Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6cd1523-a908-3ff9-aa64-38b11dc66ef6.roa
File:                     c6cd1523-a908-3ff9-aa64-38b11dc66ef6.roa (raw, json)
Hash identifier:          +s9amzn89BO/H+Wy97UF3IbxfywGTn0fIEJV68FKal0=
Subject key identifier:   E5:1A:CF:6B:74:34:FE:FC:72:9A:C5:40:7F:FF:48:D5:72:D0:5A:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D0BE8D597B1F327572780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6cd1523-a908-3ff9-aa64-38b11dc66ef6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        98.46.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:0b:e8:d5:97:b1:f3:27:57:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a244098d-ce47-4001-8ffb-b64324619c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:ab:75:6e:c0:65:b0:12:ee:62:5f:c6:a3:
                    26:d6:0d:e4:c5:93:14:88:8e:2a:0b:84:54:ac:1b:
                    b0:a0:54:df:86:79:16:be:66:3c:fe:98:b3:db:56:
                    36:ee:cb:9d:bc:e7:d0:6c:84:f4:59:92:09:79:52:
                    cf:6e:68:4e:2d:6d:1e:0e:ae:e7:e1:df:8d:bf:6f:
                    ca:c9:5a:f1:a1:bb:9d:74:fa:5d:ec:9b:27:5a:4a:
                    d9:5e:53:d6:ca:ca:ec:86:e3:33:95:87:3a:14:94:
                    f7:73:d1:df:57:b4:4b:c9:be:18:c3:fe:69:8e:6f:
                    10:2f:54:47:64:b3:06:9f:9e:94:28:2f:96:db:6e:
                    ce:d5:4e:8a:3e:b2:a2:ae:fb:5d:5d:7a:88:38:a1:
                    93:5d:62:77:a5:56:85:9e:3e:c0:eb:1b:d5:30:67:
                    7f:66:67:01:72:3e:5b:50:88:e3:a9:5c:65:16:cf:
                    a2:2f:a2:82:87:20:72:66:20:4c:3c:17:46:8d:0f:
                    ce:eb:13:6f:e9:fa:ad:89:c3:d3:58:13:3b:2d:30:
                    16:20:cd:c6:06:9c:de:2d:7b:4a:75:3f:f2:4c:44:
                    81:55:b4:8c:e9:b6:11:51:d2:aa:ef:9c:52:c8:1b:
                    49:6b:7e:22:cd:b9:4f:e8:14:ae:c9:94:72:dc:f3:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:CF:6B:74:34:FE:FC:72:9A:C5:40:7F:FF:48:D5:72:D0:5A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6cd1523-a908-3ff9-aa64-38b11dc66ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:e4:4a:ca:3e:89:fe:2f:bc:d8:11:34:00:55:66:c8:ad:7c:
         ae:87:54:66:40:fc:91:57:12:ea:cd:c5:86:11:71:17:88:1f:
         08:f4:87:d4:15:65:ff:66:36:82:ca:d1:b3:7a:a0:d1:2e:86:
         ef:8e:4c:f2:24:f9:5b:bb:89:fa:b2:68:30:8b:c2:db:4f:89:
         b4:32:60:0a:37:74:09:e6:c0:a0:2b:34:95:38:a5:71:f9:16:
         e3:22:66:11:07:60:62:d3:87:07:14:97:09:55:4d:92:c7:7c:
         23:9a:37:1d:db:9c:f3:98:68:2f:12:8e:24:cb:87:89:0b:2c:
         76:b9:b6:a6:94:c2:89:a4:f5:f7:a6:0e:07:52:c9:a8:ed:c1:
         50:9d:23:ef:49:35:b0:45:5c:e8:e4:6c:b7:74:d0:07:7c:4e:
         9a:56:21:a5:cb:7a:73:fd:b9:1d:52:2a:b7:e7:13:c6:cd:f5:
         9c:6d:eb:9f:9b:3b:30:54:b1:de:20:05:54:f5:9c:a5:cb:17:
         26:4d:05:00:fc:47:c8:8f:b1:3d:26:a7:81:5e:b0:8a:66:0b:
         74:b5:8b:0b:a2:02:9e:0f:0e:fa:41:4c:18:2a:cf:46:39:99:
         6b:5d:c2:75:aa:30:f6:ce:4a:8b:7c:a0:a6:79:5d:09:0b:41:
         45:b5:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:08 2026 by rpki-client