Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa
File:                     f456a693-f74d-3894-8c75-2409850473b9.roa (raw, json)
Hash identifier:          dZHuHEtu6m7MOOoedhwZig7FImwVxRPFFMmzJCaSAyI=
Subject key identifier:   13:F6:7F:14:4D:C9:B8:94:9D:FB:2A:24:31:AB:54:6F:BB:7C:8F:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FF053A1BB0A97D1113D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.195.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:f0:53:a1:bb:0a:97:d1:11:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=718557c3-fc1c-46e6-a960-3136e54755ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:66:f8:7b:06:5d:80:8a:02:d2:ae:fd:a7:
                    e3:14:6e:09:8d:7f:7c:cd:2a:65:7f:b9:a7:17:a2:
                    5e:85:71:58:94:11:98:8f:d0:2d:7c:02:08:49:7f:
                    9a:c2:13:59:2f:0e:bf:e4:13:bf:8e:6b:07:f3:cc:
                    02:ed:6d:5e:b9:d6:b8:53:f4:06:35:81:a6:26:df:
                    dd:d9:a7:fe:57:96:1f:56:c4:ca:8b:ff:98:b9:31:
                    39:79:48:00:be:ce:c3:5a:1e:8c:75:c4:5a:3f:63:
                    3b:a3:a4:1e:d2:18:d4:37:55:13:4d:d3:3e:49:20:
                    2a:aa:52:67:82:12:a1:da:7d:31:11:2a:53:57:9e:
                    ac:af:db:b6:84:79:62:84:8e:07:df:eb:f3:74:13:
                    a5:4c:36:e2:99:d1:da:eb:4d:e3:62:99:b6:c5:57:
                    72:50:ad:f2:d5:38:15:f5:d9:aa:20:10:12:5b:0d:
                    1a:ec:c5:47:9e:34:9b:3e:30:50:18:40:7b:6b:ed:
                    2a:30:4a:db:6f:1f:6c:ee:3f:c2:b2:35:65:5c:ba:
                    1f:b8:ef:98:04:0c:dd:9b:40:d5:ea:48:82:0e:b2:
                    27:3c:e2:50:01:21:db:60:b5:80:8d:9e:38:23:9f:
                    bd:cf:96:d6:a0:5b:3f:c1:97:79:14:0e:dc:16:1b:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:7F:14:4D:C9:B8:94:9D:FB:2A:24:31:AB:54:6F:BB:7C:8F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:59:87:e3:7b:da:4c:8c:00:6f:37:4d:c2:38:a4:ba:1e:63:
         b9:7c:ee:2b:3a:4f:ab:06:8c:9f:ab:f0:f7:fc:9d:d1:71:a4:
         45:2a:ab:31:cc:56:de:36:e8:d3:d4:40:8b:25:c3:62:b9:9d:
         a3:c2:41:7a:1d:e0:43:26:1c:6b:86:bf:71:68:7a:19:06:fa:
         65:1e:d4:65:e1:ea:4c:5a:d1:26:ba:8e:58:20:8c:76:c8:c5:
         52:89:81:fd:14:f4:ae:ed:0c:d0:46:40:e8:6b:65:5f:fd:05:
         a1:75:c1:03:ff:8e:43:16:5e:ac:85:8e:92:3b:fb:38:d8:53:
         4f:01:a2:ca:da:25:23:94:07:8a:82:3b:26:e1:f7:9b:49:95:
         84:3d:a0:70:11:3c:6f:6b:39:87:ec:93:10:0c:40:a8:84:ec:
         4c:18:b3:91:48:73:c5:68:95:32:8d:32:8e:62:43:e2:0d:82:
         fe:2b:6b:a2:2d:01:01:ab:48:c4:c9:57:b3:24:6a:55:dc:e7:
         0f:95:49:8a:f6:78:a3:fe:59:27:46:65:8a:dd:69:9c:37:56:
         d7:c1:72:79:cc:19:cb:da:71:83:92:f3:e0:59:bc:fc:5c:36:
         1e:ba:0a:93:87:1b:6c:cc:cb:42:e4:b6:23:17:5a:6e:3b:15:
         6d:0d:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:59:14 2026 by rpki-client