Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/adb409f1-edc7-36a6-99c8-55728a8c763f.roa
File:                     adb409f1-edc7-36a6-99c8-55728a8c763f.roa (raw, json)
Hash identifier:          35kXLY/rMZersgVXbS9jt8zfXXs2kcavRGSfqXA3P0A=
Subject key identifier:   B2:4D:95:FB:F0:17:35:9B:48:FA:1A:8E:B7:C3:B1:C4:22:81:A5:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5B2AD98A2D2CE7331E22E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/adb409f1-edc7-36a6-99c8-55728a8c763f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        98.225.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:2a:d9:8a:2d:2c:e7:33:1e:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=b4456709-06c1-43d0-8cb7-04266b6939b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:e3:99:5a:aa:30:fe:fd:c2:47:b1:bf:bc:
                    1f:cf:0e:8d:a4:ff:7d:cd:13:87:60:0f:09:d6:ad:
                    46:5e:85:6c:ff:8d:b2:a7:5a:e7:6a:3a:e4:36:f7:
                    68:c9:a4:f1:13:0e:9b:3b:f7:d6:e7:ee:7b:0a:eb:
                    a8:f7:ac:24:d9:a5:50:b0:e9:7a:7d:c5:26:ee:45:
                    ae:a2:69:ec:8a:38:d6:91:d0:1d:01:42:33:6c:77:
                    51:e9:1b:ee:ca:06:40:c4:57:93:63:fc:93:de:a7:
                    e2:92:76:bf:ed:d3:b0:b0:f7:91:49:76:1f:c2:e0:
                    5b:fc:d0:c3:05:3a:d2:e1:37:2d:f9:c2:29:f3:ed:
                    5a:dc:1d:28:80:e4:d0:88:75:de:6a:38:47:f0:fd:
                    ef:df:2b:1b:4d:52:e5:a3:20:86:13:b2:1d:47:90:
                    0b:e1:e8:2f:e9:32:0d:35:49:88:a6:7f:6b:a1:91:
                    5e:26:90:78:52:fe:db:f3:da:89:f5:c7:9c:9a:43:
                    af:a1:18:06:07:ea:34:fa:c7:35:a0:b9:06:32:4d:
                    b5:d8:0d:b7:d0:a5:5a:95:3c:a7:52:6c:ea:ea:09:
                    f3:b0:13:0b:2b:bf:f1:b2:de:44:a8:cd:ae:6e:41:
                    30:b6:cf:bd:51:19:13:45:ce:af:37:2a:c5:76:b4:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:95:FB:F0:17:35:9B:48:FA:1A:8E:B7:C3:B1:C4:22:81:A5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/adb409f1-edc7-36a6-99c8-55728a8c763f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.225.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:a0:25:00:28:76:3e:44:cb:2f:6d:80:8a:d0:f0:39:38:
         c1:52:1b:6a:e8:a0:c3:64:18:d5:96:de:a0:d1:ac:ab:9f:19:
         e7:bf:16:0a:61:4c:46:af:9c:25:f4:38:24:62:08:88:d4:8c:
         28:39:86:8d:61:f3:03:35:e9:66:56:ac:0f:b3:b8:90:55:41:
         53:23:dc:dc:bb:e1:43:60:00:b2:bd:83:96:00:d3:88:a9:d8:
         9e:f9:99:3a:81:fe:2a:a5:10:a9:b9:35:30:9a:2f:2c:90:8e:
         21:64:e8:7c:c4:59:08:37:14:82:1a:70:64:ef:5f:36:a0:82:
         bf:4a:1b:27:3a:d9:bf:c4:fc:d1:51:b0:5b:92:4f:52:01:01:
         92:84:0a:d9:97:b0:e5:a0:d2:a5:b4:a9:16:e0:8e:8e:34:7b:
         aa:f1:53:37:4b:ab:7d:f7:28:78:4d:82:f6:77:a7:18:1e:1d:
         da:5f:76:34:69:27:2d:a9:26:a4:ec:a2:f9:c6:90:41:1e:f2:
         45:fb:1b:db:3a:5c:21:73:7c:22:bf:d4:26:93:2b:19:7f:91:
         67:84:eb:87:40:d2:f8:84:e8:76:ba:90:46:f3:57:c2:af:79:
         9c:b1:ea:b6:b4:41:27:74:53:d1:11:92:1e:d0:8b:2d:a4:5b:
         0a:c9:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:47:52 2026 by rpki-client