Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a7bf619-b27d-3221-8538-4e814b7a8b67.roa
File:                     7a7bf619-b27d-3221-8538-4e814b7a8b67.roa (raw, json)
Hash identifier:          YqcTTkF69SlsKCix/Nnl/1Jd17eMOFDpwfveiJ/M1p0=
Subject key identifier:   6D:00:F8:97:AC:02:75:CB:8D:AA:13:15:B1:56:A5:A0:70:8B:D1:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5913F35FC27391EEDBAD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a7bf619-b27d-3221-8538-4e814b7a8b67.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        98.37.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:13:f3:5f:c2:73:91:ee:db:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=feb7ae8c-d39a-4000-b857-6872dd7c23e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:22:4d:d1:51:26:21:ad:85:46:c2:7e:e1:
                    1c:e2:45:f2:39:68:26:5a:12:25:09:5c:69:75:cf:
                    f6:43:1d:74:db:ec:43:d9:79:a5:e3:98:c6:f8:ea:
                    bb:6d:55:7c:e0:65:08:da:9c:f6:c7:a9:4e:bc:4e:
                    88:62:61:1a:4d:11:98:95:31:a3:66:2a:51:b8:2e:
                    53:5e:68:1f:f4:c0:4a:d2:11:f8:49:64:c1:85:e2:
                    c9:d7:02:6e:f7:d5:65:48:e3:24:43:71:29:b3:b3:
                    9c:8d:a0:9d:64:df:03:b2:23:cf:cf:25:92:86:6c:
                    f1:62:1b:bd:62:d3:ff:55:e9:a9:aa:76:37:70:9a:
                    8b:73:9d:eb:bc:d7:88:f7:04:36:d9:8a:ce:25:35:
                    19:8c:3c:c6:55:22:1d:f3:d9:4e:86:fa:09:44:c6:
                    84:69:6a:0f:2e:53:4d:69:8e:4b:cf:47:98:03:43:
                    73:f7:e8:d4:8e:4b:36:7c:d2:b1:e1:6a:a0:f7:c6:
                    7b:6b:ca:a3:3b:5b:ed:92:fc:80:83:25:0b:be:a6:
                    2c:12:fe:df:ed:31:67:fa:85:54:9c:54:fc:27:a1:
                    c5:c5:1e:ce:51:88:66:f8:27:26:b8:00:70:09:a0:
                    71:35:59:9b:87:86:62:0d:1c:c0:fa:f4:0d:46:68:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:F8:97:AC:02:75:CB:8D:AA:13:15:B1:56:A5:A0:70:8B:D1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a7bf619-b27d-3221-8538-4e814b7a8b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:de:b2:e4:f4:1f:58:fa:31:6d:b7:00:db:44:bb:3a:6d:05:
         10:98:a1:6f:5b:8d:de:ab:55:5c:94:76:f4:70:16:41:9b:0c:
         75:80:8f:be:21:2b:40:7a:0c:33:fb:a3:43:96:1f:74:fb:4c:
         77:a0:f0:18:74:a2:cc:4b:78:ca:37:13:30:d7:1f:ce:2c:e2:
         2c:6a:6e:bf:c0:b7:e7:aa:e6:eb:23:15:e4:14:17:ce:f9:d7:
         83:fc:9a:0c:98:14:ff:e7:60:34:d9:22:11:ec:67:ca:07:72:
         51:33:f6:50:02:b5:7b:74:ef:8f:a3:8b:84:81:2e:95:65:12:
         4b:c2:db:3f:02:ce:0e:ed:4d:4d:3c:33:69:06:65:bd:47:2f:
         1c:5c:90:6c:45:6e:12:e5:f7:61:a9:f5:39:5f:40:33:81:da:
         de:42:23:9f:ed:dd:9a:50:41:d8:c8:f3:f8:89:dd:06:5c:a1:
         8c:7d:63:c4:87:38:be:26:0a:31:c9:54:06:3c:8b:50:00:ef:
         6c:5a:32:d7:84:73:d2:f8:e9:a3:dc:ac:8c:ef:9b:f7:ad:e9:
         73:be:39:d0:cb:9e:bf:24:56:73:90:2b:d4:88:fd:02:91:6f:
         b5:0f:1f:34:df:1f:a2:16:71:59:c7:18:78:f4:64:1f:22:7a:
         73:2a:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:36 2026 by rpki-client