Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1366d44-a451-34a8-b512-a6a5520224ec.roa
File:                     d1366d44-a451-34a8-b512-a6a5520224ec.roa (raw, json)
Hash identifier:          J1x4OH7VuiiyD4+EjUnLaf/QLjaSkmH3ZKt5jvf2TIc=
Subject key identifier:   86:F4:DB:98:4A:47:0D:A7:93:58:22:50:89:BA:03:33:D4:DC:BA:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB83189AFC29C121A6A780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1366d44-a451-34a8-b512-a6a5520224ec.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.57.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:83:18:9a:fc:29:c1:21:a6:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=c42b210c-c8bc-4be0-a614-8544dc1c9476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:4f:f8:5a:a1:fc:ae:d1:2f:05:38:b2:b7:
                    3b:fb:b6:53:1e:c2:e9:0d:56:62:b3:eb:7e:d7:f5:
                    ae:12:8c:be:bc:ae:4b:19:95:3e:6e:bb:8b:e1:da:
                    e4:fe:11:7e:28:ac:ad:0f:6d:1e:ad:76:b4:ef:d3:
                    88:3d:ec:02:65:d1:41:0d:0d:33:e4:80:a4:10:49:
                    7f:f8:07:48:41:51:ed:83:ea:1b:e6:61:b9:02:97:
                    97:c4:e1:fe:51:4d:7a:f0:73:a0:68:58:23:cc:5c:
                    bc:4f:d3:19:1b:c3:10:8a:57:0d:85:ae:4e:65:0b:
                    e9:19:ab:1f:fa:a0:3f:ee:8d:8b:70:02:c5:ed:49:
                    a8:79:10:7f:cf:e8:97:59:5e:04:35:c6:23:fe:95:
                    4f:22:11:cf:27:36:2f:44:96:f9:ba:b2:7a:d3:27:
                    a0:1f:c4:fe:50:f4:be:95:57:ff:3f:99:62:80:a4:
                    cf:61:b8:0d:fc:1f:49:2a:42:f3:ef:fc:d8:81:1d:
                    b7:65:e7:90:ad:2e:21:c4:69:c2:6d:bc:bd:88:09:
                    78:5a:ed:e0:7a:c0:f6:30:a5:ee:f4:70:d2:2c:45:
                    ab:bd:b1:d9:46:87:3b:ad:b9:04:2f:2b:c1:fd:5b:
                    46:3d:a3:2f:97:94:39:48:30:70:79:d9:dc:f5:ee:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:DB:98:4A:47:0D:A7:93:58:22:50:89:BA:03:33:D4:DC:BA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1366d44-a451-34a8-b512-a6a5520224ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:1d:f8:77:d5:15:53:16:5b:ef:67:b1:7e:90:92:45:d4:
         14:4d:a7:c6:65:d7:ca:88:e7:2a:20:27:35:a2:00:a4:57:00:
         2e:0f:92:99:f2:ef:b2:ab:cc:d2:2e:e0:c8:71:77:3d:f4:45:
         b0:43:fb:c1:09:f7:fe:b6:c0:7c:dd:8b:41:31:90:00:d0:a4:
         e9:97:97:c3:eb:55:68:23:88:3b:51:96:26:6d:fa:6e:69:57:
         24:1c:62:63:3b:d2:15:60:15:b3:b2:8d:f7:fb:33:7d:fb:be:
         e9:78:e7:c9:07:d5:38:bc:14:94:c6:dc:e8:a9:15:84:8e:3f:
         95:37:b7:9f:98:e0:e1:35:3d:f9:3c:da:8f:6c:d9:63:95:99:
         10:2f:6d:27:c4:d6:44:c1:e2:d2:c5:b8:a1:9f:f3:01:8e:11:
         85:59:22:25:c6:ad:8b:ad:d5:56:76:a7:df:66:fb:ed:0d:e9:
         db:20:4a:da:ff:42:a1:75:dc:92:11:fd:de:da:60:43:2e:96:
         f0:77:c7:c3:17:b2:73:0d:3c:d9:e1:68:2e:d6:1e:e9:22:fc:
         af:79:6f:74:02:8a:5c:9d:3c:83:dd:47:1e:1f:53:5b:87:53:
         81:29:f2:31:de:a9:c4:6f:de:a7:2e:b2:7c:6a:5f:f4:f2:b9:
         a8:1c:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:19:04 2026 by rpki-client