Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32cebfb-b187-30f3-81ec-6dd877c28f9b.roa
File:                     d32cebfb-b187-30f3-81ec-6dd877c28f9b.roa (raw, json)
Hash identifier:          z+jI8R7S685pQefzpYEosoFj8kG1T3FRlTXOs6uL4YA=
Subject key identifier:   AA:B6:3A:F2:18:20:CE:B8:C7:83:BB:15:DA:15:5E:66:A1:85:97:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C0C8CA3FEE9FCF16C7030
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32cebfb-b187-30f3-81ec-6dd877c28f9b.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        98.225.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:0c:8c:a3:fe:e9:fc:f1:6c:70:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=349337f3-a655-48e4-9b8b-eacdcc216eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:cd:c9:55:e9:e3:8b:2c:77:68:51:04:9e:
                    30:91:23:f7:7a:ec:c5:38:b7:46:e1:d4:a0:df:d1:
                    e4:12:59:92:85:cc:f9:90:68:91:c9:3e:76:4b:4b:
                    58:8f:2a:3f:7f:ca:69:8e:f7:2d:4f:0a:8d:9f:1f:
                    de:d6:f0:24:20:bb:96:a1:57:d1:d7:80:fc:e0:31:
                    26:84:99:0a:ce:e5:b0:14:8e:39:59:4f:fc:69:9a:
                    58:fb:77:e9:25:c7:00:91:29:63:30:95:ce:90:c0:
                    ba:22:ff:b5:a5:09:9c:25:a7:60:69:8a:7f:81:05:
                    03:5e:24:89:ba:44:35:b0:28:85:c2:6d:19:35:e0:
                    38:07:b9:ba:e3:48:98:17:d5:62:fb:04:64:a6:c9:
                    e8:aa:35:14:67:59:82:6b:28:60:30:49:f3:4e:7a:
                    45:9f:f2:dd:59:94:d4:24:3a:b6:50:c9:ad:64:e7:
                    98:d7:d8:45:6a:77:cc:11:62:ab:a3:f4:84:df:67:
                    19:59:db:ec:9b:b8:b4:f7:d9:d8:e7:ec:d4:ed:e3:
                    5f:1f:53:68:9c:4f:59:94:45:8e:30:38:3f:e4:42:
                    15:c9:21:1b:05:4b:64:08:81:5d:fc:ba:aa:70:3f:
                    54:a6:c8:bb:b1:a5:8f:11:e6:11:43:0e:7e:3d:5c:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B6:3A:F2:18:20:CE:B8:C7:83:BB:15:DA:15:5E:66:A1:85:97:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32cebfb-b187-30f3-81ec-6dd877c28f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.225.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:1a:a0:51:a0:01:24:a0:41:4d:7c:aa:16:de:f8:b8:bb:60:
         a3:93:e3:75:fb:a5:84:04:b5:32:da:c1:c9:a0:42:93:3e:c2:
         eb:09:d7:70:37:a8:84:56:ea:8e:2e:84:31:e0:e4:91:61:1a:
         3a:65:8c:44:65:16:62:0c:62:0b:0b:9a:cd:f0:fd:b1:9d:b3:
         46:11:82:90:f1:fc:68:f6:3e:14:b5:76:52:d9:96:76:59:ec:
         ea:c4:14:3b:f2:20:45:49:2c:d9:70:a1:e5:5c:f0:a8:de:7c:
         65:77:0c:1c:1d:77:96:4f:b2:70:75:36:dd:60:db:d6:b6:d5:
         07:d4:5a:21:ca:dd:c1:62:88:6e:75:8d:63:c5:d0:f9:73:58:
         78:7e:ad:10:26:7b:91:4b:5e:f4:a3:f4:8e:13:30:66:4d:70:
         22:e9:bc:8b:f7:13:4c:3f:89:6b:2e:7b:68:95:ee:bc:06:35:
         7f:e0:0e:72:64:95:16:18:a2:a9:9c:49:ea:2c:13:ca:16:93:
         74:21:6e:22:3e:a1:9c:c5:e9:1c:89:ff:9d:71:75:8c:36:9c:
         e4:2a:c4:e0:d5:2b:61:a5:04:57:49:a6:1f:80:2a:24:c6:ba:
         6b:bc:2c:b0:b8:67:3e:c3:1d:85:5b:c4:e5:b4:2f:2e:3b:7f:
         f5:eb:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:44:27 2026 by rpki-client