Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/336ca603-8abe-30ab-835e-a7d62534cde0.roa
File:                     336ca603-8abe-30ab-835e-a7d62534cde0.roa (raw, json)
Hash identifier:          Z/qAYJzZk9jTUQd49yoe66X4/hRfq2xHKGu8GF4iefk=
Subject key identifier:   0F:0C:CA:AF:99:B0:CF:9A:7F:35:ED:26:A3:54:08:06:FF:36:3B:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52438627D45D1B79F9AD6100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/336ca603-8abe-30ab-835e-a7d62534cde0.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        98.251.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:86:27:d4:5d:1b:79:f9:ad:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=f8a374a5-9b17-48a2-892f-9ef22f132eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:15:9a:89:e4:ab:8e:eb:dd:ff:8f:f8:24:
                    60:5f:7b:0b:30:b9:ab:cd:ee:7b:7e:8d:48:fd:70:
                    19:9a:04:07:f7:e0:31:ce:14:10:37:e6:d3:f1:7e:
                    20:9a:ba:94:d9:eb:97:93:e3:b6:76:c6:41:a3:d1:
                    34:db:c5:4d:3f:51:9c:6a:40:49:2d:65:dc:f1:a1:
                    2c:60:af:a3:1b:b1:b5:bb:3a:f8:c1:f4:c1:b5:83:
                    66:2a:0e:5a:12:c0:5a:e0:7d:b9:88:e6:25:09:ca:
                    88:52:b6:a9:b1:0a:73:82:7b:4d:4d:18:7b:4a:59:
                    a5:10:39:27:8c:ef:88:ee:c3:09:7f:9c:04:a9:63:
                    62:d4:c3:81:ca:76:ba:45:6f:86:fd:60:63:27:b5:
                    e1:fa:c0:32:b3:e1:87:0c:98:49:f3:d9:a8:f2:2a:
                    16:95:01:73:25:8a:fa:44:32:44:40:1f:7c:0f:e4:
                    06:ab:e5:2e:b1:fb:b2:a6:86:89:9e:e7:c0:0e:0f:
                    ce:2b:2e:47:80:08:21:04:3a:94:7e:f9:e4:00:b2:
                    d8:e7:f4:a8:74:88:56:af:17:9a:c3:77:64:e5:1b:
                    d0:5f:18:7c:8f:f4:48:7a:2d:0f:11:f6:0a:54:8d:
                    e4:fc:88:62:29:19:48:da:05:c0:3e:37:d4:7b:04:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0C:CA:AF:99:B0:CF:9A:7F:35:ED:26:A3:54:08:06:FF:36:3B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/336ca603-8abe-30ab-835e-a7d62534cde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:26:a4:cd:2c:eb:f6:53:c4:74:f0:28:a5:8e:63:ed:f1:
         87:76:c6:ff:5b:bc:93:ab:31:27:00:6d:13:6a:0b:35:2f:d9:
         53:2c:d8:29:1b:1f:fd:d7:a8:e5:56:90:14:6b:0b:55:59:a1:
         40:4c:6d:fb:e7:22:1a:d9:68:14:18:43:f5:31:ba:5e:f0:cb:
         2b:10:46:02:66:57:e2:bb:57:66:7c:50:5c:fe:9f:18:08:de:
         6e:72:7e:8e:b9:78:bf:ed:b3:6a:e8:ef:d3:51:05:de:e0:01:
         dd:00:ce:3e:f1:3d:75:49:cd:73:81:7b:ca:80:d2:9e:39:4b:
         d9:79:d8:c8:66:bc:d2:24:99:c2:6b:21:80:be:5d:19:cb:22:
         64:29:07:b3:e6:b5:b0:dd:c7:6c:01:df:6b:92:b3:ab:2c:ca:
         22:b6:fa:1c:32:03:c3:8e:88:3d:22:99:15:18:73:36:51:df:
         d4:33:74:15:c8:0e:f1:0d:a7:c7:16:ec:e9:ef:71:fe:08:f6:
         b2:7d:1d:52:f5:41:d5:67:03:f3:47:16:2a:ee:9a:84:c3:cf:
         5a:46:e6:9c:21:c3:f1:9f:e4:71:ed:ab:26:c1:17:a9:23:98:
         fd:ab:08:e5:da:3b:97:2c:cf:46:14:72:76:f3:88:79:de:da:
         11:ab:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:11 2026 by rpki-client