Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db3fc159-9f7f-3acc-8198-ff2521ef2d3c.roa
File:                     db3fc159-9f7f-3acc-8198-ff2521ef2d3c.roa (raw, json)
Hash identifier:          Aud3H+YFiLASThpzLD4qKr5JqGDLZ9ApftBgFkasuQM=
Subject key identifier:   62:81:2B:B0:E6:F5:30:C8:77:F5:D7:19:13:16:8A:49:ED:9E:F8:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC9A97FFAD4BBDC750CA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db3fc159-9f7f-3acc-8198-ff2521ef2d3c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.195.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:9a:97:ff:ad:4b:bd:c7:50:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=ab910ebf-5971-40e0-9776-8734b94c0bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:8d:d4:04:f2:ed:39:d5:b1:b6:aa:69:03:
                    9e:9e:3c:84:6b:c6:e3:76:cb:78:a3:91:67:56:fc:
                    77:85:41:57:d9:10:f2:91:1c:a1:d6:3f:cf:af:ec:
                    08:27:cb:e6:1e:20:55:7b:38:c2:aa:b8:24:17:22:
                    a3:66:ed:e7:34:80:e0:7a:7f:16:fd:cc:60:a7:72:
                    e1:9e:e1:7a:d7:a5:0f:d5:7a:02:d6:3e:73:16:5e:
                    ff:a2:2c:c6:ac:21:8d:4a:6b:06:fc:55:58:49:27:
                    89:c0:0d:e5:41:8a:7c:34:78:82:bc:ae:20:63:0a:
                    ad:4d:2e:fc:c1:36:45:03:9f:5a:d7:82:e6:f0:52:
                    f9:19:13:da:77:b9:af:f6:bd:3b:a6:e7:ef:d3:db:
                    99:09:28:c2:ec:5d:88:6f:5f:07:85:fe:4a:dd:1d:
                    92:70:45:a4:10:8c:25:2a:6f:58:21:40:0b:ce:b9:
                    98:47:3f:57:2c:1b:3e:22:ed:2a:b1:3c:14:29:06:
                    66:ea:7a:9b:7d:fc:80:c0:08:14:dc:ef:5d:da:1e:
                    8a:15:81:94:6d:7e:d7:ab:41:af:84:43:78:18:d7:
                    ef:30:b0:6c:50:d7:40:c9:8f:56:16:ee:e6:cc:52:
                    81:36:60:78:12:1e:a4:d5:33:1e:7b:7f:aa:14:f3:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:2B:B0:E6:F5:30:C8:77:F5:D7:19:13:16:8A:49:ED:9E:F8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db3fc159-9f7f-3acc-8198-ff2521ef2d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:3c:46:e1:11:84:eb:a0:b5:54:ba:bd:72:7b:f8:aa:49:
         d5:7f:1b:15:cc:d7:be:b3:27:01:9a:d7:a9:91:c9:08:d3:5f:
         c7:66:25:fa:7f:47:2f:b4:d1:23:4d:ca:5e:ad:ac:d5:48:de:
         73:db:12:8d:ff:a3:b5:bc:29:21:68:bd:e8:0c:a1:57:37:2f:
         2b:7b:9a:a9:d4:eb:83:76:e7:ec:78:43:c8:99:80:3e:9d:8b:
         5d:c5:63:97:65:88:a4:d9:2e:2e:b0:3f:b2:cf:ae:b9:06:64:
         a2:10:ed:cb:49:fd:ed:eb:5b:38:20:53:b0:45:ce:d5:ed:d5:
         9a:0f:dd:e6:a9:b7:12:d5:1b:b3:fa:c0:89:46:b4:5a:1a:1d:
         7c:8a:e5:3a:87:ef:7f:44:a3:bd:9b:4f:99:2d:8b:88:16:2c:
         d6:d8:d4:0f:6c:11:93:71:76:b4:77:be:6f:12:e1:ec:0a:6b:
         fc:e6:35:fd:78:b9:aa:ad:e4:a4:97:9a:56:69:4e:87:29:79:
         f8:92:49:01:c4:a2:e1:f8:3b:82:b4:7f:4f:b1:a1:46:28:8f:
         84:2a:e3:27:4b:4c:ee:26:96:74:34:da:96:e3:4e:1f:33:98:
         c3:1e:b7:9c:2d:65:cb:f8:57:c9:51:79:b8:24:aa:89:f6:d7:
         ef:20:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:16 2026 by rpki-client