Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba19256-d066-3b54-8a29-63c9ee34d871.roa
File:                     dba19256-d066-3b54-8a29-63c9ee34d871.roa (raw, json)
Hash identifier:          OLuMucJn0XHahSRh4f2a5SPkRp290vf5WmGiD3r0iAg=
Subject key identifier:   43:10:72:86:20:16:D7:81:D2:B6:74:8E:04:7B:AE:7D:AF:8C:29:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EC80135C80BEBDA2ADB3C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba19256-d066-3b54-8a29-63c9ee34d871.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.198.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:c8:01:35:c8:0b:eb:da:2a:db:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=d53788c3-6ff8-45bc-a3b3-5232e8a7ec79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:0f:4a:a3:3f:a7:92:30:e5:c9:37:4b:70:
                    c1:47:98:3f:b9:bb:86:18:86:98:c8:97:40:32:78:
                    ca:97:fb:fa:38:ba:c8:40:b6:61:c6:0b:c6:58:65:
                    e5:1e:75:26:7b:bb:b4:e4:d9:8f:aa:d6:57:51:59:
                    b7:80:7b:11:54:b6:46:95:d1:c5:df:e7:5b:ad:dc:
                    4a:cf:3c:9f:b3:fb:71:51:56:f2:a0:b3:2e:f2:8c:
                    75:49:84:23:05:79:3e:a9:5e:0b:2a:52:00:30:2d:
                    23:8e:ca:ad:c8:13:73:fe:e7:87:3d:a9:2d:30:b7:
                    10:6b:e6:77:a9:cd:7d:31:c3:b2:44:23:6d:09:ac:
                    0d:12:81:cf:7f:81:b3:4c:59:38:84:4d:7b:c0:dd:
                    73:b0:c1:5b:cb:b6:82:b5:a9:b8:c5:85:2a:1f:0d:
                    de:93:42:8c:64:83:c4:9b:64:36:7b:99:d0:4e:29:
                    f5:a2:94:6b:53:75:27:37:b4:d3:a8:88:c8:e0:63:
                    4e:79:60:dd:ba:c7:8b:1c:af:a5:04:12:57:e4:87:
                    44:db:a9:7c:c1:1f:b1:23:7f:30:e0:10:07:f6:9d:
                    71:46:79:99:a1:20:f9:9c:fc:ab:2c:fa:5b:8e:a1:
                    0b:29:c7:3a:70:c3:8b:09:fd:59:e8:93:31:bc:1a:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:10:72:86:20:16:D7:81:D2:B6:74:8E:04:7B:AE:7D:AF:8C:29:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba19256-d066-3b54-8a29-63c9ee34d871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:63:0c:94:da:3f:7c:d8:83:37:92:87:e8:9b:59:7f:2f:
         ef:5c:a4:1b:09:e8:61:a4:a1:7a:00:0d:4c:cc:6e:6d:50:40:
         62:7a:f9:1d:ab:93:13:fa:28:7d:cf:ad:2e:e3:fa:c4:07:cf:
         ff:6b:aa:44:9c:03:eb:d3:cb:df:5f:ab:9e:a3:0d:4c:c6:54:
         c6:64:91:4d:a7:ae:a3:23:2a:40:ea:87:67:76:6e:49:4f:19:
         a5:1f:55:79:52:0e:6d:40:42:92:98:9d:4e:80:6b:3c:2b:f4:
         b4:a7:67:42:78:d5:db:55:52:11:ee:a3:22:82:b7:51:f7:79:
         23:4f:c4:76:c4:aa:ed:83:0f:15:49:c1:88:6d:97:77:52:af:
         07:9a:cf:b9:83:5e:7f:41:70:ac:3c:15:73:89:47:a2:c9:e9:
         10:07:30:8c:5a:ec:93:55:bb:d6:cd:e7:2f:ec:1e:17:cb:e6:
         1c:e6:8e:2e:9b:93:21:d7:94:6b:aa:da:ea:9c:9b:8b:87:ff:
         24:6e:2c:f1:09:e5:f9:ec:2b:0e:58:fe:b7:44:00:2c:46:3a:
         bf:cf:45:45:ea:5d:bb:c5:b3:47:fb:c5:04:97:b4:22:2a:8f:
         21:10:4a:74:ad:89:da:71:32:e7:49:05:b2:47:1d:47:6d:07:
         d4:db:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:45:03 2026 by rpki-client