Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a946ee16-de3b-3832-a883-8192c6f45121.roa
File:                     a946ee16-de3b-3832-a883-8192c6f45121.roa (raw, json)
Hash identifier:          z7v8uMQ5TIWhFPb8e/Evf+nvSyfhhVXxbFY820zThgY=
Subject key identifier:   BB:29:63:30:97:FD:9D:DD:39:17:81:A3:FE:50:E2:D9:13:A8:64:C9
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584D703FD6A3F0A7524C48965100
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a946ee16-de3b-3832-a883-8192c6f45121.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     14593
IP address blocks:        98.97.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d6:a3:f0:a7:52:4c:48:96:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=57903721-c377-4921-82b3-fee42a73c97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:5b:a4:8b:72:9f:d1:a1:72:89:41:d6:d8:
                    0e:33:45:1e:63:a3:fc:5a:57:db:3f:8b:6d:72:10:
                    30:3e:dd:6a:58:58:ef:d1:2b:5d:de:8b:a9:8d:de:
                    6a:b0:86:d5:98:3e:f2:0b:c2:c2:26:26:bd:98:16:
                    a3:11:7e:44:8a:d7:cb:71:d1:e9:49:97:39:ac:1c:
                    a6:cb:19:31:58:15:b9:e2:f7:1c:ee:fb:89:f4:85:
                    45:ae:bf:1a:9d:b5:ce:86:94:e9:de:87:62:f7:43:
                    2d:5f:3c:e7:5a:aa:7a:94:9f:75:03:a6:74:eb:ca:
                    6d:6d:0a:58:c6:97:61:45:55:05:a9:d1:44:51:53:
                    79:d5:2b:6e:21:58:90:ae:db:84:e9:f9:3e:54:c2:
                    db:de:8c:13:4c:84:a8:66:44:93:84:35:f9:76:67:
                    7e:96:1c:b6:04:65:ae:f3:0f:9e:8b:b9:4a:df:50:
                    1d:71:e3:c5:1e:ed:11:39:d1:5e:75:4a:fd:fd:82:
                    29:30:ba:fe:38:4f:85:5b:2b:16:05:c1:b5:3e:c9:
                    71:e1:23:1c:df:10:69:05:66:96:87:1e:a1:85:d7:
                    a8:89:00:9d:a4:15:c0:ab:96:ea:50:62:94:3d:d0:
                    a2:c7:94:19:68:5e:10:46:ff:10:a9:a4:86:95:64:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:63:30:97:FD:9D:DD:39:17:81:A3:FE:50:E2:D9:13:A8:64:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a946ee16-de3b-3832-a883-8192c6f45121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:da:0d:5f:dc:3f:a8:66:9d:52:f5:eb:f9:c2:99:c5:76:30:
         89:85:9a:9a:42:73:c8:40:58:ee:d5:ea:d9:82:d9:9b:e0:7e:
         5a:c8:7e:24:ea:b9:19:95:ae:3b:ca:6c:f9:97:58:2f:c5:26:
         11:d4:20:3b:df:67:d4:da:d2:3c:01:53:2d:2e:3c:6b:3a:97:
         6b:71:34:6b:ac:39:12:5f:46:e9:cb:97:54:c9:1c:c6:c4:6e:
         96:29:84:38:b2:a7:18:ff:94:9d:4a:3e:47:d4:8d:d4:ee:28:
         05:72:2e:45:52:d5:0b:cb:09:a1:9e:b7:4a:8a:e2:66:5a:26:
         ec:f4:09:82:2f:86:34:ad:69:cc:fd:28:6a:e5:40:58:fe:24:
         71:03:8f:01:3d:90:59:49:aa:b9:f1:11:3d:9d:d9:01:b5:89:
         f4:88:93:e9:ff:3b:27:28:40:8f:ae:f5:46:ec:c9:ff:40:47:
         f1:5b:ab:fd:99:2c:21:da:37:4f:0e:15:49:d5:77:68:2a:15:
         87:d3:b0:30:5a:9c:57:e6:64:42:f7:27:a9:9e:c9:f4:5c:d2:
         a5:67:70:ee:a7:6e:b5:2d:7b:d1:48:33:2c:38:51:1b:ec:ce:
         98:bc:dc:7d:cd:24:6c:5b:39:dc:d5:92:c6:0a:2b:8f:a7:42:
         1c:43:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:43 2026 by rpki-client