Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c6a06b-1739-30a0-af0e-13791d52118f.roa
File:                     e3c6a06b-1739-30a0-af0e-13791d52118f.roa (raw, json)
Hash identifier:          VPciG0SvInqxTxaPdKvWg1OlCqs+0XxZ9fhoIUu1XeE=
Subject key identifier:   48:9D:12:36:4C:AC:B3:73:1B:10:84:24:D2:C8:B6:6F:5A:E3:A2:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BCA0EBBEF99391FAB12774
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c6a06b-1739-30a0-af0e-13791d52118f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.197.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:a0:eb:be:f9:93:91:fa:b1:27:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=0f36641d-3dcb-41c5-9575-4da1dc11568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:55:0b:5c:c5:05:87:40:ea:61:c6:24:54:
                    06:0f:f3:42:f3:b8:67:e4:37:e2:ad:eb:9a:b4:c4:
                    3c:56:15:28:71:fd:68:30:18:6f:28:bd:6e:be:10:
                    3a:ad:15:00:ca:16:de:6c:65:30:ab:2a:a1:f1:cc:
                    84:11:f9:00:86:56:95:74:e5:92:f6:7a:27:05:90:
                    2a:ca:29:ab:d6:b8:5e:e5:17:03:01:8c:29:22:a5:
                    95:f0:e3:80:9a:46:d3:7c:22:ee:2d:72:ef:44:58:
                    59:d2:dc:71:0c:a4:88:40:f1:12:8b:57:61:a6:70:
                    01:fa:75:72:3c:96:84:8b:45:81:a5:22:0b:7f:4f:
                    7a:54:02:e2:ce:de:8b:94:97:af:e7:67:c2:8c:5a:
                    23:f2:54:40:3e:15:f6:6b:94:ad:cf:6b:6f:00:ae:
                    79:19:9f:2c:33:69:91:42:af:66:e3:c0:ca:c7:f2:
                    3a:44:c1:c5:85:64:09:92:e3:44:7f:1a:e6:a7:ad:
                    74:12:10:25:6c:3c:90:8c:1e:07:47:ac:82:f5:bb:
                    63:df:df:d7:0f:4a:33:31:83:f5:88:6e:63:4c:92:
                    b3:d2:da:1a:42:21:18:c9:78:40:d1:42:d0:18:f3:
                    95:20:d6:e0:71:95:d1:6b:a8:69:74:6d:63:ac:3d:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:12:36:4C:AC:B3:73:1B:10:84:24:D2:C8:B6:6F:5A:E3:A2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c6a06b-1739-30a0-af0e-13791d52118f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:76:97:59:70:ec:ed:90:f3:fc:b1:7c:98:80:9d:2c:c1:
         bd:ed:c5:3f:56:35:fa:bd:b3:45:8f:6c:97:70:c0:65:ed:d1:
         68:ab:43:ea:ea:8e:70:45:48:fc:88:e8:7e:5b:7c:b7:86:1d:
         1e:fb:50:0f:93:3d:b7:ab:22:a5:bf:ad:f7:9b:c2:6a:64:07:
         24:c2:16:64:2f:f4:c9:b0:5a:5a:d9:f7:d5:c3:f0:84:bb:24:
         d0:ca:d6:4b:6a:be:00:b5:a4:ed:af:40:90:e1:5a:10:7d:0e:
         8f:5e:10:b4:95:20:27:50:ed:0b:99:2c:dd:46:6d:78:45:87:
         ce:d2:17:8c:ac:df:e7:9f:a9:58:a1:46:14:2e:b8:7a:60:a1:
         09:1e:2a:4a:0b:5f:b3:cc:7c:81:72:5a:15:84:02:cf:22:08:
         e2:72:41:7c:eb:31:6d:4d:62:a4:e0:a8:d5:ee:3b:fc:67:75:
         48:8b:2c:d0:14:62:73:98:7b:a1:d1:bc:3b:12:7c:36:1a:9b:
         bc:67:fb:cd:c6:c5:89:a3:91:69:4d:5d:c2:60:cb:d3:be:14:
         10:a5:bb:8d:2f:e0:14:c0:ce:63:ac:c8:c3:10:71:87:5f:bf:
         97:32:37:47:3c:06:14:06:18:78:e9:b3:02:ba:8c:ab:b5:59:
         35:0a:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:51 2026 by rpki-client