Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5daf018-cb54-30e8-bd50-c4df8b179873.roa
File:                     d5daf018-cb54-30e8-bd50-c4df8b179873.roa (raw, json)
Hash identifier:          TRnULH+BhgbrmDSvG18JIUr+J8BQaJ9kbFkkcCcsN7g=
Subject key identifier:   5D:9D:0D:2C:4D:67:E9:5A:5E:75:FE:24:63:B3:12:F1:4B:17:33:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E92A2240A5529DA149B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5daf018-cb54-30e8-bd50-c4df8b179873.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        98.250.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:92:a2:24:0a:55:29:da:14:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=bfe6505b-3264-407c-add1-a3aba9d79c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:9b:c9:e1:56:ab:85:26:b0:08:70:39:e1:
                    26:f1:0e:65:ff:4f:6f:b9:bc:2f:0f:89:4a:92:f3:
                    43:1a:ac:5d:21:77:c9:fa:55:6a:c7:45:7d:aa:45:
                    56:a0:44:dc:85:ae:5a:a8:72:d6:ed:f4:1c:8a:58:
                    a6:23:31:83:1a:a0:05:fc:ca:e3:bb:8c:d4:95:74:
                    10:b3:e0:87:69:64:73:54:32:3f:ec:e4:f6:02:dc:
                    fc:fc:89:64:6b:f1:23:95:69:ac:17:e8:a5:8c:b9:
                    64:b6:d4:c2:ba:03:bf:65:b5:c4:74:c6:59:51:13:
                    7a:58:f7:e8:de:bd:c7:37:08:44:07:1e:67:78:19:
                    75:53:81:35:9f:42:25:f2:33:fa:34:20:e6:23:8c:
                    ea:e5:65:90:b4:5a:a6:76:81:f3:88:61:a6:bb:cf:
                    f8:8c:de:38:2b:20:5e:4c:5c:1c:c3:7c:85:00:6f:
                    62:50:1c:47:69:ee:c4:bd:f7:33:00:ae:15:d1:d5:
                    bb:45:6d:6c:9e:37:12:0f:93:6d:c3:f6:f3:6b:67:
                    d5:84:ed:25:16:7b:a4:f2:e2:27:94:4f:74:e5:32:
                    87:ec:a5:4e:61:8e:03:61:97:a9:d3:bf:af:5d:32:
                    9b:be:0c:da:5a:f4:71:6d:6d:8f:88:19:ee:f7:ba:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:0D:2C:4D:67:E9:5A:5E:75:FE:24:63:B3:12:F1:4B:17:33:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5daf018-cb54-30e8-bd50-c4df8b179873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:87:f6:3d:38:49:24:7b:99:2e:8d:86:47:57:77:24:18:ca:
         99:8a:92:76:48:62:64:e6:6a:c0:20:59:c6:27:10:0a:81:f3:
         56:b2:b8:e6:3d:f9:25:30:e5:3f:e7:52:72:f7:40:b4:73:25:
         98:bb:81:ae:3f:34:81:f5:8e:0d:ca:84:9a:9a:28:78:b4:6d:
         1d:bc:2c:36:25:c9:4d:b5:e1:ce:1f:99:1f:51:17:8b:32:fd:
         f8:98:9b:20:d9:a8:39:74:4e:72:58:3c:4d:c6:07:ed:64:dc:
         d0:3c:48:fb:b3:da:f0:19:72:2f:e0:05:00:0a:f2:36:e2:f8:
         cf:2b:8b:e9:3d:d0:2f:49:41:3c:b9:4d:e4:f7:26:31:52:ef:
         10:14:b8:86:bf:26:bd:9f:20:32:88:f2:b2:36:08:fb:d5:af:
         f0:3d:75:bc:d6:27:b0:4b:cc:de:a5:4e:bd:c1:18:7f:e9:11:
         b2:47:1f:1c:3e:21:93:86:fd:75:16:59:12:0e:8f:80:ce:3a:
         b1:e7:3f:2e:ab:43:4a:b0:39:1f:e3:03:19:68:55:2c:9a:a8:
         1f:e6:27:5b:76:67:aa:e6:b9:98:2e:96:31:dc:30:c6:05:f7:
         c5:23:90:f9:7f:d0:70:ef:e6:6a:33:7c:50:59:ae:f0:c4:c3:
         e2:52:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:38:28 2026 by rpki-client