Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa
File:                     180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa (raw, json)
Hash identifier:          BFVtevQVmETIDkONr5YtGHHH23oyLo+T6qoeeeR0cuE=
Subject key identifier:   69:D9:37:57:EA:B7:03:21:C1:BE:A6:80:38:17:7E:05:C8:2E:63:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81003E905BA93BF2CA858D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        98.252.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:3e:90:5b:a9:3b:f2:ca:85:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=42abc542-73f0-46c7-8c2c-53bec2e94b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:7a:be:d4:44:7a:e3:64:fe:fc:6f:56:2b:
                    3f:dc:e9:28:8c:fc:67:1d:69:96:6a:99:b5:59:9f:
                    65:41:10:15:1c:95:62:cb:55:69:07:ea:72:4e:bd:
                    24:4d:55:82:87:df:62:7e:4e:c5:0e:12:86:ee:0b:
                    82:70:4f:d7:35:15:a2:42:78:b8:da:00:d7:39:a3:
                    fe:6a:d5:8b:f1:6c:0f:9d:a8:8a:0c:64:98:6d:b9:
                    6b:1f:af:bd:9d:f7:c0:14:62:60:9f:2c:88:7c:b4:
                    d5:4b:f5:96:81:62:cf:a5:51:d9:7a:f7:cf:2d:34:
                    b1:24:39:a8:04:ad:a3:57:0e:c5:9a:48:5d:99:b2:
                    89:1c:f7:c8:86:d8:a9:05:88:2c:74:1f:2f:cf:c1:
                    62:1a:76:e5:77:7f:8c:9c:4d:0e:89:f2:c6:35:3b:
                    91:fa:0a:64:49:f3:e0:34:0d:84:6d:64:f7:44:7b:
                    17:8b:8c:8b:12:73:04:59:4e:1f:90:27:ae:fa:61:
                    d6:f9:4d:ac:02:d7:98:f5:61:93:92:30:07:e3:e5:
                    e7:7c:4a:c0:d6:81:18:cc:93:96:5f:3d:2b:b5:0d:
                    9f:66:00:95:cf:15:8d:1b:e1:d4:b9:43:a8:12:5c:
                    f9:ce:8c:57:d1:2c:16:27:ac:ac:f7:91:80:73:6b:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:37:57:EA:B7:03:21:C1:BE:A6:80:38:17:7E:05:C8:2E:63:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:8b:a2:f1:c4:05:f4:93:54:f5:1d:7b:ab:e5:67:14:29:
         fc:11:aa:38:fc:c7:15:1b:f9:0d:c2:d6:c4:d9:2e:9e:0a:2f:
         dc:cb:f7:36:48:f2:af:7b:ec:43:d0:d8:b0:8a:2a:86:1a:84:
         16:3c:6e:d3:8d:03:3b:e8:d5:f2:5d:95:e5:cb:0a:da:2e:2e:
         47:5f:82:8d:fe:60:d1:a3:e3:c8:cd:76:9d:c7:7c:cc:0b:34:
         0a:a4:e2:70:18:d5:1e:99:80:81:2c:8a:ab:2d:d6:4e:eb:de:
         48:15:98:3a:fc:77:b7:6b:39:03:b5:e1:98:a2:6a:dd:3f:e6:
         99:51:b6:27:08:c7:a3:8a:25:bc:80:70:68:fd:c8:b4:cb:6e:
         44:5c:dc:39:54:cf:4b:47:86:8b:8b:b5:8e:6c:d9:57:5a:96:
         28:f2:cc:9b:ba:55:7b:5a:31:b0:12:ae:47:8a:e2:64:78:fe:
         9b:5e:8a:87:2a:61:56:d8:08:38:ac:95:2f:8e:53:98:e4:41:
         c8:3c:b5:24:6d:54:99:c6:bb:22:e6:7c:b0:f0:c2:7d:fa:6d:
         02:d4:1c:b0:f7:58:60:f1:cd:37:5a:4a:ac:ce:81:42:b5:df:
         12:63:dc:db:d0:c0:ca:84:4e:d6:86:c3:ea:e8:16:4e:4b:6a:
         cf:35:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:24 2026 by rpki-client