Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08747e2b-9cda-3c25-b28f-63d9f2f34e9e.roa
File:                     08747e2b-9cda-3c25-b28f-63d9f2f34e9e.roa (raw, json)
Hash identifier:          Zq1Oy8DNp7+g01Rbh5HIVhtk8iFrXBzPYg49DNa6glk=
Subject key identifier:   7C:10:73:BB:FB:73:D5:06:3E:CA:53:C6:BA:CA:3F:16:A5:81:A9:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119FEDB898D31C75199FA680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08747e2b-9cda-3c25-b28f-63d9f2f34e9e.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        98.34.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:ed:b8:98:d3:1c:75:19:9f:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=a16553d0-fd08-4371-b68f-a958e003f31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:30:90:cd:00:8c:2b:1e:09:b6:07:af:6a:
                    eb:3d:1f:54:87:cb:54:7a:82:76:95:f7:94:4d:23:
                    6b:fb:1e:7d:1e:3c:63:60:0e:ed:99:6d:b5:37:2c:
                    b2:98:1a:d6:b4:a7:ea:10:bb:1e:61:06:0e:ef:e4:
                    84:47:cc:2d:7d:76:bf:7d:c8:b3:71:55:fc:d1:c5:
                    eb:57:0e:05:a2:c2:1b:c2:2b:42:54:6f:75:f2:a3:
                    9f:fe:97:e1:34:88:cb:04:09:53:bb:6c:01:ba:7c:
                    af:be:eb:e6:63:34:01:39:f5:72:d2:e0:95:82:b1:
                    e9:1d:07:db:98:95:f1:91:5c:9d:58:61:41:82:b0:
                    5a:9b:a5:d4:e6:c5:a2:80:c3:2c:f5:dc:1b:1f:3d:
                    93:ae:db:87:37:71:80:63:2c:27:34:61:c7:3f:29:
                    6d:0e:0d:c7:93:86:ad:27:63:7b:30:09:2c:a6:52:
                    17:35:c0:29:0c:ec:4b:57:4b:49:31:11:56:dc:ba:
                    12:2d:9c:1c:f8:fa:0e:35:cc:48:32:9d:48:7d:4f:
                    a2:b3:5e:6a:53:c2:9a:3d:0a:3c:9b:fc:1f:56:a6:
                    74:f3:72:6c:ea:a1:ef:b7:1e:f3:0c:b6:12:75:28:
                    cd:b5:c2:a9:1c:b9:d7:06:6c:1f:3c:f5:eb:0b:51:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:10:73:BB:FB:73:D5:06:3E:CA:53:C6:BA:CA:3F:16:A5:81:A9:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08747e2b-9cda-3c25-b28f-63d9f2f34e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:12:b4:9e:5a:b1:32:c2:05:46:f3:dc:49:29:1f:55:70:82:
         93:74:d5:bb:cd:42:db:63:44:88:32:32:48:fc:41:4a:0a:cc:
         cb:ea:63:60:8a:d1:74:34:c4:af:d0:51:04:39:f3:d5:83:ee:
         cd:40:8a:8d:d8:0f:39:3c:f3:4f:ec:a2:aa:aa:14:54:7d:ef:
         64:c6:61:fd:db:14:21:2e:81:2a:88:c3:51:d8:1c:64:bd:e7:
         71:c6:7e:20:80:e6:06:84:c8:70:bf:b5:61:c1:05:3d:d5:77:
         b3:e7:a6:37:6e:a3:a8:2a:bc:24:85:66:17:e0:fe:9d:8d:d8:
         e4:c1:72:0c:46:66:9c:5f:c3:93:2f:37:9e:53:a0:39:e5:df:
         19:44:d7:b7:f3:c2:1c:d0:de:7a:77:5e:31:1a:d2:ec:58:40:
         45:1a:d6:f5:ff:78:5f:f9:4c:6f:5a:66:b8:0e:f6:fb:f2:e3:
         c9:5f:27:71:11:9a:88:c9:79:5a:2d:97:40:0a:e9:3a:2f:e8:
         a1:81:04:07:bb:cf:1c:b5:dc:05:a9:ae:e5:24:37:7b:a2:82:
         7b:10:54:e1:72:38:98:c3:8e:ab:8e:07:d8:27:ad:b7:70:a4:
         a9:07:17:f5:fe:e1:3a:11:95:d4:2e:62:2f:23:fc:57:cd:50:
         e6:f8:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:18:47 2026 by rpki-client