Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5350215e-3f93-3285-bec2-24cc80014647.roa
File:                     5350215e-3f93-3285-bec2-24cc80014647.roa (raw, json)
Hash identifier:          d2NT+0fXHWCTGBxKilw6fQUZsdhFL1voqSfL1Kis+6A=
Subject key identifier:   20:B6:71:2A:B3:16:67:40:30:C8:DD:FE:C3:28:21:1F:AF:98:F1:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243BD6A75A4391F36319FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5350215e-3f93-3285-bec2-24cc80014647.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        98.54.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:bd:6a:75:a4:39:1f:36:31:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=bfb5d90a-717f-447c-81b6-1353f042db59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:c7:36:51:81:fa:ee:13:22:a9:62:73:0c:
                    40:5b:bd:7f:7e:8c:a1:50:b2:80:fd:b3:cc:1c:6f:
                    33:03:c9:a3:11:6b:25:fb:68:e7:1c:1a:c6:ab:01:
                    41:38:eb:ea:fb:03:97:86:ff:e0:83:2f:de:bf:a2:
                    45:4d:c0:44:a1:86:08:ae:da:37:05:ec:58:30:5d:
                    f6:06:90:0d:1f:20:e4:dc:48:4a:68:10:76:12:b0:
                    59:7d:f3:01:2b:ee:25:96:43:33:e4:92:19:47:0b:
                    4d:a4:b3:6a:e9:76:db:1e:d6:fa:1d:ad:2e:df:43:
                    33:b8:cc:9f:8a:77:92:ee:4a:61:bc:47:ee:06:fc:
                    48:53:c3:b8:f5:18:48:05:cb:b8:12:94:84:49:c2:
                    14:40:38:a4:e2:f8:98:ff:a9:d0:af:54:f4:45:cc:
                    c7:b6:1d:61:99:ca:8b:a0:91:1d:8e:fb:45:30:6b:
                    e6:8b:37:3a:02:30:2f:af:cf:72:69:89:31:c3:1e:
                    8f:cd:d4:b5:08:0c:77:bd:26:5b:3e:9f:d4:fb:b5:
                    71:a0:9c:9f:f1:1a:f4:c9:8d:f5:0b:0a:ed:91:34:
                    e3:e8:dc:66:d9:e2:4a:cf:11:fa:e2:6f:20:4f:d8:
                    f4:b0:94:e0:4c:8b:0a:43:03:00:bd:35:67:e2:09:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B6:71:2A:B3:16:67:40:30:C8:DD:FE:C3:28:21:1F:AF:98:F1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5350215e-3f93-3285-bec2-24cc80014647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:b7:a3:a3:d9:2b:7e:f0:f0:67:5c:2e:ad:8b:6a:c9:c3:75:
         98:29:87:20:7a:a9:37:b4:44:5a:ba:2f:a3:f7:f8:8e:83:f4:
         a8:a7:06:e1:af:26:c6:c5:d5:01:6d:b9:65:4a:33:ec:10:4d:
         02:a5:99:1c:95:6c:35:9c:a7:30:8a:2b:11:24:b4:ae:ec:9d:
         cd:de:e8:24:63:d9:11:53:05:f8:24:2f:05:94:9f:29:75:42:
         da:df:d7:61:cd:06:d7:ff:de:23:e1:53:46:88:3f:0d:8d:50:
         0b:f2:91:79:77:34:8c:4a:da:db:e2:f8:e1:f9:ed:eb:5e:f5:
         5d:5a:50:70:01:48:53:87:a9:9a:41:47:25:21:69:d6:a2:f3:
         e5:ba:bc:2c:62:01:c0:7f:a0:9c:8d:57:3c:fd:15:46:d9:1f:
         87:9e:d7:2a:b2:47:19:af:b7:de:d8:bf:f4:98:03:06:74:7c:
         2f:7e:42:1f:84:a1:fc:8c:c2:d1:55:2d:0b:46:ef:1f:8a:f5:
         2c:cb:14:9d:c9:f3:8c:8d:83:25:19:1b:4b:63:39:43:d8:ce:
         5e:7d:98:26:3c:cd:a8:20:37:a8:49:66:5a:30:eb:96:08:8a:
         24:ef:bb:0c:50:dc:3d:5f:d5:c2:8c:25:7b:18:c5:db:9e:a9:
         0e:56:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:10 2026 by rpki-client