Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8514df9e-f62b-318c-a377-d614cbb16503.roa
File:                     8514df9e-f62b-318c-a377-d614cbb16503.roa (raw, json)
Hash identifier:          qyuzkgOaFPEK1H3uLNklVC/NWEMvcDWayS+C2QqS53s=
Subject key identifier:   B4:7A:96:70:2B:CF:4B:3B:9A:4C:B7:7F:1C:6A:CF:5B:09:2D:59:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A82ECC7F6AAF22100B3300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8514df9e-f62b-318c-a377-d614cbb16503.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        98.54.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:2e:cc:7f:6a:af:22:10:0b:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bb019084-6fe1-44d9-b7ff-93819b23c51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:ca:2f:87:a8:df:34:1b:e5:ed:aa:1e:9c:
                    04:6a:a6:e1:a4:87:7b:3f:10:2b:67:31:01:89:e2:
                    75:2d:23:08:11:af:98:ca:00:2c:1c:17:2e:96:44:
                    21:2c:40:d3:e6:01:c3:8a:a7:ba:22:06:9f:59:da:
                    5d:6c:91:31:e7:b0:95:cb:e9:76:79:84:7b:fc:16:
                    b6:ab:0f:36:aa:79:50:4e:94:c7:1f:73:56:45:08:
                    a5:81:ad:61:dd:ce:aa:f7:3a:34:2b:e2:4d:1a:1f:
                    e4:bd:5c:56:dd:00:c1:a1:cc:92:12:6f:a8:91:77:
                    45:6b:fc:dd:9b:f9:00:b8:4e:8d:1b:81:27:9b:ed:
                    81:42:61:ff:0a:53:f7:e6:38:29:40:77:47:0a:3f:
                    09:f4:06:ac:0c:1e:71:63:a0:e7:00:36:64:c5:bc:
                    a4:ed:7c:f6:a2:7f:7a:09:6d:1d:04:32:84:c8:6a:
                    34:4f:71:5f:e0:8f:1d:f5:bb:33:dd:66:6d:8d:8f:
                    df:5e:37:c3:c2:6f:ee:ce:9d:28:1d:3a:4c:4a:8d:
                    25:19:c0:93:1c:72:7d:63:36:f7:e5:82:74:2f:30:
                    9d:4c:a4:08:b5:87:e8:eb:e2:3f:57:be:2a:a1:0f:
                    8e:61:20:15:ed:fe:e7:06:b8:fd:55:a2:53:77:cc:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:96:70:2B:CF:4B:3B:9A:4C:B7:7F:1C:6A:CF:5B:09:2D:59:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8514df9e-f62b-318c-a377-d614cbb16503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:6a:6e:ff:b2:56:4a:18:7d:8f:72:da:ef:00:b5:10:c9:5a:
         a9:b1:1b:83:fb:ad:91:c2:58:29:8b:d8:f4:55:64:8e:ef:ad:
         0d:fb:ca:4b:0b:77:26:3a:6f:8f:74:5a:77:d8:ef:2f:68:20:
         ea:f7:02:fc:96:bc:d9:fc:9e:16:5e:5c:45:9b:f8:87:24:ba:
         f9:2d:71:9c:0a:c9:cf:e6:40:66:ab:67:84:7e:c5:68:f1:31:
         7b:cf:f9:ad:d6:29:73:0b:77:d4:80:c2:23:59:d9:d3:62:6c:
         cc:23:5d:7d:da:af:f7:fc:a3:f6:d7:2b:57:63:74:4b:99:7b:
         95:fa:3c:93:91:e1:af:12:b4:a6:04:a5:fb:bd:1b:3c:1f:64:
         3e:81:b7:5e:7c:fa:4b:b8:91:77:a3:ff:48:28:30:a4:33:c2:
         c0:3f:7d:54:dd:66:6e:26:fa:30:43:9f:b8:e9:3d:ee:db:4f:
         46:c1:49:05:7c:27:f1:d7:da:25:ad:ef:02:3e:7d:1b:94:6c:
         e8:d0:4e:e3:de:5b:09:79:66:c4:af:9b:4e:37:87:10:50:b4:
         45:e2:df:4b:04:49:ac:72:e0:b1:f1:d3:e9:9d:7a:79:ad:41:
         2f:96:85:01:11:ce:ac:1a:05:1e:59:dc:b0:d2:36:be:8d:da:
         77:96:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:55:52 2026 by rpki-client