Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3fb303b-1115-3bc6-a0e2-ee2083714d33.roa
File:                     f3fb303b-1115-3bc6-a0e2-ee2083714d33.roa (raw, json)
Hash identifier:          oYeIcNwVXHtF4l97DRBMc9SceNOYOsNSSHNaKyWW9bM=
Subject key identifier:   2F:7D:93:62:FE:87:37:77:F9:4A:AD:0A:70:E1:7E:35:95:D0:B7:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF615F967D5FE2C2C876800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3fb303b-1115-3bc6-a0e2-ee2083714d33.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        67.162.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:15:f9:67:d5:fe:2c:2c:87:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6b3e3c39-dd94-4676-9104-6f0fa1c61940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:6c:2e:ac:65:61:e2:94:c3:2c:fd:02:28:
                    b7:76:6d:6f:d3:1f:6a:99:79:4d:cf:b9:bc:1b:ff:
                    dc:0b:52:81:ad:8a:fc:26:4c:fb:a0:f1:ee:2e:87:
                    a2:0d:5d:e4:4a:49:68:48:04:19:a8:21:a9:85:48:
                    33:04:ad:80:7d:a7:56:d1:6c:e4:4c:02:bb:ef:87:
                    92:06:9d:74:ef:80:28:90:b6:e3:b7:d8:43:8c:dd:
                    fe:7c:5b:f6:db:14:39:af:22:56:94:2b:4d:62:1b:
                    8c:a9:57:95:3e:12:eb:bb:41:ef:8f:cf:b0:49:55:
                    01:0e:a5:f1:50:43:c2:a2:f0:d6:1e:b6:71:5a:28:
                    36:48:d9:e8:05:c6:5b:00:29:ae:91:e6:53:00:03:
                    9a:7d:17:14:0b:ce:45:1f:c3:b5:ec:b4:05:1e:c6:
                    04:ad:70:9e:64:33:d5:70:3f:71:c9:fc:d5:aa:0f:
                    76:55:59:15:a2:e3:7f:b9:8a:3f:2a:2a:b9:a0:71:
                    17:ee:94:d9:0d:a2:43:9a:f9:d3:a2:a4:4c:42:ee:
                    39:29:9b:38:df:e8:8a:91:67:22:a7:46:83:ba:66:
                    45:d3:3f:ce:42:67:21:c0:fe:6b:d7:44:ad:89:ee:
                    86:ca:13:52:48:01:be:b6:8b:fb:13:4a:26:d9:7e:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7D:93:62:FE:87:37:77:F9:4A:AD:0A:70:E1:7E:35:95:D0:B7:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3fb303b-1115-3bc6-a0e2-ee2083714d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.162.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:15:18:66:86:35:14:b8:cc:b5:35:aa:bb:14:21:73:40:ae:
         13:54:95:3b:67:fc:bf:1a:31:9d:fb:73:59:70:b6:f3:14:c3:
         4e:c6:90:9e:6b:5f:77:1b:93:61:59:d2:9f:56:8c:91:1f:1f:
         d9:73:4d:55:7b:46:66:53:0f:68:a0:31:31:a4:8e:89:6d:8b:
         d2:da:d5:9a:09:fe:43:18:70:25:d5:be:51:71:d9:39:44:9a:
         ef:14:ce:99:41:d6:85:1a:30:f9:7e:e2:ef:ab:8e:7a:c3:11:
         61:3b:97:28:01:e3:b4:b9:3e:6a:38:9f:4f:07:b9:79:0c:83:
         4b:44:ba:7a:78:11:61:7f:fc:c8:94:1b:4a:55:fd:72:c4:ff:
         5e:e7:17:68:ac:a9:38:40:5a:98:5a:47:a0:2c:bb:5c:fc:b1:
         6c:3c:95:77:3e:ec:77:d8:c1:64:bb:87:0d:0f:de:8e:bf:2a:
         29:4e:c1:15:fa:b5:2c:48:05:f8:73:4f:f1:29:6f:18:f2:ef:
         48:0e:4a:c0:3c:98:f7:22:48:d3:85:a1:06:53:85:60:b7:f6:
         75:d3:85:8b:5c:f3:2b:7e:42:e0:a4:8c:be:c5:2e:09:ae:8e:
         e5:fd:b8:70:67:1e:8e:b7:aa:14:56:4e:10:0d:a7:58:2f:ed:
         d7:4f:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:59:26 2026 by rpki-client