Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75e1117b-7aed-3d10-b7b9-640718cb34d6.roa
File:                     75e1117b-7aed-3d10-b7b9-640718cb34d6.roa (raw, json)
Hash identifier:          E6snnVWIu9ZopT4YLfEkcP5aCuW5DVl7Mr8coR1M22E=
Subject key identifier:   83:B9:CE:7D:4B:E2:AA:D7:86:5C:17:EF:FF:89:AA:3F:EA:A7:A3:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5CDD7F9AE39A55BB02C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75e1117b-7aed-3d10-b7b9-640718cb34d6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        98.213.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:dd:7f:9a:e3:9a:55:bb:02:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ebc8251b-f781-41a0-b8b1-7ace3678da9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:d8:ca:b6:02:44:b4:f3:49:c3:2f:d0:ac:
                    64:4d:05:ed:eb:08:4a:1b:68:69:92:91:98:eb:aa:
                    e2:5d:5a:94:f3:e3:06:68:c5:a8:84:4a:74:a7:5d:
                    dd:ee:e8:de:f0:e0:08:a9:6c:f6:37:75:0d:ac:e0:
                    4c:9a:d2:27:4a:22:21:d8:17:42:e9:83:3a:59:59:
                    2d:45:35:19:24:6a:4a:e0:8c:e6:77:00:d8:65:95:
                    47:ad:c9:b9:45:86:a5:0d:49:89:00:e4:b5:9f:a2:
                    67:fb:e5:ba:35:b7:74:c9:58:db:51:f5:da:9a:dc:
                    9b:44:56:8e:dc:8a:97:f3:35:d7:55:11:a7:da:51:
                    0d:b6:76:d3:1e:f5:62:e1:5c:ea:3c:8f:38:b8:ca:
                    3b:16:0e:26:67:24:0a:2a:6e:57:41:fc:36:57:23:
                    ec:0d:04:1b:e1:8f:1f:fb:99:f6:16:8b:33:57:7a:
                    a9:a2:0c:22:e8:e9:8e:f1:3e:2e:4c:8a:f8:20:9d:
                    23:fb:ad:94:64:8a:0c:47:c3:bb:28:ac:78:bc:f2:
                    ea:12:d6:e7:21:a5:03:9c:d3:64:ef:4e:18:93:a7:
                    3c:df:5b:fa:93:a8:a9:59:6f:89:81:17:46:18:91:
                    08:b9:10:06:05:12:f4:b9:e8:22:a7:69:b3:d8:27:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:CE:7D:4B:E2:AA:D7:86:5C:17:EF:FF:89:AA:3F:EA:A7:A3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75e1117b-7aed-3d10-b7b9-640718cb34d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.213.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:66:f7:20:b5:0a:fe:9f:59:11:c9:a3:e0:9f:56:35:ab:
         8a:80:d6:e9:79:47:96:bc:20:66:3f:67:ab:52:92:2b:69:30:
         90:df:74:4a:e5:15:01:9d:a5:fc:fb:a3:fd:51:ab:8a:04:1f:
         3c:56:20:f6:6f:b7:52:7c:e9:e1:97:27:0b:ae:71:21:5a:d1:
         e9:94:07:66:22:37:90:d2:cc:04:e1:83:62:c5:f0:f0:48:8e:
         93:ae:76:e3:5a:8a:76:95:7d:97:1e:33:a0:d9:e5:4a:a3:fe:
         02:28:b2:29:18:f3:f8:38:3a:f7:17:b4:87:ca:f4:98:78:5a:
         89:25:41:f1:a5:69:c0:40:4b:ad:7a:2a:f6:78:52:6f:0e:e4:
         15:8e:9b:34:6a:16:05:3f:7e:72:07:2d:dd:3b:7d:50:b6:cc:
         97:22:d3:64:12:9d:50:99:3d:3f:39:ab:62:b6:e1:8f:0c:95:
         52:92:37:fd:16:26:0a:71:7d:9a:b5:91:03:3c:05:dd:2e:9b:
         17:0f:0f:02:d2:0d:01:a4:0a:f9:50:33:b5:d6:04:7f:6a:fe:
         8f:3b:62:46:a5:0f:a6:15:56:b1:80:7a:64:c4:62:51:59:cd:
         46:1a:de:b2:79:9e:49:7d:b2:b9:23:09:90:7b:ab:12:39:ac:
         4e:8f:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:57:33 2026 by rpki-client