Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc708b03-33f0-3464-be66-078ccc46ca1d.roa
File:                     dc708b03-33f0-3464-be66-078ccc46ca1d.roa (raw, json)
Hash identifier:          cUP4XxRGnJFVJXZUWid3wg2Qf3KOf9mziCIkDZ8gq7k=
Subject key identifier:   17:FD:59:4E:60:FF:61:33:10:E1:BC:9B:73:DD:15:B5:8C:46:EB:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB6C9F434C193966D07800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc708b03-33f0-3464-be66-078ccc46ca1d.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.196.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:6c:9f:43:4c:19:39:66:d0:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=e148060a-efc9-4018-8d08-58ddfc3d2c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:00:14:12:a4:d1:b0:8c:4a:ea:1a:2d:e8:
                    8c:da:61:5b:30:eb:5a:d7:a4:8d:a9:e4:50:62:80:
                    53:d1:a1:82:e7:c6:2d:d6:e3:f1:1f:2b:0c:04:fe:
                    10:08:ae:0b:21:fb:39:02:3e:01:e9:fc:bd:ca:ae:
                    1c:ed:bf:3b:2f:72:73:ef:d2:52:d9:c7:ad:db:16:
                    85:f3:29:09:ce:b2:34:1c:7a:e6:8d:9d:8d:bf:a4:
                    18:d2:77:44:2e:98:6d:2f:18:1a:d1:96:3a:af:f4:
                    2b:83:b2:3e:e9:86:d1:0f:92:fd:fe:7a:a0:7a:5e:
                    d1:68:3e:f3:de:b5:79:5b:2d:3d:3b:34:7c:5c:ea:
                    0d:13:b2:5d:61:09:61:64:48:2c:4b:d1:57:15:58:
                    9e:ee:e5:64:59:67:9c:e2:0a:d3:2d:83:43:d3:49:
                    37:b1:02:35:88:98:64:69:7f:f5:7e:86:53:bd:41:
                    51:40:b8:70:dc:c5:2f:72:9e:19:30:fc:a6:ff:9d:
                    e2:16:7a:c1:d2:af:b7:84:fa:26:b6:48:02:3d:c6:
                    6c:fd:f5:a7:fe:72:45:5b:cc:c9:a7:98:a3:2d:2e:
                    38:33:71:4f:bb:48:33:b2:c4:79:c0:7f:75:18:b9:
                    8c:5d:d9:fa:d8:bc:16:b0:5e:b1:2c:e3:39:5f:43:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FD:59:4E:60:FF:61:33:10:E1:BC:9B:73:DD:15:B5:8C:46:EB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc708b03-33f0-3464-be66-078ccc46ca1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:19:01:d6:25:27:81:c4:98:9b:58:af:a8:34:fa:d7:c1:
         5b:5c:1e:53:b5:43:2c:cb:e8:28:85:71:3b:c4:b8:43:7f:3e:
         d6:22:ac:f3:4e:bf:75:95:de:bd:73:fa:c1:21:85:a0:6d:24:
         9f:cc:d9:87:1c:d9:49:3f:5c:14:63:ec:88:26:a5:5e:97:0e:
         f5:49:37:c4:f6:81:80:4a:9c:d2:19:33:97:5a:27:2b:32:ca:
         84:eb:e9:23:48:24:e9:46:fb:79:6a:fc:6c:33:e7:af:2a:21:
         21:e0:09:b9:9c:3c:10:73:24:0b:49:20:bf:89:c4:d1:69:bf:
         8d:13:2d:34:86:79:4f:fb:4d:b6:34:5c:c2:b2:22:82:a0:44:
         15:0f:8d:63:68:bc:fe:48:29:ec:99:2d:ae:d2:cc:d4:f6:32:
         ce:55:25:59:39:65:2c:bc:ad:b2:d2:09:9e:60:da:6e:d8:79:
         9e:a3:f6:98:cf:20:05:73:e9:2f:be:f2:25:a3:42:80:bf:22:
         29:43:1b:b6:e4:20:80:54:d9:63:df:38:78:c1:1a:83:61:c1:
         ba:3d:12:5a:04:c5:84:18:a0:8b:4c:85:4f:82:f2:f2:0c:55:
         98:39:14:5c:57:ce:48:0a:0c:f7:92:7b:4e:2f:71:57:25:e0:
         21:00:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:43 2026 by rpki-client