Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4d460c1c-f38a-310b-abcf-d435b18856a3.roa
File:                     4d460c1c-f38a-310b-abcf-d435b18856a3.roa (raw, json)
Hash identifier:          v69rLEeO9ZhIN4LuWGFQvr/J6bgcnpVXMZMvGAyKJ9c=
Subject key identifier:   56:AC:9B:99:3C:CA:91:08:59:36:87:41:98:BA:4D:9D:77:41:EC:97
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DE5807FBB1F9687AB9D910E70
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4d460c1c-f38a-310b-abcf-d435b18856a3.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     15164
IP address blocks:        138.199.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:7f:bb:1f:96:87:ab:9d:91:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=47bd2c75-4629-455b-a671-d8a9d2d872ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:bd:1b:ea:59:d5:21:c4:bc:97:35:d0:e1:
                    d6:c0:70:91:75:9e:db:92:79:56:8f:d1:9b:eb:a3:
                    b5:39:0c:4b:67:9b:30:09:4c:e9:08:42:4c:53:5a:
                    d9:43:cc:11:fa:d3:c2:e6:34:3d:fd:f3:38:66:9d:
                    03:d7:f6:70:c7:60:36:18:ed:5d:46:ee:95:8d:44:
                    58:2b:aa:0e:b9:77:d8:28:e6:1c:83:29:f9:2f:2d:
                    91:68:aa:e4:f3:c3:6d:c0:70:63:ab:9b:5c:70:63:
                    db:ca:2a:b7:1c:ec:08:a5:a0:da:ca:02:30:c7:a0:
                    04:82:5b:e1:58:e7:61:28:bf:0b:d5:b8:f7:39:db:
                    b3:ff:f2:c5:5c:66:0e:1d:46:7e:e9:c6:ff:a8:33:
                    62:89:99:3c:77:a3:e3:e5:23:36:a4:c6:18:50:f5:
                    fa:92:8e:25:f4:80:95:0c:18:de:22:00:96:d8:5d:
                    26:f5:50:3c:63:b4:73:15:09:1b:f0:64:51:c5:4d:
                    93:d8:3c:d3:cd:6b:08:a4:31:17:63:f6:5c:05:47:
                    e4:b4:5e:f6:ef:86:b9:65:22:3c:83:49:ee:43:8e:
                    18:45:b0:4c:a1:e1:67:14:ef:f9:5c:67:68:92:69:
                    c2:b0:7c:89:d2:f2:40:78:2e:64:60:ed:b4:37:b8:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AC:9B:99:3C:CA:91:08:59:36:87:41:98:BA:4D:9D:77:41:EC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4d460c1c-f38a-310b-abcf-d435b18856a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:74:13:64:bb:5a:cd:7e:4d:16:df:ab:99:a4:d1:ca:6f:82:
         35:39:f7:0b:a6:ea:91:91:94:17:58:f2:62:40:65:d2:a7:73:
         21:03:33:36:8b:48:ff:4a:15:d9:eb:0d:c5:9c:89:7e:5e:4b:
         94:88:2b:d6:67:7b:65:9d:be:e8:c6:c0:24:09:d6:e9:c1:8e:
         59:08:37:88:b3:1a:af:2d:4c:ca:d6:22:88:d0:8b:ac:b4:d3:
         01:0a:44:9a:63:84:ba:05:5a:cd:1c:6a:10:6a:99:41:f2:c5:
         c9:fe:f9:b8:b1:22:2e:7d:7a:6c:13:a8:21:22:fd:60:d7:17:
         ff:4a:c3:c0:85:3e:1f:f2:05:ce:98:a1:c7:f1:eb:d0:6d:db:
         09:69:3a:48:eb:4c:5b:20:28:db:17:62:bf:ac:fd:29:c2:58:
         f6:14:71:80:57:13:88:24:2f:50:b1:90:c7:36:a4:a2:a4:49:
         24:51:af:2e:10:84:f1:0f:47:50:f3:22:1a:3a:33:a4:90:82:
         20:c7:7f:40:c6:a3:57:1c:89:67:52:17:16:84:a3:4b:9f:c0:
         3d:62:c9:4f:ca:3c:98:c5:2b:93:52:5c:66:f7:8d:65:21:65:
         09:c2:d5:ac:91:c6:03:45:c1:70:10:76:8e:15:58:61:d9:c9:
         51:31:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:52:26 2026 by rpki-client