Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/438d3767-c4d5-32d6-b5cb-1769c08b2f53.roa
File:                     438d3767-c4d5-32d6-b5cb-1769c08b2f53.roa (raw, json)
Hash identifier:          rIyIoRee/HO14lQ/G/MXk52tGxKzA2syIwug7yIi5zQ=
Subject key identifier:   68:45:50:C6:6C:67:FC:EA:32:AE:DF:BA:25:D0:C1:BF:EB:30:CC:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8B78C0C640E5E1D1CC600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/438d3767-c4d5-32d6-b5cb-1769c08b2f53.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        98.59.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:b7:8c:0c:64:0e:5e:1d:1c:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=a73321c1-1c11-48a4-8d28-d0f0572dc044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:8b:fb:64:81:fa:a1:f3:31:0b:14:ba:33:
                    e4:22:20:e7:c5:92:bf:11:7e:39:41:cd:92:1e:3a:
                    54:a7:15:6b:18:0e:24:2a:5c:7f:48:c1:74:e1:1c:
                    79:9c:b8:68:dc:99:9f:8f:03:4c:f0:cc:c0:2f:86:
                    50:46:ea:de:7c:db:f9:0d:38:11:a6:ef:7e:4e:1a:
                    ac:62:e4:3f:fd:c4:38:80:c3:95:f5:72:50:a1:39:
                    5a:5e:e2:f1:6b:86:c2:0b:b4:69:6b:c9:f3:06:59:
                    b4:6e:c7:d7:5f:7a:4c:45:df:e9:70:4f:65:20:89:
                    c5:a8:ce:f9:79:51:d4:92:ed:4b:96:78:7c:7c:c6:
                    fc:40:1e:6c:e2:1a:ee:55:6f:c7:be:c8:e1:2a:f0:
                    0a:26:b9:a1:25:3e:5c:5f:44:6c:d6:b3:e6:cb:a7:
                    17:bf:ea:9c:61:8c:35:68:ec:c3:04:8c:76:51:5f:
                    03:ef:07:3f:83:fb:9d:2a:90:45:17:46:71:8a:f7:
                    fd:9a:20:2f:9e:39:f8:f0:b4:ef:93:b4:35:a1:6d:
                    8c:f0:d9:24:56:34:55:b9:cf:77:84:cd:86:cf:ab:
                    b6:66:33:01:24:2a:44:df:f2:d8:92:55:be:22:42:
                    8d:fe:65:f5:49:b5:7e:83:58:fb:25:8b:7d:b1:7d:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:45:50:C6:6C:67:FC:EA:32:AE:DF:BA:25:D0:C1:BF:EB:30:CC:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/438d3767-c4d5-32d6-b5cb-1769c08b2f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.59.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:0d:50:0b:38:e4:a7:df:06:5b:7e:5d:69:27:1e:9f:d0:
         6c:ec:53:51:79:70:fb:42:d1:2a:46:8a:db:7f:fc:50:74:d5:
         55:6b:68:74:b5:c3:73:0a:e9:50:ad:91:a2:d4:13:cf:31:54:
         b3:42:a4:1a:40:69:97:c9:b1:e2:ab:71:76:f5:32:80:69:12:
         e1:ad:91:62:c0:e5:6a:1d:eb:0b:dd:8c:df:11:ca:22:83:37:
         e6:33:7a:95:7a:c8:69:ad:3b:14:7b:66:65:47:a0:ee:4a:ff:
         18:40:86:9b:33:b9:f6:8e:12:9d:1f:66:81:51:3d:2d:1e:d4:
         c7:8a:d2:86:f3:da:17:fd:74:e6:fd:07:85:4f:59:b6:ef:ca:
         69:0f:6e:10:79:a7:07:02:5e:75:ea:74:60:80:60:3e:dc:a4:
         c9:74:43:58:e1:f8:65:d4:cc:5e:bd:1a:dd:fe:01:db:22:1c:
         3c:5f:64:14:b7:7a:11:95:62:ff:4a:18:37:b3:78:f0:d3:42:
         ee:f6:dd:26:b8:9f:85:ab:1e:11:8a:a6:14:6a:e5:e2:ea:55:
         be:3f:66:c2:34:68:9c:9d:42:65:05:be:90:4f:cb:4a:8d:5a:
         fd:2f:ce:e1:f3:aa:a0:36:cc:7b:52:92:85:3d:b6:c2:41:c4:
         ad:b2:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:20 2026 by rpki-client