Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa
File:                     f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa (raw, json)
Hash identifier:          2FlWndq29huIBlo2J/WykNuqOfnTAD7Fc222QGGTqjE=
Subject key identifier:   4D:16:71:E9:0C:46:94:2D:5D:93:F2:90:D5:56:38:D3:04:F5:6A:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DF4DB4BE059A82EFDA5587900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        98.42.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:4b:e0:59:a8:2e:fd:a5:58:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=e0d2128c-0c3e-47b0-942d-f72cd94e3501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:66:99:fd:d7:c4:21:3a:a5:8c:c5:95:49:
                    09:eb:43:e3:71:b2:4f:46:7b:71:da:09:ff:a1:ea:
                    80:87:f5:b6:16:88:0d:74:7f:65:a2:83:f7:d4:4a:
                    8b:78:7d:28:f3:bb:29:6b:32:c9:a7:d0:e0:da:1e:
                    fa:70:e4:13:ce:aa:3d:43:82:60:71:99:c5:b9:af:
                    13:90:1d:2a:df:ed:a9:7d:b3:0c:81:90:7a:da:95:
                    d8:e5:78:c4:dc:fe:17:3a:38:24:89:af:9d:f4:db:
                    3f:ac:e9:26:b3:97:36:2e:32:df:95:57:e9:d1:b4:
                    a8:6a:a7:d4:92:7d:fa:56:1e:ab:22:00:2e:d7:bb:
                    11:11:87:24:49:e1:17:dc:e1:7c:4d:ce:0b:05:64:
                    6f:23:58:02:85:37:b8:4c:8c:87:41:7d:3a:9a:e3:
                    7b:0a:7e:ff:eb:4c:e1:cb:fc:5d:bf:4e:7f:95:6b:
                    40:26:b9:a8:cc:91:38:6b:a8:a6:f4:f1:de:74:b3:
                    df:41:1d:b0:89:be:f6:00:1b:8d:40:e0:59:af:5d:
                    7e:cd:51:be:6f:7c:84:2e:74:7c:3c:f4:9d:b0:e2:
                    bc:73:d5:29:62:8a:73:de:f7:a6:52:75:19:2a:23:
                    16:af:f0:e4:e3:0c:6e:4b:a1:57:2e:00:5f:40:9a:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:16:71:E9:0C:46:94:2D:5D:93:F2:90:D5:56:38:D3:04:F5:6A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:98:cc:a7:bf:7b:95:31:72:97:fb:a6:6c:f8:cb:c8:d4:d1:
         f2:7c:b1:87:59:74:bf:82:98:a7:25:87:d2:4b:f2:42:cd:2a:
         c3:7a:a8:ba:57:76:82:e3:af:45:ab:64:3e:3e:55:57:ff:ea:
         e9:b4:18:7c:9c:40:ff:31:f7:b7:4b:15:f3:8d:0a:ea:f9:20:
         ec:ef:f5:90:17:9f:66:08:1f:30:35:16:e7:95:ec:a3:69:f9:
         3f:de:90:1d:b1:92:ad:99:0e:b0:89:7b:5e:27:d0:17:9d:70:
         f5:0e:69:59:ab:b2:c0:10:76:a7:21:0e:08:27:df:b7:2e:12:
         f3:92:8f:b6:49:ac:ca:4b:dc:cf:12:1b:37:a2:0b:67:cc:e6:
         a4:26:a6:8e:16:3a:c9:3b:1b:18:55:07:a8:5f:a1:34:4f:4e:
         07:bd:ce:46:f8:82:88:5e:ee:c4:ee:22:c6:a9:ef:f2:49:1b:
         2a:30:ad:50:10:7e:f6:98:cc:c3:48:d5:63:90:6e:55:2d:94:
         78:19:f8:ae:2f:69:a0:a5:e1:8f:24:8d:84:72:7e:f7:f7:09:
         58:0b:62:4f:fe:1f:5d:ae:e0:d6:db:69:e5:5b:e6:81:63:1c:
         0c:20:d0:37:69:df:5d:54:8b:d4:d6:17:60:37:bb:23:22:d8:
         e1:65:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:52:17 2026 by rpki-client