Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6fd0b6f-3fb5-3da2-b8e2-c318cb56a1ca.roa
File:                     c6fd0b6f-3fb5-3da2-b8e2-c318cb56a1ca.roa (raw, json)
Hash identifier:          5FWTSfgZsVempcoAWcjAmDplatTYEI9koRJ9BT2IyYk=
Subject key identifier:   0C:ED:1A:71:64:71:55:0D:5D:77:00:10:E7:F9:07:17:29:40:F1:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5E2D359BFE55475E826280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6fd0b6f-3fb5-3da2-b8e2-c318cb56a1ca.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        98.45.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:2d:35:9b:fe:55:47:5e:82:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=fd04809b-ab7c-4bf2-a9b8-64c359f20ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:f4:d0:f8:d2:3f:40:60:94:c7:c1:af:1f:
                    59:ea:e5:1b:fa:0f:de:1a:76:21:a3:dc:16:6e:41:
                    33:37:67:d6:4a:40:94:6c:ae:8a:61:33:d0:37:a1:
                    8c:57:97:e4:28:58:82:69:27:9e:44:b8:30:4b:04:
                    1d:3f:50:be:8a:f0:39:9d:84:e7:d9:3a:6e:6d:76:
                    43:a8:29:ec:e6:aa:78:80:ed:db:0d:a2:26:ae:3b:
                    cf:8d:91:a0:83:8b:fc:12:b9:17:f2:5a:b1:eb:59:
                    fd:6f:ea:bb:47:d9:98:23:8b:35:0a:58:d6:46:50:
                    d0:5c:38:94:c0:1b:67:be:6a:b4:0b:c8:9e:aa:3d:
                    c0:40:19:61:5f:cb:2d:12:95:34:bb:5a:f1:89:10:
                    bc:fc:da:cc:3a:0e:97:a5:fc:2d:e7:2e:5a:05:9e:
                    7f:1f:73:df:77:0e:1e:a4:a8:f8:77:68:68:14:d7:
                    f7:b2:a7:92:1d:00:e8:6a:52:9d:e2:c8:6d:d3:ad:
                    f7:97:4f:34:f6:00:2f:5d:9e:83:c6:33:37:7b:d2:
                    bf:d9:47:0c:1c:ee:72:b7:0e:95:66:e8:e9:fe:ca:
                    76:ca:1b:51:62:29:90:00:a0:7d:f3:7d:09:41:e1:
                    53:45:28:6c:26:f9:79:ba:1a:5a:37:57:88:f0:f7:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:ED:1A:71:64:71:55:0D:5D:77:00:10:E7:F9:07:17:29:40:F1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6fd0b6f-3fb5-3da2-b8e2-c318cb56a1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:55:76:9e:db:54:ca:6d:22:92:84:f6:a0:96:37:e9:4b:bc:
         bb:85:7d:ee:99:78:b2:02:28:59:74:04:b9:c2:63:2b:5e:91:
         cb:3d:eb:82:31:13:61:c5:4c:8d:b0:fd:bd:92:35:5b:08:c0:
         1e:9e:92:90:a9:97:db:51:5a:d4:71:df:be:d6:0c:68:d7:69:
         39:68:00:73:7d:14:b7:17:75:4f:c0:80:c9:e2:59:c8:38:70:
         b4:6b:cc:e8:6d:64:64:c6:77:3e:d1:63:b5:f5:fa:dc:45:e9:
         20:80:ba:21:f7:ac:f2:f0:62:3d:25:60:aa:51:d9:52:0e:5d:
         e0:d7:62:bf:63:12:1a:03:a1:60:8f:64:82:47:0a:2b:82:4d:
         b7:ea:c0:38:7e:40:03:b9:99:94:40:3e:96:90:26:9e:9d:91:
         c6:60:b8:fe:d0:a2:00:c5:12:a8:52:63:dc:07:ff:c9:ef:cd:
         38:1a:a9:84:72:a4:e2:f6:1c:c8:65:68:40:64:46:be:d4:dc:
         c8:83:7e:19:c4:1a:24:ee:c2:d5:6d:37:99:51:a1:85:4b:fa:
         ba:ea:24:a8:04:99:35:88:2b:47:04:a8:7d:2f:ea:ab:53:fa:
         ce:5b:8b:47:b9:30:50:64:d1:2c:ac:b1:a6:a5:cd:4f:b7:5b:
         8b:95:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:44 2026 by rpki-client