Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9f5c30-ee6e-3367-9299-9c19dc70f2d7.roa
File:                     2c9f5c30-ee6e-3367-9299-9c19dc70f2d7.roa (raw, json)
Hash identifier:          Q7B/5PaNYBx9X//gGrBFisT7PdA9BLrdFWkHPSUSfkw=
Subject key identifier:   73:D4:25:85:A2:04:4D:E5:7F:9F:12:85:97:E7:D5:28:CD:1E:C3:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243BC37A3F6CFB7373D1C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9f5c30-ee6e-3367-9299-9c19dc70f2d7.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        98.50.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:bc:37:a3:f6:cf:b7:37:3d:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=740fd5de-5eee-4c46-aec3-d59f021ec996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:26:90:ed:9f:72:fe:01:40:35:25:45:c4:
                    96:04:7f:6f:d7:6e:ae:3c:9a:3d:77:34:2a:1c:f9:
                    b2:bd:60:e4:7b:1d:c0:8c:64:57:18:26:04:18:c3:
                    fe:88:fc:3a:ed:c4:72:d7:23:a2:d4:0b:61:a5:c9:
                    bc:da:79:b6:07:fb:12:d5:a9:50:c0:ed:a4:b6:72:
                    f5:18:55:ee:2c:88:3f:c6:35:bc:8f:22:0c:15:e0:
                    1a:94:37:cf:85:77:17:60:71:43:a8:3e:d4:62:2e:
                    e9:4a:36:fe:1c:ae:52:3b:e0:37:cb:ec:a3:01:53:
                    b9:36:83:a6:40:0e:5c:35:33:89:cd:55:5c:96:40:
                    ee:d0:3c:bc:be:2c:10:33:ac:26:7c:9d:62:a9:62:
                    bc:b7:67:bb:cd:42:93:d9:ba:f6:7a:9d:90:e1:e5:
                    04:08:3d:37:1c:92:84:22:61:38:be:5a:68:95:31:
                    a1:13:da:72:82:fa:89:fa:2b:c6:fb:e2:68:33:be:
                    da:e5:f3:e5:58:fd:ff:e9:0f:8f:36:ed:c2:07:13:
                    e9:07:a1:b2:dd:5b:c1:05:6d:2b:ec:1e:e3:f0:f1:
                    ef:54:fe:ea:86:8d:74:f5:91:b8:8e:b0:fd:66:00:
                    f6:e5:9c:1f:91:b4:88:1a:25:fc:d6:cf:80:f8:5d:
                    2f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:25:85:A2:04:4D:E5:7F:9F:12:85:97:E7:D5:28:CD:1E:C3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9f5c30-ee6e-3367-9299-9c19dc70f2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.50.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:4b:b1:c5:40:08:b0:ab:05:a3:a6:e9:19:ee:32:f5:4e:
         28:5c:e7:03:45:07:a3:2c:8c:57:26:a7:ac:f7:20:ef:4f:eb:
         de:ec:69:f3:22:6c:23:f9:df:d0:c5:80:52:6b:c6:68:61:3b:
         f9:a4:2e:ba:8f:a5:bd:e5:b4:9c:53:9f:29:5d:b9:04:0e:39:
         ca:d8:e2:3a:8f:29:18:a9:52:fe:88:dc:20:63:e5:15:08:bf:
         bf:e8:03:17:17:c4:4b:d3:0c:66:ed:69:8e:b9:60:e0:d2:b9:
         36:df:f8:68:42:15:cd:a2:88:60:65:09:c5:67:7a:db:7d:95:
         63:7a:7e:53:a3:67:63:07:85:9b:32:a8:b3:a1:14:b2:10:0d:
         10:5e:f2:82:53:f3:b5:1c:8c:c2:b0:10:00:d0:69:85:a3:78:
         ef:6b:be:02:41:c0:ef:9e:b1:15:ef:be:e8:1f:b7:3e:52:2f:
         c9:c4:a1:04:20:02:ed:9d:a3:af:c9:c6:39:c1:f9:07:3f:34:
         b2:8e:68:e8:a5:1f:02:55:d4:6f:a2:02:8b:de:03:fb:ef:bb:
         ce:1c:19:88:d9:d3:da:02:91:88:02:cb:cf:9b:e2:12:f7:9e:
         3c:ec:73:c0:07:28:44:08:bb:c0:58:f4:89:ca:97:17:0f:8a:
         e1:67:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:24:30 2026 by rpki-client