Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e352df83-a12c-38d7-945a-7c1b3d914aa3.roa
File:                     e352df83-a12c-38d7-945a-7c1b3d914aa3.roa (raw, json)
Hash identifier:          kaS3ngN3IX9yTl+D0Uw2OrvA/P5nKoHaMegPr7YGhe8=
Subject key identifier:   D2:16:2E:64:0C:55:CB:AF:CF:9B:9F:F8:A3:52:7C:BF:48:3B:C1:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC9ED204220EC576A49C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e352df83-a12c-38d7-945a-7c1b3d914aa3.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.197.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:9e:d2:04:22:0e:c5:76:a4:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=24e3ea11-8e4f-4c63-a4d0-85f3d988af91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:af:f7:80:82:6d:92:54:c0:e3:ff:95:9b:
                    93:2d:d8:2f:ca:22:93:90:88:4f:80:d2:b1:dd:e3:
                    af:c3:e1:19:65:17:f6:8c:ba:00:d6:59:c6:aa:80:
                    6f:a3:f6:9e:b5:b6:ef:b2:88:ac:2f:0e:da:43:75:
                    c4:2e:ba:6a:0e:0a:dd:bb:58:aa:c2:10:30:5b:85:
                    d8:60:fb:77:e8:56:88:7c:8c:5b:ec:c3:1f:92:26:
                    eb:0a:a4:5c:27:47:1c:b7:e6:ec:bb:eb:4d:95:29:
                    2c:04:4d:c8:01:f6:8b:7a:65:f3:a5:a5:46:97:7a:
                    39:9c:d9:5c:d7:20:82:be:ec:c1:75:11:d3:25:5d:
                    c8:bc:b0:22:07:34:78:d4:e8:b4:eb:de:f8:4f:85:
                    6d:44:f6:1c:1a:be:a6:78:f1:22:62:05:30:9e:15:
                    35:b0:64:5d:be:26:ec:bb:bd:7d:a1:8a:52:84:87:
                    ce:c3:8b:b3:77:4f:a7:13:97:7e:14:04:f2:02:2d:
                    95:cb:e3:a8:73:f7:b4:5c:33:ff:94:3d:68:d0:1a:
                    d2:d4:de:79:d3:59:d2:6a:4e:9b:87:3d:52:13:25:
                    51:d2:3b:37:4a:36:49:b3:2e:13:c3:de:b8:f3:bb:
                    c5:22:b5:93:52:fa:fb:33:a6:a6:c6:4e:a0:36:76:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:16:2E:64:0C:55:CB:AF:CF:9B:9F:F8:A3:52:7C:BF:48:3B:C1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e352df83-a12c-38d7-945a-7c1b3d914aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c0:4a:80:45:97:63:64:fc:33:8a:75:56:c0:4c:e0:a8:c6:
         87:41:3d:a3:ed:96:33:1c:cd:72:b1:47:ac:57:cc:cf:bf:a7:
         5b:ca:f4:09:8f:a8:e8:50:4a:94:19:6a:6a:cc:c8:3d:0a:af:
         3b:6d:ca:49:b9:06:eb:6e:c4:de:89:3b:6f:30:15:54:6b:5e:
         b1:fb:e6:f0:19:73:fa:1a:e6:24:14:cf:e5:05:af:08:57:d5:
         c6:da:aa:24:b5:44:f5:c9:56:92:05:99:d4:4f:e7:45:31:9d:
         6d:6f:52:cb:87:31:21:68:e6:25:6a:3e:2f:a6:c3:f5:c4:32:
         02:14:26:1d:cb:46:f1:98:86:20:42:b1:a2:4b:d8:6a:55:c3:
         b2:a9:0c:c1:3f:5d:5e:36:33:23:b7:21:f8:40:3d:eb:aa:92:
         ba:d4:14:d9:91:88:37:af:a6:3b:8d:26:f1:9f:7b:ba:0d:ac:
         f2:59:7f:b4:d8:a5:d6:6d:51:83:cc:63:80:ec:e6:97:e5:89:
         37:e4:7b:46:6f:f8:c0:67:dd:d4:9c:43:39:1d:ad:95:b2:05:
         ff:e6:c3:5e:a4:ae:4b:8d:ac:f0:76:9c:d9:2a:8a:d5:d6:1f:
         03:11:90:ab:81:6f:73:48:5e:1b:b7:6c:26:82:9a:16:89:d5:
         f0:36:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:07 2026 by rpki-client