Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c1339e4-0d6a-3dd1-a86e-90b270b9e224.roa
File:                     9c1339e4-0d6a-3dd1-a86e-90b270b9e224.roa (raw, json)
Hash identifier:          NwLTIAkkgc+EGXKB/Ly7GX5nu21lQMX+2a7x+bQYzLM=
Subject key identifier:   C4:92:39:B1:01:D2:2D:39:D1:0D:CB:D2:1D:28:6E:0A:46:73:94:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BCA79426C275076274B900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c1339e4-0d6a-3dd1-a86e-90b270b9e224.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.200.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:a7:94:26:c2:75:07:62:74:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=dd68fea0-de23-4942-8503-9840f5bf40f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:38:30:32:f9:74:26:ca:07:57:bb:8c:91:
                    25:da:6a:9b:54:54:b6:72:a5:81:41:23:1f:db:21:
                    a4:63:72:6e:0b:f6:bf:54:f6:37:9e:7a:73:89:60:
                    c3:d4:b7:63:7f:19:cb:db:30:1c:e2:3a:42:fd:4a:
                    be:b5:67:8c:42:0d:be:5b:70:6d:06:46:e2:33:68:
                    bc:7d:a7:a6:73:1d:e7:bb:65:f5:c7:8a:94:05:89:
                    b0:f4:79:45:db:10:dc:8e:42:bb:24:97:09:9c:bc:
                    ab:4c:d0:1b:8d:88:a1:08:66:f0:ec:91:48:24:77:
                    00:92:a6:62:f9:18:cb:c0:b8:8a:3f:e3:a1:a7:11:
                    db:f6:84:c4:14:58:70:8b:4d:b1:78:bd:8a:9a:86:
                    28:57:b7:70:bd:c9:02:62:ed:77:d2:80:1b:f8:d8:
                    03:66:c7:69:48:e6:25:42:af:dc:61:c2:fd:60:07:
                    1e:97:4e:08:c7:70:82:a5:e7:4a:fd:5a:aa:0e:50:
                    e8:d2:5b:1a:1a:93:ec:27:9b:cd:b6:c5:8b:03:88:
                    ec:77:b8:2e:55:35:22:19:eb:a1:04:94:1f:dd:b5:
                    24:a2:5b:ae:6a:bd:f1:3d:9d:2c:1d:02:80:fe:21:
                    6d:14:f6:ae:81:c5:f6:d3:ea:d5:b6:5a:cc:7e:ea:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:39:B1:01:D2:2D:39:D1:0D:CB:D2:1D:28:6E:0A:46:73:94:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c1339e4-0d6a-3dd1-a86e-90b270b9e224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:8d:72:7a:b4:d3:3a:8d:b7:56:fb:52:4a:44:60:56:18:
         7a:df:0e:55:46:3b:ba:34:5f:01:36:02:9d:40:64:59:af:f2:
         6c:5b:ea:b3:d4:2d:43:ec:65:aa:19:60:c1:5e:79:ad:63:1f:
         e0:67:ec:ae:93:ed:a5:10:87:34:fa:19:5b:48:80:c2:52:8d:
         26:1c:e7:0c:71:a8:05:0e:db:aa:e3:09:ec:86:da:39:a3:b7:
         a0:59:31:50:55:f9:b8:0a:b7:9d:81:b8:90:26:bf:54:0e:56:
         94:4a:fd:eb:f3:72:5f:5c:4e:ae:a6:3c:5e:65:73:d7:e2:f9:
         c9:d0:16:9f:6a:5d:29:19:dc:32:18:39:f1:33:09:70:d5:d7:
         da:8a:4d:d6:ca:a7:91:6b:73:57:76:b4:b0:28:2f:b6:fa:94:
         6a:21:5f:c1:e0:c8:96:c3:ea:61:22:24:94:07:28:f1:c0:1b:
         36:73:65:34:49:0b:c3:45:51:58:fe:29:7a:9a:4d:79:8b:5a:
         12:13:04:89:51:23:5a:b1:0d:1b:ac:70:9c:fa:8b:d9:49:11:
         6f:63:b1:01:cd:c2:f8:03:cf:f3:f8:e7:d3:f8:37:53:d1:02:
         6b:5d:bc:90:a6:14:ad:d3:a3:b0:84:2c:04:e6:f7:8b:55:cd:
         ac:b8:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:38 2026 by rpki-client