Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9c63a6-6eef-33f7-add7-18709e13dbfc.roa
File:                     9f9c63a6-6eef-33f7-add7-18709e13dbfc.roa (raw, json)
Hash identifier:          S937xSl9I9yvMKnwDKvhlFYThOsVpf8XTVTCOoEKLWU=
Subject key identifier:   B8:21:7E:AD:40:7B:72:51:E7:68:DD:9E:00:31:15:B6:63:FC:13:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5E39E5D7328B4EE328CE10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9c63a6-6eef-33f7-add7-18709e13dbfc.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        98.51.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:39:e5:d7:32:8b:4e:e3:28:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a832c891-9356-4e58-afd8-82d206cae527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:f0:18:85:a7:79:6a:6e:3f:1a:7f:52:d6:
                    d2:57:10:d6:6f:ba:ec:79:6d:6e:5a:68:c7:34:dc:
                    df:a1:5b:0d:b8:5a:4d:02:7b:fc:80:a4:57:d5:2d:
                    2f:00:86:b8:63:05:3d:85:5d:9d:ce:e5:b7:13:d0:
                    7b:c2:22:9b:7f:be:93:fa:cc:a9:a7:b1:5b:cc:ea:
                    65:05:4f:18:23:b0:c6:f6:f3:86:cd:6d:7c:54:5a:
                    04:a9:87:66:b6:4a:8d:e9:63:87:71:5f:e7:bd:05:
                    23:51:a4:b6:5f:72:5a:68:22:07:ef:af:f5:c6:f5:
                    a8:c5:34:a9:67:81:76:78:3f:5d:d4:73:cd:cd:e4:
                    99:a0:a5:9f:ea:10:a8:11:2c:71:d1:bb:18:7d:35:
                    e3:0c:1b:d2:24:04:d5:e7:2f:ba:ed:03:ca:d6:7e:
                    8b:97:8a:7c:ea:57:98:ef:4c:6f:c1:31:4c:4f:31:
                    b2:5c:38:df:68:cb:fc:39:19:aa:5d:d2:49:53:59:
                    2a:3b:16:03:a9:66:9e:89:d1:15:11:07:a0:c3:43:
                    9b:6a:e2:e8:12:c0:3e:ea:21:2d:28:bf:ba:7c:e0:
                    ed:31:8f:d9:4c:81:51:2b:42:1e:59:c4:98:db:d6:
                    33:75:73:ac:f6:12:2d:88:86:c0:22:b6:dc:11:95:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:21:7E:AD:40:7B:72:51:E7:68:DD:9E:00:31:15:B6:63:FC:13:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9c63a6-6eef-33f7-add7-18709e13dbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.51.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0e:3b:c9:e0:49:b6:e2:dc:c0:8e:fa:6f:61:a8:fc:77:d5:
         2d:9e:2d:6b:cb:84:eb:43:a8:69:a9:12:d0:1e:f6:71:5a:3a:
         d6:0e:bd:b2:17:df:3f:04:0c:54:80:61:40:e1:7a:88:e9:f3:
         54:50:f6:82:ed:d8:07:99:a7:52:0f:e0:78:78:59:d5:de:3d:
         54:e5:dc:0c:8b:eb:b4:e1:82:64:92:ac:4e:e5:2d:d7:53:f3:
         2a:ef:0f:e4:b7:a3:57:31:62:4f:c9:0b:9a:1b:2a:43:06:c4:
         0e:ef:bb:fc:6c:de:3f:b0:9c:7f:0f:cd:ad:a8:21:85:8e:09:
         4b:6c:f0:97:e6:22:2a:fb:9c:50:51:2d:d7:eb:75:54:32:f5:
         c5:7d:9f:1f:6c:a5:ee:6d:bc:c6:38:f4:60:94:d3:2e:9b:c9:
         69:db:19:68:10:4a:d7:49:23:cb:c9:b2:ee:4e:c9:a9:c3:6f:
         30:55:16:79:34:0d:90:a4:b0:a9:40:d4:1d:1a:6a:2f:17:78:
         9c:08:96:ff:1a:21:40:28:e9:2b:f0:d5:ef:ed:59:1f:5f:5f:
         d5:54:e0:79:3f:c2:79:e8:25:7e:a4:16:a5:fd:31:28:64:a8:
         57:7b:a5:d5:99:12:8d:38:3c:2f:39:d2:b9:64:dd:21:07:1e:
         fb:d7:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:30 2026 by rpki-client