Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd523f9f-748a-396e-bf4a-0537759e6e68.roa
File:                     fd523f9f-748a-396e-bf4a-0537759e6e68.roa (raw, json)
Hash identifier:          1MZo15snWdfixjAtgIsEXkzp4j/68kyhc7ZqTzUR/MA=
Subject key identifier:   49:3A:23:13:8D:E1:C7:78:5C:E1:41:06:49:F0:91:02:55:F2:5C:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E360033F03F95B1E87EEE4A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd523f9f-748a-396e-bf4a-0537759e6e68.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        98.195.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:33:f0:3f:95:b1:e8:7e:ee:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=5b852b56-6772-4675-bb7f-d34eaa4eb68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:f6:1d:bd:c3:b1:f2:7b:55:8f:d1:03:cc:
                    22:9d:96:3a:a6:81:00:91:26:51:64:30:35:9f:f0:
                    6e:58:10:a6:cc:96:72:62:bd:e8:b7:cf:73:3d:9b:
                    b2:bb:f3:ad:23:5b:89:1d:5c:f9:4f:d4:0a:e4:92:
                    4c:a6:41:65:ab:d2:37:99:7a:50:34:31:5a:65:b8:
                    ad:80:29:c6:83:ac:f8:e6:5e:f2:d4:f7:f5:a8:d6:
                    e3:f7:2d:b2:0f:6d:f3:f0:5d:95:f6:78:b3:1c:f3:
                    d1:77:a4:c0:b0:48:8b:9b:b6:31:8e:35:fc:e5:a1:
                    eb:ba:06:a7:dd:12:f5:c2:b0:ea:9d:c8:16:3d:64:
                    f6:5e:11:0d:83:f7:82:fd:c9:e1:29:27:b8:a4:94:
                    8f:a0:04:91:23:83:41:65:9f:b7:e9:9e:bb:ba:3a:
                    a0:d9:9e:0f:d7:af:39:07:dc:54:76:81:56:c0:35:
                    78:c8:0a:8e:69:d3:e3:d0:fc:58:be:d0:10:35:3c:
                    cb:68:f5:e2:d7:62:20:08:4c:f6:e8:e3:33:02:69:
                    8d:50:98:a8:61:c4:7e:44:ac:11:a1:5d:1e:a1:78:
                    28:53:5b:f9:e3:0d:17:f5:1e:ce:47:97:82:91:d9:
                    08:f7:08:09:0d:dc:2a:03:c5:18:80:97:ff:23:59:
                    38:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:23:13:8D:E1:C7:78:5C:E1:41:06:49:F0:91:02:55:F2:5C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd523f9f-748a-396e-bf4a-0537759e6e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:86:04:a8:e1:a8:c8:79:2a:bf:b0:12:7f:c8:e3:5d:92:
         d5:ab:43:ad:bd:4b:52:4e:9a:7b:d9:55:6b:17:36:aa:d0:ae:
         9c:da:9b:ac:f6:fe:cb:3a:b3:c3:b1:af:68:f7:16:ec:e0:9e:
         05:cb:92:32:03:33:27:35:4d:2c:d6:1d:e0:28:53:07:a7:eb:
         23:b7:3d:5f:0e:b4:9c:35:e6:8b:ab:fd:31:c5:66:1d:ea:1c:
         79:a7:e6:cc:06:bc:23:70:b3:d0:e0:c8:b2:fb:45:2d:51:64:
         98:6f:4e:22:41:8c:cd:e7:4b:8b:a0:03:23:1d:c5:fe:27:f2:
         c9:56:8d:57:12:65:d7:47:d3:cf:91:cf:a1:3f:36:d3:c7:26:
         f8:33:78:9e:2a:b3:d3:b7:e0:7f:d8:dc:0d:5a:1f:ef:a0:bb:
         fa:32:89:a6:ef:d7:d8:2f:a0:1f:09:58:e0:be:48:f7:55:ab:
         18:50:1e:01:47:60:06:f9:5f:37:c6:f7:2a:73:68:81:dc:0d:
         ae:ce:f1:2f:e6:c0:b6:af:4f:5a:1b:75:6f:d2:3c:ef:ba:48:
         e7:b5:fb:f8:a6:77:cc:9a:37:03:77:5c:89:ed:fb:a3:4c:73:
         97:be:db:6f:8b:5d:4c:10:53:9e:2b:8b:0a:ca:91:09:72:29:
         aa:2d:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:44:10 2026 by rpki-client