Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c081cc2-67e1-354c-ab78-9bb20acfc7ea.roa
File:                     2c081cc2-67e1-354c-ab78-9bb20acfc7ea.roa (raw, json)
Hash identifier:          BfbzjZvm6n7QqpfDZj71iS6nWv0ypGA9RXIStlXDqpU=
Subject key identifier:   FE:03:41:C4:30:6C:AA:A8:27:86:BB:A6:9C:0C:86:3D:24:53:9D:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE575DB4CE2A6E044DE93648
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c081cc2-67e1-354c-ab78-9bb20acfc7ea.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        98.202.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:5d:b4:ce:2a:6e:04:4d:e9:36:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=34d10537-4751-467a-82c3-8d029f9c49fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:77:43:52:d1:06:38:da:8d:fe:97:98:67:
                    15:43:cf:fc:58:4e:21:25:0b:a9:c8:46:8f:dc:dc:
                    2b:c3:46:dc:29:19:1e:66:ef:e9:31:e5:c9:eb:a9:
                    b0:d9:bd:27:5b:fc:e2:a2:24:03:19:00:75:fb:0c:
                    3f:13:a5:06:d8:83:1b:b2:57:03:a2:5f:5a:9e:bc:
                    87:a1:4b:2c:08:56:4c:58:18:f1:7c:28:ed:12:09:
                    01:da:7c:29:f9:c2:57:a3:8a:d6:0c:a3:49:c1:7f:
                    09:c1:e1:3b:a9:3b:e0:f3:d6:f2:7f:ea:7d:aa:c6:
                    f5:de:81:d3:b1:92:df:aa:42:c6:d6:c4:9b:ee:2f:
                    59:35:d3:d5:75:f0:25:37:05:a4:d0:68:78:d2:01:
                    51:9c:70:39:6a:78:57:4b:05:04:a9:5e:0b:84:e8:
                    c5:03:60:b3:98:ce:32:3e:76:f7:73:e7:96:d6:07:
                    66:0c:8b:9a:90:16:e7:21:20:5e:75:49:8e:6e:c1:
                    28:c8:51:b7:12:d2:46:b8:0a:5b:0d:41:26:69:4c:
                    cf:33:6b:02:04:f3:f2:00:e4:cd:f9:da:9c:2e:ec:
                    62:f4:a3:7b:9b:c4:70:15:7b:79:7c:99:1e:2e:65:
                    5e:7c:9c:d5:15:f0:b6:58:d3:93:8e:a9:6d:5a:db:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:41:C4:30:6C:AA:A8:27:86:BB:A6:9C:0C:86:3D:24:53:9D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c081cc2-67e1-354c-ab78-9bb20acfc7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:42:77:6c:c8:aa:21:ee:03:b8:be:43:2e:ce:39:30:6a:33:
         07:6c:7a:7a:9a:51:f4:17:19:2c:cb:d7:e5:55:82:9a:2a:5e:
         c3:4b:ee:99:9f:44:bf:6e:cc:67:db:f5:e7:b4:ca:32:2c:64:
         79:b5:33:7d:8e:5c:ab:45:cc:1f:e9:b6:84:bf:62:7e:5c:a7:
         6a:88:77:05:87:e6:ce:9c:56:d4:a0:f4:b3:bb:c0:3d:13:ab:
         2a:78:04:43:dd:0b:b7:8a:be:97:09:e1:ea:5d:97:1d:d4:30:
         b9:61:bd:07:33:b5:eb:c3:62:1a:19:96:6b:2d:a7:4f:ac:0b:
         b4:20:18:09:a2:97:d1:02:5a:7b:9c:43:af:74:79:8e:b1:07:
         49:7b:6e:51:96:79:ac:68:d5:a1:91:10:c2:08:ad:52:1a:a6:
         86:8a:93:c6:21:97:63:1e:a6:13:25:2f:44:fe:64:14:82:2c:
         c7:b6:c0:87:98:fe:c7:ee:a6:b5:31:1b:79:40:48:60:c9:71:
         8f:1d:af:3d:f5:34:25:fc:ed:c7:2d:a2:8b:be:cc:35:77:c4:
         eb:17:20:cb:73:e4:d0:47:ea:ac:98:da:b8:96:9d:a3:e6:e5:
         f0:29:4e:cc:b4:53:3e:7f:e8:14:09:d6:bd:09:38:8e:b6:0f:
         b2:29:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:12 2026 by rpki-client