Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bf54161-5ef4-30a6-8e07-1d65ada05dc4.roa
File:                     2bf54161-5ef4-30a6-8e07-1d65ada05dc4.roa (raw, json)
Hash identifier:          Zcx8ZSK9fApRGco+LJeQl53DZmpCQKXt1LLptuCnNE8=
Subject key identifier:   CF:5A:F9:CA:88:0B:C0:B3:CC:7E:E9:CA:BF:FA:71:A0:D2:C0:F0:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC994B1CE965D72F63B040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bf54161-5ef4-30a6-8e07-1d65ada05dc4.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.194.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:99:4b:1c:e9:65:d7:2f:63:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=03866f40-915d-424a-b1ce-285c2843c248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:ac:de:7f:8c:40:2d:41:f8:b3:c7:2d:9d:
                    9a:bb:4a:c6:f4:cb:a9:80:69:d3:5f:95:4e:ef:1e:
                    d6:40:ba:08:b3:57:78:b4:1a:e2:e7:07:36:cf:c3:
                    33:2b:1d:03:70:2b:3a:83:09:b8:95:a9:79:e2:50:
                    c1:e9:de:b5:57:3a:9e:eb:b3:16:72:a5:a4:3d:11:
                    36:0c:20:fb:1c:70:6d:6a:bc:43:49:c2:04:17:a5:
                    68:a1:a8:59:5b:ab:c5:ba:d8:d1:e9:0e:e9:82:dc:
                    f2:47:9e:73:c1:75:07:a1:de:c2:a6:50:bc:54:0e:
                    cd:58:81:4e:fd:aa:b4:77:b4:20:5c:87:e2:df:27:
                    86:27:8d:d9:83:49:11:ce:af:44:44:11:99:67:e8:
                    c0:d9:9b:e0:ab:54:25:ea:f6:d0:7b:d8:81:e2:5c:
                    25:a2:cc:ad:3d:c3:40:82:3f:72:6c:9b:5c:1f:26:
                    39:f7:4e:21:61:a5:62:b4:fe:81:54:93:99:c3:81:
                    0f:0f:91:4b:c7:02:0c:d2:15:d0:37:23:95:26:e4:
                    f6:7b:7d:47:52:75:a5:bc:47:72:70:e8:5e:ab:2c:
                    46:5d:8d:a1:33:0a:f8:07:90:17:b9:4f:6b:07:a2:
                    fb:12:ee:cc:64:75:27:1f:76:c9:b0:f2:c2:f8:dc:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5A:F9:CA:88:0B:C0:B3:CC:7E:E9:CA:BF:FA:71:A0:D2:C0:F0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bf54161-5ef4-30a6-8e07-1d65ada05dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:96:40:25:72:9b:55:27:f7:db:8b:c2:ee:cf:7f:24:34:
         bf:42:4b:39:75:e5:05:c8:06:b0:b0:0d:be:e9:1b:b2:e0:94:
         a7:ac:83:d5:74:14:8e:ed:ee:6e:39:09:a9:68:d5:db:ce:f1:
         04:21:a1:ab:44:96:3e:93:d9:96:7f:ea:0f:07:a7:23:23:e3:
         e0:3d:f5:3a:d1:0c:83:36:67:29:90:97:c5:e6:77:15:c5:44:
         08:29:d1:19:30:78:62:8a:bd:e4:4a:2f:05:55:95:b6:49:22:
         14:19:fd:6a:5b:51:5e:2b:a5:9b:d0:6b:3b:69:8b:58:11:ed:
         83:fa:61:c6:f9:39:c3:36:ab:50:48:e7:23:50:40:fb:01:6a:
         2b:f8:2a:3b:9a:dc:22:bb:fe:18:7f:e4:9f:3d:de:0c:88:f1:
         46:83:49:b9:b1:d3:c4:b6:26:3f:60:f5:95:69:74:3b:98:4d:
         5b:7b:cf:9d:78:22:08:a4:53:d8:46:91:d7:a2:60:56:57:fd:
         58:cd:66:f2:c8:09:1a:fc:c9:10:c3:61:df:d2:f2:39:e7:53:
         6d:00:30:27:25:35:ae:9d:c7:57:e7:1a:5a:5a:3c:34:8a:cc:
         61:b1:2b:68:48:45:7b:d4:03:c5:01:88:0a:06:c8:27:09:9f:
         d7:68:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:20 2026 by rpki-client