Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01826a1a-c5ad-3e49-aa43-2067df3dc0ee.roa
File:                     01826a1a-c5ad-3e49-aa43-2067df3dc0ee.roa (raw, json)
Hash identifier:          oF1N/vX6du1trzPR2hCnISA5NOJsWf8YUG5YbFblbrg=
Subject key identifier:   46:81:1F:CE:22:E8:DD:78:1B:84:02:1B:84:10:A6:9D:EE:4B:BB:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5916C11D96AA8B0801AB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01826a1a-c5ad-3e49-aa43-2067df3dc0ee.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        98.42.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:16:c1:1d:96:aa:8b:08:01:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c7d03a9d-8405-4d5c-9c3b-178ce4d19216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:08:64:66:91:d0:fc:2e:cf:46:65:09:63:39:
                    dc:37:e8:ec:a3:02:92:70:5d:5c:34:d6:16:69:a8:
                    78:f0:b5:f3:77:4c:ed:a2:fb:fa:0e:af:bd:1f:27:
                    08:f1:c2:d5:fd:b4:0e:ef:fb:bb:c4:10:99:de:83:
                    bf:87:65:dc:09:bf:a3:79:37:e6:ca:d9:49:43:66:
                    d6:10:17:79:9b:70:92:a9:56:0b:11:05:00:53:61:
                    d9:30:b1:c1:ec:b6:dd:34:0a:7e:c7:8f:06:86:c3:
                    2b:7f:d2:53:c7:a1:4e:06:9d:f0:0e:6b:fc:1f:b3:
                    8d:0d:75:e5:16:d3:51:e4:16:f6:1a:32:51:cd:1a:
                    35:bc:07:15:29:d1:27:07:66:76:8f:e8:6e:ab:3a:
                    4f:c2:6b:5a:97:82:bb:44:d6:5b:e4:cc:c8:e2:e5:
                    b3:3e:6d:e9:4a:9f:c0:bb:a3:d3:c2:2e:30:e7:4c:
                    b6:98:24:eb:89:db:aa:51:e8:bb:92:73:25:f5:91:
                    c4:8d:d3:65:61:16:6c:bd:8d:c3:56:24:45:30:6b:
                    2a:78:7b:b4:1e:50:6f:17:ec:97:41:08:25:e5:a1:
                    fe:47:5c:b5:b7:f3:f9:ad:c7:77:a3:a7:fb:9d:7a:
                    91:67:72:b4:13:89:68:7b:47:16:40:4b:d7:cd:3b:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:81:1F:CE:22:E8:DD:78:1B:84:02:1B:84:10:A6:9D:EE:4B:BB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01826a1a-c5ad-3e49-aa43-2067df3dc0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:31:b0:b9:e9:24:09:81:be:eb:e5:dc:14:7d:0f:d1:00:
         4e:d3:27:c0:72:6a:1d:28:82:03:72:a4:f8:c0:07:d8:f1:d1:
         52:a4:23:5c:a7:fd:6c:33:80:dd:5d:de:a3:6a:20:23:ac:02:
         99:e3:a8:e2:81:85:60:8a:01:5a:d2:67:9d:37:9a:5f:bd:6f:
         3a:50:25:53:99:48:b7:7c:22:ef:6c:3c:c1:88:3e:f6:ab:4f:
         65:ea:3b:cd:6b:cc:d8:f0:39:fa:12:19:33:f5:74:8d:9b:2e:
         88:73:e3:05:68:47:b7:2b:60:cc:64:9f:b9:70:44:ae:13:8c:
         95:f8:bb:0c:f5:bc:41:31:b8:4a:ee:48:fe:af:e3:da:0d:94:
         d3:5d:03:f3:56:cd:50:10:ce:82:50:09:27:1e:2e:b0:17:e2:
         cc:3f:e2:50:c2:ee:5b:f4:b6:ef:a0:50:68:5f:59:67:d0:98:
         8b:ae:c8:d9:92:a2:f0:61:4b:fb:58:72:49:5b:0b:73:f1:d8:
         df:7c:45:dc:64:8e:58:fd:05:44:1e:3a:de:11:f6:12:6d:fc:
         20:3e:ea:33:f9:98:24:f7:0f:c9:f5:45:e1:3a:04:5a:f3:52:
         a3:e6:fb:70:77:77:76:9f:75:70:fb:89:9c:07:36:3d:a5:1b:
         6f:03:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:28 2026 by rpki-client