Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2b7eba-ee67-3a89-9103-1347d60a847d.roa
File:                     4a2b7eba-ee67-3a89-9103-1347d60a847d.roa (raw, json)
Hash identifier:          t61Ir5dOzhkj7DGjfcAkL+DMu9jRM93oO0oD94p7fiM=
Subject key identifier:   F6:6F:B7:7E:34:74:A5:99:CA:08:EC:E7:FB:5A:09:A3:0B:48:36:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB6EC8C25859C6DEAC6C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2b7eba-ee67-3a89-9103-1347d60a847d.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.197.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:6e:c8:c2:58:59:c6:de:ac:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=21f71671-a170-4870-a227-d0280089061a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:bb:e3:9a:57:a4:9b:84:6d:fc:56:78:3c:
                    fe:42:37:c1:ad:e3:15:7a:72:05:12:e6:28:c6:f3:
                    3a:c4:92:6b:92:79:68:09:3d:84:1c:58:21:70:ec:
                    91:5d:af:32:3a:92:5d:5c:d7:12:ec:f0:46:ed:da:
                    b3:be:81:a7:4f:6c:5a:cb:6d:29:b0:54:fc:57:27:
                    b5:53:08:54:34:f1:87:d7:4a:17:f3:c7:7c:b3:b4:
                    0b:58:66:ce:30:ee:76:61:a8:55:80:de:bf:d0:24:
                    22:2d:12:18:b8:95:6a:60:ea:07:c3:32:bd:f1:96:
                    0d:79:43:1c:65:31:cf:08:5a:b9:f3:02:fc:15:f2:
                    0d:b2:08:f5:87:46:3c:fd:af:dd:e9:0c:82:ae:2e:
                    b8:99:37:f7:bf:87:6e:f0:49:5b:28:cc:b1:17:e4:
                    c2:c1:88:b7:2c:74:0f:8b:63:a8:e7:f7:aa:d9:45:
                    8f:3c:ae:eb:91:b9:f5:35:13:dd:6f:ec:c9:b8:26:
                    09:31:5e:34:85:18:b6:33:a7:17:38:4a:e9:bf:19:
                    d2:8e:42:6a:ce:ea:6e:83:c5:46:12:f2:9a:b9:80:
                    a4:ff:a3:33:ab:f8:27:62:ba:be:34:69:45:2b:4d:
                    54:73:33:84:d1:08:0f:78:92:33:74:ed:4a:2f:1c:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:B7:7E:34:74:A5:99:CA:08:EC:E7:FB:5A:09:A3:0B:48:36:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2b7eba-ee67-3a89-9103-1347d60a847d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:52:cd:10:89:d2:ca:ac:5b:b4:3e:0c:1e:dd:69:b0:64:
         1a:65:73:65:aa:e9:7d:90:7e:5b:70:47:d9:08:ee:81:7f:ba:
         af:46:8d:68:cf:60:ef:28:f3:8e:e4:94:68:b0:ca:cd:93:e6:
         4b:5f:a8:6f:72:fd:5d:1e:a1:9e:2f:f7:99:a1:f5:76:98:3b:
         29:d4:84:ba:28:4d:a7:4e:c2:e8:ef:43:99:22:28:57:8f:23:
         45:68:81:24:02:6c:1d:54:7d:15:53:cd:f5:16:fc:2c:4b:56:
         e7:09:0b:ef:ae:4c:fc:5c:c9:bd:75:45:d8:be:77:61:23:09:
         07:36:4d:b0:50:6f:1a:59:3f:f6:80:84:5d:9e:78:58:6a:83:
         b9:c2:d3:fc:c8:0b:ef:bc:23:05:c8:68:f8:fb:5d:88:e7:0a:
         36:2f:d7:2c:53:7b:b5:0e:d7:23:11:55:8a:d9:13:1f:e0:da:
         c3:72:0d:19:4d:8d:d0:ca:d4:78:13:62:73:b5:56:02:51:24:
         26:e0:01:60:6f:16:e5:d3:3a:5d:3f:38:5a:2f:d0:2d:53:a5:
         84:64:9f:0d:32:7f:fa:51:e0:51:75:37:32:72:07:5d:77:59:
         25:a0:6a:63:73:08:10:fe:23:d3:a4:e8:65:ac:12:4d:e5:89:
         42:e7:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:41 2026 by rpki-client