Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70266b6-2ad0-3d47-bffe-87c0ab8dbdd9.roa
File:                     d70266b6-2ad0-3d47-bffe-87c0ab8dbdd9.roa (raw, json)
Hash identifier:          jaLqYhOZeTpPmcJ6BdYZwjjLe4Exy8wzPdJW2bmV1Fo=
Subject key identifier:   1A:C2:E9:8B:5C:C4:9C:5F:65:18:5E:DF:D8:15:06:F1:F1:7F:E2:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4DCEC36AE6B3E73BF34580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70266b6-2ad0-3d47-bffe-87c0ab8dbdd9.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        98.232.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:ce:c3:6a:e6:b3:e7:3b:f3:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=d9426557-6e09-4067-bf31-1ae68dfb77e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:a4:e2:5e:89:c3:e8:16:fb:94:7f:2f:ea:
                    5d:66:78:bc:5f:5c:d8:dd:b7:01:a3:46:a5:1c:14:
                    6f:8d:24:0c:3d:f0:43:7b:f6:ed:97:3d:a7:8b:18:
                    8b:ec:24:ab:66:23:dc:57:4c:94:7c:77:12:e5:36:
                    e7:50:2e:36:ff:b9:1f:4c:45:65:8f:99:7f:5b:98:
                    32:53:3e:ad:0b:2a:ce:eb:7e:2b:3d:be:2a:50:0c:
                    89:15:3d:f3:6d:61:3c:3b:b2:c2:38:02:d9:df:f5:
                    06:4d:a1:e3:0d:24:b0:4a:91:51:bc:6e:33:4e:6d:
                    f0:b8:71:86:96:77:68:21:b6:4b:93:f7:79:c6:0e:
                    d8:02:52:14:3d:77:8c:6c:70:e9:cf:f4:c3:6f:49:
                    be:19:85:8c:92:d3:16:3d:a1:5a:ca:33:3d:d9:ff:
                    f3:7a:3f:32:cc:6a:60:40:71:b9:f9:94:56:52:fa:
                    3e:f3:12:b8:86:9f:28:a5:5d:0b:77:bd:3c:74:00:
                    a4:69:78:f7:99:c1:61:bd:fc:9e:58:cd:11:ed:64:
                    c1:0c:53:7e:d1:67:11:f4:c1:51:3e:d4:b8:67:d7:
                    44:bd:e2:c1:9a:04:8c:e0:02:04:a1:b2:9c:39:8b:
                    14:97:16:99:ff:99:97:9d:8d:c3:a4:18:cd:e2:a7:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:E9:8B:5C:C4:9C:5F:65:18:5E:DF:D8:15:06:F1:F1:7F:E2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70266b6-2ad0-3d47-bffe-87c0ab8dbdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.232.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:0b:d0:c1:84:9d:76:23:fb:ec:29:79:96:c6:4a:95:a0:
         ae:89:64:35:b4:64:f3:a4:4f:7b:e6:26:25:03:39:db:a8:57:
         93:40:0f:74:84:8f:15:aa:08:32:5d:48:df:f2:7f:f5:e5:15:
         3f:c2:58:27:5e:0f:75:07:18:5b:4e:03:a2:70:b5:e2:fe:a4:
         9b:45:61:6d:23:4f:2b:69:26:e0:34:48:13:c5:17:50:24:43:
         56:5e:ab:b0:4f:ac:93:79:e7:d0:da:9c:ba:c0:25:70:25:db:
         99:8c:22:2d:d2:c3:10:5e:59:c8:fb:c1:af:de:07:a9:96:ef:
         4c:1e:47:cf:c0:ca:d7:45:b6:b3:34:81:de:61:f6:ec:6b:1f:
         b7:57:9a:a8:dd:ba:d0:df:5e:78:f3:d6:34:88:7d:5f:30:2a:
         36:f9:29:e9:20:a4:66:e5:bc:12:81:06:08:8e:00:6d:2c:c9:
         05:ca:46:ca:0c:20:dc:51:ec:e6:5c:14:37:1b:d7:a3:c5:98:
         81:90:97:5d:e1:06:a4:89:9b:d7:7e:4c:fa:ec:43:a4:66:17:
         41:79:55:d9:55:cb:26:d7:57:4b:1f:43:b7:42:ff:cf:d7:92:
         6f:68:11:a2:8c:fc:1e:82:b2:e6:8b:c5:db:85:e9:fa:84:f8:
         cf:74:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:17:35 2026 by rpki-client