Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f86ad579-bc23-3457-a323-97a943d0564f.roa
File:                     f86ad579-bc23-3457-a323-97a943d0564f.roa (raw, json)
Hash identifier:          1E9KLseRZFvAxi8AgAbCaSOBr8Q+5AcNS+BAzH8m1jI=
Subject key identifier:   13:D7:FD:0E:65:C4:B6:AF:62:24:F9:9A:F0:96:A1:F9:83:80:8C:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FF32CBF769474E09A6180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f86ad579-bc23-3457-a323-97a943d0564f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        98.196.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:f3:2c:bf:76:94:74:e0:9a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=0aa4c157-d8fa-4ede-91ac-3db04ebae9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:48:56:ec:26:9d:2d:08:19:d7:87:b0:5a:
                    ab:93:6e:ff:ad:b0:44:68:bc:f2:22:eb:19:b8:07:
                    bc:8f:5b:21:21:23:49:5b:4f:4f:b2:e8:ff:de:79:
                    53:68:6c:ea:bb:73:7e:cb:f6:73:8c:fe:c6:dc:b1:
                    c9:c4:38:55:3d:8a:e9:5d:3e:c2:ed:6a:b8:7f:2b:
                    f5:97:44:f5:05:e6:96:49:c7:dd:74:3d:f3:b5:8e:
                    d0:ee:48:ac:9b:bc:06:dc:db:d4:de:9b:fd:b7:e8:
                    ab:0c:d2:06:46:f3:a6:21:37:98:fd:aa:58:3f:18:
                    3b:94:32:31:a8:9b:47:a6:31:7c:51:d4:c3:6d:c6:
                    8a:01:1a:ae:35:6b:04:8c:e1:21:2a:61:e3:12:c8:
                    a4:eb:7a:28:f5:21:7a:c2:0e:fd:89:51:c5:4b:a9:
                    90:7e:44:65:5e:04:c5:62:2b:fe:4c:49:30:43:9e:
                    b6:1f:9d:49:5c:80:9d:f8:bc:9a:12:d6:47:8c:b6:
                    57:e2:2a:3b:c2:2f:6d:5e:a3:4d:6b:75:14:98:a3:
                    31:11:dd:c6:35:30:95:2f:66:ef:fb:6c:88:40:65:
                    13:f6:03:53:18:7a:11:d9:aa:a5:dd:15:8b:09:39:
                    6a:b5:6a:44:08:51:db:7c:29:d7:56:fa:8c:63:12:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:FD:0E:65:C4:B6:AF:62:24:F9:9A:F0:96:A1:F9:83:80:8C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f86ad579-bc23-3457-a323-97a943d0564f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:bb:e5:f6:d4:4a:39:93:6c:38:48:89:1c:b6:fb:13:6d:
         70:c2:4c:c9:ea:fb:6f:35:94:d1:2f:1d:c3:e9:7e:31:91:30:
         b2:40:5f:3d:da:ee:5c:60:a3:06:a9:3d:1f:b4:73:9d:8c:07:
         47:1f:bd:bc:4f:0a:8e:59:18:16:5d:09:69:36:db:bb:a4:93:
         2c:69:9b:7c:ac:3e:b2:72:bd:3f:42:aa:a9:fc:da:16:8c:f8:
         d4:88:1e:4b:99:e4:26:26:cd:2d:66:f7:db:81:99:e0:64:d8:
         b7:6b:46:66:73:06:86:02:23:75:47:3c:18:81:db:ae:ab:f7:
         63:df:cf:30:5d:1d:74:8f:b3:e7:2b:ab:ab:84:ce:37:f1:f7:
         67:0b:9e:24:00:e8:6b:fe:05:14:f8:9a:54:ae:46:ea:ed:fa:
         75:f9:8e:49:a3:86:27:22:a0:b5:ee:42:89:cd:68:e6:af:aa:
         a5:62:ed:38:7e:da:9a:27:e6:02:a1:75:de:20:f0:33:3a:0d:
         43:95:3b:52:06:22:3e:e7:47:63:56:4c:9e:63:83:65:df:c0:
         3e:7e:22:e9:7c:6f:34:35:32:6a:ff:ad:d3:df:51:d8:39:75:
         46:cd:e7:4b:ad:32:69:d3:90:5a:0b:8a:c7:00:f4:d3:d0:73:
         e2:5a:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 10:46:19 2026 by rpki-client