Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/d2c35ea3-2bc7-3e08-9697-a7f1e6a6c246.roa
File:                     d2c35ea3-2bc7-3e08-9697-a7f1e6a6c246.roa (raw, json)
Hash identifier:          dbDoKr8hMO9mitZrqxRXY99+VuvNzM06ukZlQw/npLM=
Subject key identifier:   0D:1B:13:BD:93:3E:38:A2:01:9F:5C:A1:37:5B:84:00:61:4A:B4:B6
Certificate issuer:       /CN=e01b5bcb-f7e5-4cdd-a03a-79bc49957249
Certificate serial:       010D0C9F4328584EDE4009A7F0A34180476F1898
Authority key identifier: 08:26:11:D5:A2:8D:6C:BD:79:80:A0:5A:F4:97:C1:7E:D5:D1:EF:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/d2c35ea3-2bc7-3e08-9697-a7f1e6a6c246.roa
Signing time:             Mon 17 Aug 2026 15:27:00 +0000
ROA not before:           Mon 17 Aug 2026 15:27:00 +0000
ROA not after:            Sun 15 Nov 2026 16:27:00 +0000
asID:                     62566
IP address blocks:        98.99.0.0/22 maxlen: 24
                          98.99.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:de:40:09:a7:f0:a3:41:80:47:6f:18:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01b5bcb-f7e5-4cdd-a03a-79bc49957249
        Validity
            Not Before: Aug 17 15:27:00 2026 GMT
            Not After : Nov 15 16:27:00 2026 GMT
        Subject: CN=c9ab5c1e-6733-41f4-b233-c32f6903b4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:e4:41:53:55:10:e8:df:b2:b0:34:67:6a:
                    1a:54:f8:46:b3:a7:5e:d1:53:b5:d8:fa:c0:bb:c0:
                    5f:e6:75:2e:05:cf:8c:3c:af:d1:78:79:ae:5c:29:
                    c2:4b:e6:b1:b5:76:fb:79:cc:ac:b1:28:68:58:53:
                    f0:9e:7b:72:16:6f:08:39:14:35:84:bf:00:ee:03:
                    a0:b7:23:1a:41:b6:b7:87:11:c2:36:9a:03:e5:d0:
                    34:b4:95:52:9d:42:40:27:01:43:d7:08:96:c7:ef:
                    04:4a:7f:34:a3:b4:06:8c:d9:0b:ae:52:41:03:78:
                    d9:ea:81:ca:0b:43:bc:4e:55:56:37:de:67:c8:fa:
                    8f:58:d9:a8:85:a1:41:a5:15:da:a5:13:41:d2:39:
                    d1:7a:ce:52:3d:cb:d2:78:22:c3:96:d7:bb:0d:cb:
                    6e:aa:9c:4c:85:89:39:4f:01:c8:07:36:d3:4f:7d:
                    03:88:8b:5f:a1:da:5a:62:e7:2d:3f:b4:a0:6b:82:
                    eb:1a:a4:d7:2a:83:7a:80:91:46:d6:54:28:87:b8:
                    6e:b7:90:e9:70:ba:27:fe:9d:98:d5:ad:90:71:6b:
                    27:3a:cf:27:f1:41:e6:de:45:81:24:d5:d1:12:df:
                    c7:c2:ce:22:44:87:92:e6:91:67:24:11:9e:9b:49:
                    03:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:13:BD:93:3E:38:A2:01:9F:5C:A1:37:5B:84:00:61:4A:B4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/d2c35ea3-2bc7-3e08-9697-a7f1e6a6c246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.crl

            X509v3 Authority Key Identifier:
                keyid:08:26:11:D5:A2:8D:6C:BD:79:80:A0:5A:F4:97:C1:7E:D5:D1:EF:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.99.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:b1:f7:ee:05:0e:e2:a3:32:8a:64:64:7f:0a:49:ca:38:
         fc:62:d2:41:b2:1a:d2:cf:bc:fb:7f:a9:ed:11:b2:29:70:c3:
         52:12:0b:14:95:7f:ae:b3:e0:90:1b:04:74:3a:6d:91:a0:92:
         20:51:ea:d2:d6:82:fb:f6:68:a2:66:83:ce:ae:54:99:3a:da:
         61:f8:61:1b:24:bd:97:9c:e7:1b:92:e8:c0:91:45:29:90:fe:
         51:1b:a1:5f:6f:9c:46:f8:5d:4b:9a:e4:34:18:df:b7:9c:a4:
         50:28:e5:39:27:25:b0:26:e3:ea:4c:ea:17:9b:53:55:99:88:
         29:cb:f6:43:20:98:24:78:bb:39:99:94:5f:5b:19:06:18:1c:
         a0:ac:d9:62:64:30:ce:0b:c7:7a:5c:76:99:a3:b4:6f:d3:31:
         01:58:5e:f3:fe:c7:96:23:d8:9e:27:2d:1f:a3:60:eb:29:52:
         13:c0:cf:ee:74:e3:e4:ea:91:c6:9b:fb:18:63:1e:59:65:80:
         58:3e:13:0d:66:44:fa:23:73:cf:a3:13:b9:ac:ba:9c:fa:75:
         09:fc:4d:96:19:a0:06:27:3d:f2:98:ef:60:bb:6d:19:17:8d:
         b3:bb:b4:2e:b0:cf:6e:d5:9c:49:d5:6d:b7:b8:a6:ab:9d:d8:
         88:75:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 09:03:06 2026 by rpki-client