55:3b:
                    58:79:b1:de:6b:dd:34:d0:63:e9:f0:b5:5f:25:19:
                    69:e4:dd:92:c8:a4:b4:b7:82:af:e9:fe:ee:42:34:
                    8a:6c:cd:b1:41:bb:a4:58:4b:b1:94:d7:af:aa:bc:
                    24:2b:e5:3a:2a:73:4f:5d:a1:16:88:91:23:b1:c9:
                    15:ac:77:49:78:c9:67:11:16:38:7b:e3:ab:8e:99:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:68:CC:4B:F9:16:47:12:D0:8B:F5:D3:65:6F:A6:81:7A:E4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6db5947-fdb9-35b0-b599-5b438d90d618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.210.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:14:d9:48:9e:d0:b8:9f:05:c3:c9:1a:e3:5f:a0:5f:cc:40:
         20:1a:03:2b:3c:ff:41:ae:89:9c:50:f3:80:b8:6d:d2:2d:04:
         89:be:b0:2a:70:eb:b1:9d:68:4d:78:49:d8:2f:5f:da:9b:15:
         c3:3f:d2:e6:d0:52:9f:ea:9d:c5:98:a0:5b:00:29:46:ef:bf:
         12:4a:5b:2b:86:c3:06:48:70:5a:2e:f2:fd:8b:52:59:3e:fc:
         6e:35:7c:b9:94:da:36:da:fe:f1:d6:1b:8d:5d:56:20:66:ec:
         99:bc:0c:d8:94:55:78:d6:32:23:7b:27:61:1e:a8:f4:22:66:
         12:1f:96:45:1e:8b:dc:44:fe:14:56:c9:78:e7:4d:49:66:f8:
         81:ea:f5:d9:c5:35:05:02:46:df:5e:8d:8b:9a:e6:ce:ce:5e:
         81:65:6e:26:3c:9b:e3:3f:e0:a6:fc:2c:a4:32:00:5f:32:8c:
         e9:03:95:f2:9a:f6:0d:b0:5f:92:1f:57:58:f6:5e:cf:34:1e:
         5f:ea:de:e3:bd:61:31:2a:f0:30:e7:59:f7:05:05:d5:a0:7e:
         1e:e5:14:98:92:d6:39:fd:5e:2f:52:bb:d5:7f:57:c6:ae:39:
         1b:ce:4f:62:06:77:43:7f:02:06:1d:54:3a:5b:d4:a3:5d:a6:
         ca:e4:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:14:35 2026 by rpki-client