Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39f4a491-b85b-321d-99b9-d70786d03338.roa
File:                     39f4a491-b85b-321d-99b9-d70786d03338.roa (raw, json)
Hash identifier:          86FoEo4GsHz7ZHEpUBwRluqvvfMDVDZkLYNrkx0F+1o=
Subject key identifier:   2C:BF:A1:3C:92:67:B0:62:08:54:9C:6B:AD:95:26:53:CF:1C:A0:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58A6E8F76046666F808300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39f4a491-b85b-321d-99b9-d70786d03338.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        98.46.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:a6:e8:f7:60:46:66:6f:80:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=00226897-7104-475b-a821-34ca016bfe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:7c:a6:89:9b:26:bc:c2:42:d7:34:85:48:
                    ec:16:69:ca:f9:e1:0f:66:e7:a3:62:f4:e0:ce:76:
                    c7:38:de:fb:4f:27:35:65:95:bb:0b:d4:d0:f2:21:
                    9e:58:ee:b8:86:f4:86:34:ca:32:c9:45:60:35:0f:
                    cd:88:21:74:c9:9b:6d:b1:23:fa:69:4a:d8:ab:fd:
                    d2:d1:ea:62:da:b2:84:69:41:6f:9d:26:85:04:a4:
                    62:ec:4b:af:f2:b7:87:ec:9e:7e:8c:06:0d:22:74:
                    1a:59:ee:59:21:3b:32:fb:e1:e8:53:a8:cd:2a:0e:
                    b4:07:35:23:13:6f:2d:4f:f7:ed:fa:46:bd:cf:da:
                    0b:08:66:f9:34:8e:f1:93:02:50:ad:aa:99:dc:5e:
                    f6:5c:53:bd:1d:76:6c:c3:db:68:ba:0d:2a:31:39:
                    05:58:81:aa:b7:31:b9:c8:d2:49:01:9a:54:87:9a:
                    2e:2e:ce:81:83:f6:fb:1f:b9:9b:28:db:01:12:39:
                    47:70:bd:66:a6:b7:e7:c8:ab:5a:70:10:b5:0f:ef:
                    35:fa:37:a8:40:b5:df:18:91:f5:26:81:ff:40:11:
                    03:73:07:21:21:5a:ce:22:00:93:3f:d8:77:72:8c:
                    76:cb:2a:af:fb:10:66:d4:52:9d:9a:a9:49:1e:45:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:A1:3C:92:67:B0:62:08:54:9C:6B:AD:95:26:53:CF:1C:A0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39f4a491-b85b-321d-99b9-d70786d03338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:9e:6b:29:19:a9:e2:96:e9:3f:e1:ba:e1:09:2b:8f:62:
         43:e7:94:3e:d8:71:be:41:8d:36:47:41:dc:29:09:54:ed:2f:
         f8:76:ac:4a:20:f3:fa:2a:d5:5e:80:e9:7e:41:b3:ec:67:bd:
         33:80:86:12:1f:2a:59:bb:89:c1:14:b5:76:8b:c3:98:b6:ea:
         05:6c:0d:57:c4:0e:8c:68:93:3c:9a:0b:4c:94:52:a8:78:bd:
         1d:f2:a5:f0:e8:ee:81:c0:e1:90:8c:11:d6:84:02:1a:b8:16:
         3a:f4:89:33:a7:78:4b:f8:b3:ab:59:fb:08:25:48:64:07:d8:
         b6:c9:9e:91:93:c8:95:92:6a:25:2b:eb:7e:87:d9:0b:32:fc:
         dc:95:3a:23:e9:88:d1:bd:34:69:3a:bb:33:a8:82:0f:a3:be:
         98:f4:d9:e1:10:a7:7c:12:80:28:47:99:85:dd:74:fe:c6:15:
         65:4b:6b:d0:be:55:78:23:e6:4c:96:2d:56:33:d9:9e:8d:d1:
         a8:d8:a7:8c:0a:aa:d2:03:3d:e0:16:26:57:9d:ec:a7:cf:f5:
         3d:1d:84:c5:3e:52:d5:b8:74:e7:f8:3b:6e:7d:df:7f:e5:d2:
         57:be:df:97:5c:20:ca:60:c8:ec:8f:30:09:9f:10:53:db:34:
         79:1a:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:52:05 2026 by rpki-client