Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0143fbe-22fa-38e3-87aa-ff65c8ce78e7.roa
File:                     f0143fbe-22fa-38e3-87aa-ff65c8ce78e7.roa (raw, json)
Hash identifier:          vKVHUkk6YRmjC3b5lOpieoTVnozMSQMacKVvnUFA7pM=
Subject key identifier:   38:5B:EF:B6:33:36:4F:20:4B:0E:25:BF:A6:B3:B2:DA:32:5A:DB:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A9EACA7CA3A37428D1AA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0143fbe-22fa-38e3-87aa-ff65c8ce78e7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        98.61.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:9e:ac:a7:ca:3a:37:42:8d:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b1ce3c42-209b-4843-a232-f043ea8fea7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:62:07:6f:3b:6a:10:d9:31:a4:22:fc:72:
                    9d:e1:db:32:36:bd:c4:11:e8:54:c8:94:cf:3e:d7:
                    03:30:24:a4:e3:9e:04:4d:dd:ae:16:eb:bd:f0:ab:
                    44:ef:8c:68:f8:f9:51:45:4b:c2:07:15:83:41:fa:
                    5f:c2:ac:58:dd:d3:64:e0:be:13:70:11:42:3c:93:
                    f0:c5:78:d3:6d:6b:d8:77:0c:ac:b7:f6:f5:4d:1a:
                    27:71:a3:96:f6:e7:0f:91:70:ba:f8:04:f8:57:3a:
                    e2:38:9f:2d:d1:f9:98:80:87:12:19:90:8f:0e:db:
                    b5:73:2f:fe:9e:28:4d:cd:07:df:d7:39:9d:eb:50:
                    ce:6c:f9:fc:b6:3d:48:13:d5:2c:13:50:5b:73:d1:
                    b9:81:9f:37:6f:f4:ea:8c:fb:d2:d2:20:55:84:0e:
                    9a:20:b4:a2:98:3b:bb:52:54:e8:7f:5c:e4:12:80:
                    c0:50:7e:d9:19:df:49:30:71:f9:8a:bf:1a:47:0a:
                    92:a3:a9:d1:a6:e6:1d:af:e9:f4:93:6e:e6:06:25:
                    08:f4:0e:a8:72:15:04:9a:bf:a5:ec:78:bf:44:bc:
                    2c:94:53:c2:1c:9d:0d:de:92:85:95:68:54:bc:72:
                    57:35:f4:46:46:6b:73:1f:86:dc:00:04:8f:a5:ab:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5B:EF:B6:33:36:4F:20:4B:0E:25:BF:A6:B3:B2:DA:32:5A:DB:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0143fbe-22fa-38e3-87aa-ff65c8ce78e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:82:06:a9:61:89:02:4c:79:60:15:1e:c6:4a:8c:b4:e8:
         24:f1:d2:6b:01:eb:1f:79:ae:17:00:77:3b:d6:d6:f3:b6:42:
         74:0a:44:6b:cf:38:2e:31:4b:e0:62:0e:14:42:49:b4:c0:78:
         82:13:f6:97:b1:4b:a2:01:1a:02:5c:5c:11:a6:e4:a3:84:aa:
         7a:2b:f6:17:bb:d8:93:e7:0a:ba:81:eb:56:a2:2d:6b:26:bd:
         77:b2:6d:6a:16:26:6d:5e:73:76:be:d7:f7:59:6d:9b:46:91:
         d9:1a:e4:95:88:d3:5d:77:df:6c:6a:0a:06:9e:43:30:c3:b0:
         f0:be:84:23:ed:fc:29:66:d2:bf:43:0b:24:0c:61:31:93:8c:
         15:3e:03:1c:df:12:d2:44:86:a4:f9:76:34:91:10:2b:95:7b:
         86:b5:95:ac:53:ba:4a:ce:86:ab:a0:26:44:16:52:e2:1e:54:
         0a:71:e3:5b:7e:59:b6:cc:9e:73:2c:32:ad:c7:f4:1b:85:d2:
         f9:22:0d:ac:78:3e:78:ab:d3:94:bb:02:43:8c:9f:96:3e:0c:
         97:8e:d8:85:ec:a8:33:54:d9:17:2f:66:65:15:d0:c0:9a:ef:
         72:ad:3d:cc:dc:a9:c5:be:66:95:53:d7:dc:f0:d7:e3:a2:5b:
         29:03:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:18:53 2026 by rpki-client