Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57d6a227-fe6b-30c1-8469-fbf6dd5c36c3.roa
File:                     57d6a227-fe6b-30c1-8469-fbf6dd5c36c3.roa (raw, json)
Hash identifier:          0zV0Uju2Wjo1+qs0zSoUp2Od29ZPRPluSV2dpiWT/lA=
Subject key identifier:   90:F1:EB:0A:52:00:97:A9:EE:59:C3:65:B5:DC:D8:DF:79:A9:92:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA3D5FF8F7B00F0DDDA280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57d6a227-fe6b-30c1-8469-fbf6dd5c36c3.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        98.61.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:3d:5f:f8:f7:b0:0f:0d:dd:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=b4d1777b-d761-499b-b573-2bfaacc99a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:5e:c2:3b:d3:2a:fc:2c:13:9f:44:ee:53:
                    a2:a6:4d:ee:c9:cd:7d:ff:a2:b5:da:6c:20:4a:e2:
                    6b:52:72:e9:29:55:82:4f:e6:a7:b4:9f:59:55:ca:
                    8e:f5:d7:b9:5c:68:a0:26:8c:80:2f:77:d2:4f:9f:
                    43:16:f5:d9:39:22:08:2b:e8:4f:42:2d:e9:4b:ef:
                    c1:b2:ff:b4:be:df:55:76:2c:fe:30:c8:29:9f:78:
                    4e:82:eb:b6:41:1d:15:bf:01:ee:f4:e7:e5:6a:c2:
                    66:ec:18:88:59:c2:f4:54:7a:42:ae:52:8c:8a:34:
                    0a:ee:34:6c:41:2b:31:ce:2c:9b:94:c8:e4:2a:67:
                    2f:4d:22:12:53:1b:02:55:f0:51:10:da:33:57:87:
                    fc:ed:73:3c:8b:72:0e:8a:48:0b:6a:a3:d6:86:53:
                    9a:12:75:1f:e0:0f:4e:64:40:91:05:4b:cc:e5:41:
                    93:7a:1f:8e:32:df:8b:6d:97:a5:6c:60:d6:46:f7:
                    6c:ab:8b:1c:ab:06:b7:03:ce:b3:a0:0f:ac:e1:6c:
                    82:a9:d3:eb:88:a3:9c:cf:0b:64:ed:b2:d2:bb:3e:
                    c7:19:cf:91:76:0f:e0:14:c3:13:62:28:ea:7b:54:
                    7f:04:14:4a:03:7a:cf:16:a7:bc:b7:31:c7:70:4d:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:EB:0A:52:00:97:A9:EE:59:C3:65:B5:DC:D8:DF:79:A9:92:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57d6a227-fe6b-30c1-8469-fbf6dd5c36c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:63:84:2a:14:18:74:1a:3b:17:e4:c6:3d:b2:33:90:4d:dd:
         64:30:89:85:51:b3:26:46:29:29:ec:dc:1b:5c:cd:9e:51:bb:
         3a:6c:96:5e:fd:30:24:26:d6:d8:34:71:68:2f:2e:42:52:13:
         75:18:9f:55:82:b6:c2:e4:35:a9:3e:d3:0b:4d:72:b0:54:3a:
         9b:70:77:b8:2e:2e:9b:b0:03:42:f8:c0:06:eb:bf:6e:53:56:
         ce:ac:73:b3:38:96:fd:94:aa:75:40:86:7c:fe:4e:bd:f0:44:
         08:0f:01:dd:6d:dd:51:a5:86:57:7d:fe:67:38:cb:51:73:28:
         6d:21:42:c7:32:32:63:21:57:93:b9:fd:b4:45:41:f2:9b:49:
         9e:a5:e5:fc:da:70:07:48:63:79:6e:b0:88:50:ae:9d:71:2c:
         97:95:2c:98:7c:63:ac:ba:1f:99:1c:c3:58:bc:1a:05:dc:f4:
         c5:37:bc:b4:8d:3c:6b:b6:3b:95:34:d2:c4:ed:b8:6b:12:74:
         63:ba:41:a1:17:9d:07:33:f8:d8:8b:40:ff:49:97:4b:4a:d9:
         2d:64:cb:4f:46:31:0e:3e:d3:ed:df:e4:6f:c7:58:ea:72:44:
         01:9c:c5:3b:29:0a:e5:a6:26:d8:07:73:a8:a5:51:a4:14:a4:
         17:a2:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:47 2026 by rpki-client