Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98bd6d57-0069-3d07-9cef-8cd162c673cc.roa
File:                     98bd6d57-0069-3d07-9cef-8cd162c673cc.roa (raw, json)
Hash identifier:          y3A6GuN00y7hwc3OS/h0mHPyKN4BHPHdqElz1MHu91c=
Subject key identifier:   2F:2E:31:30:50:D5:6A:1D:F5:4B:BC:95:9B:0A:D6:5F:6C:C3:05:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5917DA6FC76E9FB574EFE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98bd6d57-0069-3d07-9cef-8cd162c673cc.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        98.42.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:17:da:6f:c7:6e:9f:b5:74:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1dc89342-e45f-4ccb-9318-69f937cc2ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:bb:2b:f0:a6:a1:5c:2d:24:47:5f:49:ad:
                    ce:74:65:43:14:d4:c2:ea:0e:36:6c:32:a9:39:83:
                    6e:53:7b:5c:7b:18:3d:31:f3:0c:c7:f5:4f:6b:56:
                    dd:0b:66:4a:e7:2b:03:1b:d3:98:a8:42:4b:8b:92:
                    e7:8d:ac:b9:33:c6:1b:11:a7:66:5b:69:c1:5b:ec:
                    5c:09:90:41:e2:fe:d7:ba:27:01:4d:02:09:90:8a:
                    14:0e:a7:be:91:c8:b2:42:0e:3b:6a:dc:22:25:94:
                    c3:42:13:4e:52:56:50:54:9a:7e:32:e3:3b:19:e8:
                    84:27:fd:5a:bb:f0:d7:f6:93:9a:55:80:c4:93:43:
                    47:35:b5:df:c2:2d:0d:85:b1:78:e7:f4:88:71:7d:
                    76:56:b2:f4:53:5f:fc:e3:2d:79:85:56:e9:ac:e2:
                    cd:96:ad:e7:37:8b:a5:e6:c8:94:1b:7d:25:7e:f8:
                    8e:6e:a8:ea:8c:2f:87:4f:16:02:cd:ae:fa:08:92:
                    d1:ab:1c:f4:73:c1:92:79:a5:d8:31:60:2e:7a:7f:
                    f4:60:96:d9:ac:7d:a9:c6:0f:4c:17:61:81:17:41:
                    9f:77:a5:77:38:39:c4:e8:1b:61:fd:53:86:24:9d:
                    ba:16:dd:9a:82:36:17:92:71:6c:c6:09:51:62:c0:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2E:31:30:50:D5:6A:1D:F5:4B:BC:95:9B:0A:D6:5F:6C:C3:05:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98bd6d57-0069-3d07-9cef-8cd162c673cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:84:02:b8:65:42:fe:7f:b1:9e:c2:da:2c:4d:23:47:20:dc:
         55:b4:1c:cf:40:52:12:79:8f:02:1f:6f:8f:17:e2:e3:c9:ca:
         76:35:09:b1:00:ee:c3:74:6c:31:9a:83:59:58:8f:c3:22:7b:
         ac:30:77:88:d3:e8:07:27:d2:ac:c0:3c:9e:60:81:d7:ed:b0:
         08:e4:ed:7f:0e:2b:a5:a5:d6:ac:8a:de:9e:59:c4:0d:20:34:
         14:a0:60:b0:55:e9:11:f1:87:31:9b:fc:26:89:0d:cd:6d:61:
         6f:0c:b2:57:95:8a:19:70:37:62:f7:5d:e6:da:b4:d0:d7:1e:
         8c:cc:35:9e:a5:99:45:dc:b3:68:f5:55:9b:77:38:8d:46:fa:
         08:de:55:d7:3c:e5:1c:c9:3d:71:58:f9:14:a2:0d:61:5b:7b:
         c8:e6:e2:d0:00:b9:02:3c:81:3c:44:8a:e9:dc:cf:f2:dc:09:
         96:11:8d:2b:d0:66:02:1c:d4:43:39:46:e6:ae:44:ac:27:50:
         29:2a:b7:2b:1a:05:ae:2c:15:56:2b:36:0f:cb:15:29:fd:2e:
         93:68:c7:6d:0a:7b:5f:ba:ac:ab:a8:0e:0c:45:67:aa:fb:4b:
         bc:fe:bc:29:e2:14:1d:65:24:ce:3c:1b:f4:6a:6b:cb:1a:9d:
         94:d3:03:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:47 2026 by rpki-client