Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/141e218e-ecd1-37fe-9fa2-92e7d8746816.roa
File:                     141e218e-ecd1-37fe-9fa2-92e7d8746816.roa (raw, json)
Hash identifier:          ODLzRdowhqxPFvZJXKKT8ZWySD5EhioUhj0M9cZ5wDs=
Subject key identifier:   44:CB:EC:11:02:7E:A3:72:82:BC:9E:EF:53:EC:33:D3:25:90:28:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA214758670970C7E87340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/141e218e-ecd1-37fe-9fa2-92e7d8746816.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        68.54.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:21:47:58:67:09:70:c7:e8:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=a0cbbe92-6cd4-4088-a213-9120366648c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:2d:8f:9d:3f:de:e8:15:84:9f:d0:2a:82:
                    4c:ee:50:df:a3:20:5b:41:e6:05:c4:54:a3:98:5b:
                    52:3f:29:8c:53:8e:92:6d:11:ea:70:09:2f:0d:ec:
                    78:b4:17:5d:1e:f6:54:1d:bb:6c:19:68:a3:0e:4c:
                    4b:d8:f6:5d:d9:26:db:bc:38:d4:b2:c2:24:2b:1e:
                    cd:3d:06:18:6d:53:3e:83:a9:ab:e0:dc:6e:d5:35:
                    a6:e9:78:0e:5a:c1:6b:2a:30:20:ee:d0:18:5c:84:
                    93:f7:2b:62:69:5c:66:4c:9d:b0:9f:41:f0:7e:79:
                    9f:8c:8e:6f:28:9c:e2:08:ec:9e:8c:6f:c8:a4:37:
                    be:fc:df:8f:c4:f0:2e:57:38:da:c9:5c:0b:76:1c:
                    7d:e1:ec:4f:c3:db:b3:36:ac:f7:1b:80:37:f7:32:
                    50:52:95:03:ff:76:87:31:d9:d9:a3:84:e8:35:69:
                    1f:c8:23:57:f5:1e:bd:99:4e:0c:56:6e:49:bf:c2:
                    6a:43:97:1d:92:ca:cc:5e:01:7a:23:7c:c5:23:5e:
                    e4:42:b7:85:d8:e9:52:98:2f:f5:eb:0d:73:bf:77:
                    04:0a:17:c0:11:b5:22:1f:58:13:c7:68:d8:e8:35:
                    45:f3:a3:25:b8:d4:9a:13:54:16:3d:5b:51:9f:24:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CB:EC:11:02:7E:A3:72:82:BC:9E:EF:53:EC:33:D3:25:90:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/141e218e-ecd1-37fe-9fa2-92e7d8746816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2c:5b:5f:73:3d:05:23:e8:6b:8e:a7:9b:29:44:00:bd:6f:
         81:b8:1d:99:9a:bc:96:3b:03:30:5b:a3:1b:b1:47:13:fc:59:
         38:b7:d9:15:54:27:8f:af:f5:75:f4:e6:ad:48:23:f5:0c:47:
         e9:ae:81:15:40:60:46:55:b4:03:63:04:ad:25:f7:29:75:9c:
         11:0e:08:62:d6:4a:2c:97:e4:3c:8c:05:e2:65:20:bd:60:71:
         5c:84:06:f8:76:d0:b0:75:4e:b7:95:45:95:72:37:d7:55:9c:
         20:5a:87:db:37:c0:8c:8d:13:5e:7a:59:87:9d:cc:3c:cd:a6:
         cb:39:48:92:1b:10:40:65:07:02:b3:4a:92:0b:73:f5:df:00:
         3b:39:fe:47:11:f3:b5:7a:f3:68:bc:c0:27:23:08:76:9c:0c:
         fe:5b:56:0c:0b:10:83:7c:d3:ac:f1:7b:04:9e:47:e4:59:7f:
         4d:89:d9:7f:13:2e:b6:fa:01:61:8c:7e:b4:14:d7:8d:34:88:
         f9:b0:13:e7:d0:aa:79:01:c1:04:4e:55:10:f6:2f:2d:42:e3:
         a0:04:32:f9:e7:3a:2f:42:17:bf:f3:9c:9f:98:ba:fe:c5:fd:
         a0:94:d2:0d:19:d9:b3:bd:c3:b7:0d:51:85:c8:52:d3:5c:c8:
         17:fb:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:42 2026 by rpki-client