Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3eb0fdc-0531-3260-bcfd-e3eda16faf10.roa
File:                     a3eb0fdc-0531-3260-bcfd-e3eda16faf10.roa (raw, json)
Hash identifier:          OFvPFu8VWEvDy7KXgk6cc3Ky48ixS3ngn1IyI8n174c=
Subject key identifier:   EA:A5:4C:30:F1:A3:FB:35:E8:85:06:3B:4F:D4:68:89:BF:5E:C0:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86310B7A2DCB7DC6B906280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3eb0fdc-0531-3260-bcfd-e3eda16faf10.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.197.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:10:b7:a2:dc:b7:dc:6b:90:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=2a994054-f010-4fb3-a4e3-d33d0dedbc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:8e:b4:5c:6b:71:23:d1:62:b0:5d:62:9b:
                    83:0e:2e:29:5c:d3:ab:68:2a:7b:52:83:57:7b:ce:
                    8d:d8:45:c7:15:87:bb:fd:d6:9a:6d:1d:f6:c3:a3:
                    cc:86:ac:b0:34:98:e5:96:9e:82:69:53:2a:48:43:
                    89:f6:09:7c:d7:a3:56:dc:13:53:72:af:0d:d8:6d:
                    11:80:a0:c6:03:15:bb:19:76:9d:97:c4:91:8b:f5:
                    5b:04:43:55:a4:59:9b:9c:f2:86:c8:5f:58:31:3c:
                    61:1a:2b:79:1a:20:0a:a2:00:29:61:40:e1:7f:6a:
                    82:43:c5:9d:54:2d:c6:69:b8:c0:61:93:06:ea:d4:
                    d2:be:04:2e:7b:1f:a3:52:4c:e7:6f:90:0b:c6:5e:
                    1c:3f:6a:b6:82:22:a4:2f:61:06:63:02:bd:22:c8:
                    e0:4b:5e:7d:4e:a2:cd:9b:c3:d3:00:62:2a:24:d9:
                    30:17:03:4a:25:a6:63:c2:db:42:8f:8e:34:3e:b0:
                    ee:8e:27:09:1f:0a:59:7e:3f:e6:ee:4f:95:3f:0b:
                    29:49:10:43:fd:b0:1f:cd:8a:e5:b6:3f:cb:af:3d:
                    a4:53:59:a1:72:80:78:17:3d:2b:f9:6b:37:cc:ba:
                    48:0e:81:df:5c:ff:74:f5:fa:5c:52:87:e5:8f:b4:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:4C:30:F1:A3:FB:35:E8:85:06:3B:4F:D4:68:89:BF:5E:C0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3eb0fdc-0531-3260-bcfd-e3eda16faf10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:1b:c2:69:56:1a:ce:62:ef:30:5e:6d:3e:26:dd:6f:0f:
         78:96:29:50:95:4c:4e:d4:83:c1:6e:af:b2:94:48:dd:88:b3:
         2a:d4:84:cb:51:a8:be:7b:1a:f9:34:97:44:e8:e5:20:c0:ed:
         f8:fd:1e:76:57:2d:12:3e:03:eb:a0:58:5e:48:cb:44:34:d1:
         06:f5:c6:90:b9:5f:35:6c:49:cf:c0:9c:fa:09:24:80:25:d2:
         15:5e:1e:da:27:e9:64:03:9e:95:37:6a:8e:35:d4:c8:b3:92:
         53:37:dd:8a:8d:57:af:9f:71:3f:93:6f:23:cc:3c:be:99:36:
         78:92:ea:9d:4e:8a:b2:48:44:7c:3c:eb:e9:a9:80:09:97:bb:
         64:35:b0:ac:84:d1:b8:7c:31:cc:0b:e4:a2:89:f1:de:eb:58:
         49:65:2a:39:af:cc:66:31:96:f8:c0:9a:a8:97:30:08:70:db:
         71:15:b4:12:c7:69:cd:dc:f0:fc:7e:e7:75:42:36:e6:03:00:
         85:7c:e0:3d:bf:94:98:fd:8e:d7:9e:ed:47:aa:30:c6:9a:a7:
         5b:8d:97:fe:e4:3f:1a:54:b9:57:42:d1:81:b5:22:fc:12:f5:
         63:46:58:20:bc:40:99:1b:80:5b:5b:52:82:af:bf:af:e4:d8:
         b4:c3:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:22:04 2026 by rpki-client