Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa
File:                     9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa (raw, json)
Hash identifier:          wecrDlEVoZgnc/E6f0FbUyu4FURfsjtU0TCdHzKpPNo=
Subject key identifier:   C5:D2:BE:1D:9E:DF:4A:B6:DE:20:73:86:A7:30:17:B1:7F:D4:5C:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D19434A42098430B08D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        98.52.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:19:43:4a:42:09:84:30:b0:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=e81fbb09-6fd8-4ee0-ad9e-083e964c1ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:0e:99:d3:e7:73:1f:6a:cf:f2:7f:86:d3:
                    7b:d7:93:46:c0:19:db:b7:bc:2a:97:6b:e7:4b:a1:
                    fe:2a:2e:01:c9:24:d5:9e:39:88:c3:2e:4c:3b:ed:
                    c9:15:83:16:47:44:fd:e3:a6:7e:85:17:70:b1:a5:
                    02:fd:92:a0:12:36:e1:45:10:af:ea:b8:65:d3:6a:
                    a3:65:1b:13:07:ff:3a:75:0e:0d:13:b1:e4:12:75:
                    83:3e:b9:91:b6:85:10:b9:f3:9c:bb:3f:ed:0d:a2:
                    ca:92:07:dc:81:94:4a:46:58:04:49:91:20:e9:8a:
                    d9:80:e2:91:30:24:60:dc:6a:92:15:34:df:a5:f9:
                    a9:50:35:2a:17:91:99:49:a9:47:8a:27:05:0d:86:
                    cc:d8:bf:34:f3:3a:0e:70:23:ac:3a:ee:3f:0d:a4:
                    21:26:c5:bd:23:f5:89:46:e2:de:69:af:25:0e:4d:
                    1d:aa:f6:ea:4e:2f:23:8b:e4:c3:02:14:12:0c:68:
                    06:1f:1f:40:47:7d:dc:55:bb:6c:06:41:e5:ba:1a:
                    76:d4:75:2d:4e:11:79:8f:c4:80:ff:c4:aa:52:e3:
                    ef:61:f9:34:bb:e0:64:25:9c:48:d9:31:f9:c7:2e:
                    cb:c3:4f:e3:57:b5:c0:4c:3e:51:61:36:39:42:d9:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:BE:1D:9E:DF:4A:B6:DE:20:73:86:A7:30:17:B1:7F:D4:5C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8e7676-2f2e-30a7-8cbb-59a68d88489c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:94:1f:64:7e:08:2a:da:ac:24:b7:72:d2:f0:63:e4:6a:1b:
         66:d2:a3:bf:13:71:0a:8d:ff:cd:eb:72:3f:c7:59:58:eb:0e:
         4b:d6:5a:d9:1a:44:c5:d8:70:a3:ab:2d:2e:fe:76:b7:15:33:
         66:f2:da:03:68:4b:fd:27:af:1a:2d:06:09:81:7e:04:80:be:
         81:6d:61:d4:c6:40:ee:da:4c:6f:d5:b8:b0:2e:86:72:ae:26:
         c3:ea:41:39:c4:fb:ca:6c:b3:85:42:dc:91:b2:b4:d5:35:20:
         5e:ae:4a:ec:d7:ea:b7:d9:03:a0:c8:b6:0b:f5:e8:13:ee:75:
         01:50:68:87:ba:59:63:b9:dc:bc:a4:21:f3:b7:64:d8:65:56:
         a5:30:09:da:53:ac:a1:ce:27:68:65:ad:df:6e:59:c2:20:82:
         ca:ac:b8:c8:7d:a7:ba:25:54:9f:c8:84:71:00:cd:e4:eb:c5:
         87:aa:70:f7:b0:58:5c:a7:ca:04:0c:b3:35:d9:c9:47:e4:d7:
         e9:6f:41:22:8c:0c:9d:49:7d:00:92:54:aa:5e:a9:26:af:0a:
         a0:72:17:01:17:01:e1:04:e4:7e:15:30:18:3b:d7:e2:2a:ec:
         13:04:5b:d6:62:f9:26:65:78:78:5b:e6:98:46:d5:7e:ef:09:
         e1:3f:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:42 2026 by rpki-client