Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa
File:                     df15b386-d80e-3d23-9139-81a14db2e677.roa (raw, json)
Hash identifier:          FpbKJD+cDgKHjtwzCVI/CtNJot3mTkZzCbc/OI9yd04=
Subject key identifier:   92:53:D4:5E:2E:87:9A:72:94:5C:B1:DC:DB:EE:12:E9:E7:F9:34:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF93977B99FD6EB91AD7580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        98.248.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:39:77:b9:9f:d6:eb:91:ad:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c03b05d8-a8e7-42da-a73c-851bbd86b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:1e:fd:a9:14:be:b2:53:81:2e:0c:d1:a3:
                    85:13:78:1c:1c:30:c4:cd:d3:de:61:42:bd:b2:dc:
                    4c:cd:2b:35:64:7b:4d:15:31:39:6e:34:39:a2:a8:
                    c2:17:0c:28:89:1d:24:1e:b3:85:60:33:28:c1:24:
                    b3:39:20:d6:8f:d6:02:06:32:16:22:5b:4a:3e:96:
                    56:7f:fc:61:d9:a2:5a:61:f9:43:6d:8d:6c:8a:ae:
                    52:1d:1a:9b:7e:4d:fc:23:05:d8:4b:ae:63:b6:07:
                    5e:67:8c:9c:93:24:35:dc:8b:f4:0d:dd:51:fa:43:
                    cf:3a:8d:48:49:ca:23:9a:a8:c5:e4:1f:ad:33:73:
                    21:c7:ab:88:c7:7d:e1:a0:33:8a:5e:0a:dc:e4:fa:
                    42:73:24:06:9a:c9:5c:c6:5c:ae:8c:15:16:ae:b4:
                    ce:a5:7f:0e:ed:69:eb:73:b4:fc:0a:07:f8:b3:b4:
                    ce:74:df:f3:50:46:b2:31:49:ff:52:83:cc:ce:ac:
                    4d:41:33:21:3d:9e:71:90:2b:2f:2f:c1:4e:50:47:
                    45:79:3e:07:7b:25:2f:16:ac:93:a0:98:33:a4:97:
                    35:ed:65:83:6f:82:2a:6b:6e:34:a8:dc:2b:e2:ec:
                    7a:cb:61:2d:fd:5c:bb:67:a7:6a:ac:52:26:c6:d7:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:53:D4:5E:2E:87:9A:72:94:5C:B1:DC:DB:EE:12:E9:E7:F9:34:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.248.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:6c:ac:c1:3f:1f:97:09:20:75:45:3b:77:46:2c:d9:ac:
         62:9f:81:ee:7c:0b:7a:d8:da:be:13:08:f8:25:dc:e3:8b:48:
         bd:2a:de:9d:b7:0c:34:04:2d:bb:45:11:96:a1:6d:ad:ac:1f:
         85:02:45:c9:bc:ea:f8:a0:db:ce:7e:c3:d6:6c:1e:dc:3c:8b:
         db:04:e6:0c:95:f6:21:0a:90:40:2f:d3:be:dc:83:f2:99:a0:
         13:3b:a9:e2:b8:64:39:12:5e:bc:3f:e8:f9:6e:bf:78:bb:12:
         5d:04:f4:6b:d9:f2:e3:dc:9a:2e:c2:12:2c:e5:a8:f3:e6:50:
         53:dc:53:8e:4d:d2:12:3f:73:7b:c2:8d:f6:9f:4f:e0:6b:7a:
         c2:3c:42:8f:8c:2d:6b:3f:a6:1c:b9:7f:07:da:21:c8:d4:47:
         57:68:38:40:00:6d:37:c0:90:7c:e3:2a:95:77:bc:31:38:c0:
         58:61:32:84:f0:25:7d:2a:13:c4:42:af:41:31:23:96:c3:11:
         d5:b3:24:b2:f6:b6:7d:66:fd:c0:01:d9:b4:af:ba:ef:13:2b:
         18:60:d6:17:c0:11:39:fa:50:69:75:ae:d0:a9:68:b4:83:96:
         d8:aa:39:78:b7:92:bf:2f:66:9c:3e:c2:74:9d:ae:f8:8d:6e:
         a6:77:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:48:16 2026 by rpki-client