Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/893cd11a-4ad9-36c4-b18d-356af5c9936a.roa
File:                     893cd11a-4ad9-36c4-b18d-356af5c9936a.roa (raw, json)
Hash identifier:          qqPD9/0cwMgFeSP1AbZlJ8mKVFOpT8ZrY/cPqISpZPE=
Subject key identifier:   3F:2D:23:AD:32:7E:E7:21:6D:40:9D:0E:D4:D6:0C:87:AD:86:4F:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D524388CCE866C68F4CD22B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/893cd11a-4ad9-36c4-b18d-356af5c9936a.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        98.54.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:88:cc:e8:66:c6:8f:4c:d2:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=785e1a9f-c9ec-4fbe-8d8a-026efd24fd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:11:c1:4b:63:c7:b5:97:ee:e5:9d:e8:85:
                    6c:14:59:45:c4:24:c8:6a:71:95:c1:44:e8:91:c4:
                    3c:ec:a2:08:4c:65:32:21:60:7a:8b:91:7b:71:08:
                    8c:15:07:68:82:28:fd:0a:97:a1:dc:0e:10:5e:0c:
                    0e:97:aa:99:fd:26:7f:9e:11:e8:67:f6:2a:fd:8f:
                    43:dc:c3:4d:d4:33:4e:30:9a:3f:d9:1d:3c:42:7e:
                    fe:b8:e8:09:b9:44:cb:0d:ef:a0:1c:c4:1c:76:81:
                    21:8b:00:31:aa:19:86:86:a7:c8:91:f6:c0:12:aa:
                    c7:47:de:07:26:24:3f:9b:8f:77:e0:28:25:89:c3:
                    34:6b:63:96:a2:6e:99:38:e6:dd:05:e4:e3:18:a7:
                    86:2e:29:f0:41:93:75:13:60:5d:7e:aa:3b:1e:ba:
                    c0:a2:e1:c8:70:2f:9f:05:4a:6f:e3:c6:bc:53:65:
                    d8:62:72:b9:0d:4f:e2:53:95:42:ed:36:70:83:0c:
                    f3:96:2d:ce:46:a9:54:e0:3f:e3:7f:8b:57:88:e2:
                    d7:91:79:91:c2:86:57:0c:55:4d:09:6e:e5:96:80:
                    94:fc:b1:19:31:40:fb:be:9d:73:b6:22:cb:6f:19:
                    bf:7e:ae:29:d2:c2:f9:f9:e8:d4:f5:43:3a:8e:09:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:23:AD:32:7E:E7:21:6D:40:9D:0E:D4:D6:0C:87:AD:86:4F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/893cd11a-4ad9-36c4-b18d-356af5c9936a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:83:43:28:46:46:21:9a:71:a7:5d:88:d4:c1:92:c8:20:
         be:3f:f3:dd:21:d1:1e:7f:b4:8a:12:aa:b7:12:1f:20:cc:90:
         60:a2:61:83:94:ae:99:81:94:48:94:51:08:04:a1:c1:7e:f2:
         a1:f8:83:6a:99:55:d6:de:38:a1:44:8e:eb:7a:bc:9c:f2:e2:
         37:2c:43:ec:6d:cb:f4:dc:13:de:ec:8a:a0:bd:c7:24:0a:97:
         de:a2:38:78:ae:f5:45:f3:65:84:24:f2:cc:15:18:94:73:0d:
         9f:c0:de:bc:1c:e8:0d:1f:48:74:e8:6c:05:72:8b:3e:52:5f:
         71:e9:fe:05:20:ce:a5:db:dc:10:c0:d7:23:3d:15:27:8a:66:
         4c:8e:f5:2f:89:1b:a8:e0:00:9c:b9:2f:6f:22:3c:88:73:5b:
         22:52:35:de:b3:49:82:7f:12:da:48:4f:56:a5:0d:e4:b6:15:
         81:6a:86:ea:70:ef:24:3a:41:46:6d:03:c3:8e:71:b8:35:c3:
         8e:0e:96:4e:91:67:06:5b:b0:56:f0:0f:17:97:d6:08:a7:19:
         a7:d3:02:62:cc:3d:36:1e:16:07:22:c0:d1:b1:ac:ff:f5:db:
         3b:14:08:71:df:5e:30:23:dd:86:74:51:0b:59:80:c9:62:a9:
         64:49:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:01 2026 by rpki-client