Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/269e4ec6-75b6-3180-8ae1-8b98312ebeab.roa
File:                     269e4ec6-75b6-3180-8ae1-8b98312ebeab.roa (raw, json)
Hash identifier:          qb7lVYKK0fIKdXMa2DLaZDDcuyN3lN+8bXgG2qkJ4E4=
Subject key identifier:   47:69:07:5D:98:B5:21:DE:26:46:6C:00:AA:0C:BA:7B:26:8A:BA:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5CDBE4249E59F2CF158180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/269e4ec6-75b6-3180-8ae1-8b98312ebeab.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        98.213.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:db:e4:24:9e:59:f2:cf:15:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ad6298b6-8f70-4f42-b136-acf380e0d678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:61:72:82:02:af:19:b2:a1:5d:d7:e1:92:
                    b1:37:76:16:7a:b8:db:61:2f:28:8c:a5:67:12:a6:
                    89:14:65:e3:cb:97:51:50:52:41:b7:6c:59:95:6d:
                    04:3e:0b:48:ac:12:e2:17:21:b4:32:d2:2e:12:f5:
                    19:58:c8:40:7a:57:25:49:df:c9:d6:dc:23:a9:88:
                    c0:e5:1f:c6:d6:4e:de:60:92:ee:6e:50:28:12:f9:
                    77:18:a6:17:db:e4:d5:a3:6d:2c:39:28:11:c4:28:
                    61:9a:a6:0c:fb:3a:f6:81:38:3f:db:04:6e:b3:a5:
                    39:70:f1:12:59:87:6c:1e:3d:ca:c6:bf:7e:fe:df:
                    2f:30:7b:7d:f1:23:a7:fc:df:e4:74:37:28:f8:b1:
                    22:9e:de:2f:cf:60:78:ee:ec:f0:eb:00:f1:b0:0f:
                    08:be:a6:cd:a2:70:bd:db:bf:fe:92:fa:d1:aa:a8:
                    44:d4:34:56:83:6f:3b:ed:36:ce:43:2a:86:3d:af:
                    bd:52:6e:46:82:45:02:01:25:0d:95:08:49:d2:b9:
                    38:4f:a7:45:25:6b:66:d4:7f:60:6d:ed:3f:f2:16:
                    ff:5c:58:87:68:98:20:32:53:cf:42:5c:d8:a2:d8:
                    aa:67:d8:72:48:5e:75:49:83:4a:5a:d9:09:dc:fd:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:69:07:5D:98:B5:21:DE:26:46:6C:00:AA:0C:BA:7B:26:8A:BA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/269e4ec6-75b6-3180-8ae1-8b98312ebeab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.213.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:a8:04:e5:2c:da:89:c3:88:70:e2:09:09:74:93:fa:a3:
         28:03:e1:ed:fb:fc:42:04:37:1f:da:f1:d5:71:0b:0b:a9:c0:
         2f:8c:d8:28:cc:63:a3:43:32:63:b1:f9:d6:c5:dc:5f:ea:bb:
         a0:2c:de:f2:41:a7:8f:79:da:d7:3e:32:77:72:81:4b:70:49:
         4d:20:f5:ea:c1:9a:3d:4b:19:46:57:ca:22:49:46:b3:63:e4:
         19:be:26:c5:ca:c3:73:c3:ac:79:be:04:5c:84:cd:af:31:45:
         71:37:db:e2:b3:a6:fe:66:27:4f:f2:8e:48:7c:16:09:42:54:
         88:8a:21:c0:0d:f0:df:be:0f:a5:a2:f3:11:d2:9f:a8:3a:6a:
         fd:33:9a:1c:dc:cb:39:10:4c:da:9b:eb:70:75:29:a2:a1:fe:
         7f:56:81:21:b3:f8:04:86:9a:59:cb:b1:e7:ea:a7:19:f8:e5:
         ec:aa:13:3c:61:31:3e:9c:d2:2a:cf:e9:49:71:f0:c5:e9:0d:
         d0:f6:19:7a:8a:32:9b:46:fe:30:9c:ea:91:8f:fc:96:09:b2:
         45:b4:3e:2c:d1:f1:d6:fd:f0:97:5d:8c:90:b9:58:31:9a:05:
         4c:c5:1a:cf:fe:d6:1f:e4:65:ad:00:c2:57:24:22:f4:89:3d:
         f5:a6:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:55:39 2026 by rpki-client