Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa
File:                     a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa (raw, json)
Hash identifier:          w1uR2YCMvbWMyhYsMA0pKJL+vS8Ali+VL8rtxod4VxQ=
Subject key identifier:   3A:CA:2A:CD:CE:7D:C6:AD:52:A4:2F:35:3A:56:52:FC:3E:B0:B7:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC2A73E84D45A14C68D240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        98.229.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:2a:73:e8:4d:45:a1:4c:68:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=7ec77e45-c892-4b48-9cf2-38331ecdac87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:b5:77:21:46:4d:41:b6:1c:0a:0b:d6:a5:
                    9e:a9:a0:d2:f5:0e:8c:21:bd:6a:b8:30:3a:5d:7b:
                    41:a0:09:cc:70:26:65:66:ab:8a:91:29:85:fb:35:
                    25:d7:ac:fe:7a:7e:37:b4:18:a7:67:13:24:41:b6:
                    67:b2:0a:5f:e3:57:39:1b:e3:87:fa:be:8e:fa:c0:
                    eb:c5:20:e5:fc:8d:dd:df:b6:98:e2:aa:3a:66:ae:
                    77:37:8a:68:f6:8e:d2:a7:2e:d3:74:be:1b:80:7b:
                    4a:16:bc:28:37:6a:e9:bb:b5:cc:1a:3b:01:ee:cb:
                    e0:7d:5b:f5:8a:9e:c2:95:4e:dd:38:39:f6:36:c7:
                    0f:3d:75:29:9d:aa:fc:d8:01:08:f2:08:fd:36:f7:
                    2a:91:5b:90:bb:51:2c:7c:37:d9:1e:a6:ee:51:cd:
                    62:e1:4e:b9:30:ee:f3:86:1e:17:a8:68:99:53:ad:
                    8d:11:39:c1:a8:4c:4b:3e:43:fe:e2:cc:15:14:51:
                    72:d3:ed:73:90:39:67:5e:67:8a:82:3d:54:f7:2b:
                    21:9c:f6:6f:4d:4a:88:31:f6:bc:4a:8f:76:61:4e:
                    ec:ec:36:e1:28:8e:1d:99:26:b6:4a:82:09:7b:a5:
                    9b:27:bd:03:8c:82:46:c7:1d:75:e4:c4:87:11:ce:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CA:2A:CD:CE:7D:C6:AD:52:A4:2F:35:3A:56:52:FC:3E:B0:B7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:6f:ac:69:a3:ce:9f:73:f9:ed:2f:01:34:97:43:8d:b3:0a:
         44:59:1f:81:0c:32:8b:35:74:e1:8d:1d:35:2a:11:84:82:2c:
         da:f7:d4:14:63:ff:74:81:e0:f7:f6:47:a3:2a:d9:3b:24:84:
         89:62:03:0f:e4:1a:1f:a0:14:c4:89:06:d6:b7:f6:74:25:5c:
         f8:77:ea:e8:69:28:73:4e:37:d0:31:9c:bf:53:99:7d:b8:bb:
         d9:ba:13:f4:ed:15:d4:a3:3e:7b:fe:05:e2:e4:e6:92:d5:e0:
         3f:a6:79:fc:60:65:ba:74:0e:03:41:77:81:58:be:25:42:8a:
         ae:d5:3b:8c:09:75:51:b2:ca:13:dc:00:47:60:ac:55:6d:6b:
         cd:54:8e:e9:6e:54:01:9d:0d:63:fc:4f:5e:71:21:0a:3f:71:
         f2:83:c7:44:60:0f:4e:4f:a4:58:5b:50:c0:55:b7:a8:11:66:
         00:57:fa:c8:9a:05:33:98:00:fa:a1:ff:e9:fe:32:0b:92:ec:
         d5:9d:45:97:3c:18:2e:73:ce:a4:f7:58:5f:5b:7a:b3:80:f6:
         de:3f:6c:d7:89:7f:89:8f:f4:bb:3a:31:e5:c5:ce:b8:3e:5e:
         e9:ca:df:d2:ac:c6:5e:8d:78:66:dc:3b:d5:d4:c0:1a:6c:d8:
         8b:fe:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:03 2026 by rpki-client