Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c00873-df64-335b-96ab-b379c69e8433.roa
File:                     d3c00873-df64-335b-96ab-b379c69e8433.roa (raw, json)
Hash identifier:          EVMsA4WMENdNU5gSchyTsRCQWeDR8dD9u8+O4TGJ9EI=
Subject key identifier:   20:24:38:68:C5:EA:EF:E1:18:0B:EA:F0:A9:7C:55:58:C4:CC:5D:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA7C5E16254995789EC230
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c00873-df64-335b-96ab-b379c69e8433.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        98.246.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:7c:5e:16:25:49:95:78:9e:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=39fd57ec-5c71-4610-8100-92a5a92aefd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:3e:80:e6:6f:7a:93:d0:af:32:55:72:b5:
                    fb:4e:13:e6:85:88:1d:bb:67:47:2d:48:de:f6:78:
                    9b:2d:9e:6f:9f:fa:3b:23:2d:7f:e3:b5:33:5a:17:
                    77:6c:2c:e0:e8:24:95:97:89:e9:3b:32:72:88:be:
                    c4:02:41:39:b4:d0:70:4c:ae:66:c9:6f:16:c0:3f:
                    55:ef:e9:59:dd:b4:90:2d:3f:74:14:23:65:4e:03:
                    27:0d:96:33:79:45:e9:cc:ab:d2:d0:0a:46:bc:a7:
                    97:43:0d:19:65:d7:c6:46:bc:fe:bf:49:a6:f5:e5:
                    03:3a:55:4a:e0:5f:92:03:0c:9e:9d:dd:81:a3:5a:
                    51:9d:22:d1:78:20:9d:aa:a9:7f:78:4b:c5:8f:96:
                    3c:bf:e5:20:ed:73:73:62:c2:02:dd:34:52:9f:f5:
                    94:1c:e1:25:21:12:33:37:da:b2:43:04:d5:73:e9:
                    d4:a8:fa:fb:61:f6:89:49:80:c3:b8:c6:89:dc:ca:
                    de:b3:a3:a9:68:f5:f6:a3:4b:d0:f3:c1:4e:11:93:
                    e9:d2:b4:23:ee:3c:a9:f4:54:2d:60:eb:f1:6e:f8:
                    58:5e:5c:28:33:2e:18:dd:75:00:72:87:66:22:90:
                    43:61:13:6b:5f:51:5c:b0:14:1f:95:76:5b:9e:82:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:38:68:C5:EA:EF:E1:18:0B:EA:F0:A9:7C:55:58:C4:CC:5D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c00873-df64-335b-96ab-b379c69e8433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:79:a7:d6:9b:a3:cf:7e:d6:13:43:86:f4:5e:36:6d:7b:
         97:ff:32:ff:79:d9:58:d7:73:3a:2d:8f:65:49:51:3f:45:a5:
         e6:0e:c1:41:8d:21:6b:62:87:4e:48:56:54:54:2a:c4:36:79:
         11:9a:aa:ee:d1:c3:bc:1d:19:65:42:0f:a9:26:39:50:66:b6:
         72:ff:33:c5:9d:e9:da:d9:4e:63:c5:8c:4b:88:34:6d:cf:36:
         eb:b0:c4:ef:71:c0:8c:4f:a4:f0:54:52:60:6b:cc:ed:a5:8f:
         51:20:ff:65:72:6f:13:c7:3c:2e:07:53:66:92:96:f2:00:3b:
         a8:d9:0b:e8:d4:60:1d:ba:63:a1:ca:83:63:e9:9c:bb:cb:aa:
         6e:32:7e:e3:e6:9a:ec:5a:65:d2:f1:ca:0b:8f:ef:12:5d:d4:
         40:d9:16:6e:2e:a7:0e:da:bd:43:ab:8d:93:e6:5a:85:db:95:
         2a:14:a9:dd:4c:69:95:29:fd:03:a6:29:c4:37:72:12:03:77:
         3f:f0:57:3c:53:13:5c:49:c9:37:03:b3:bc:71:96:48:8b:dc:
         6b:8f:db:fa:7f:de:ca:5c:de:f0:77:fc:20:c0:4d:72:f5:a0:
         a4:28:04:12:39:f4:45:a3:17:66:f5:2e:89:7f:27:42:18:3e:
         d0:e7:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:07 2026 by rpki-client