Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f199210b-84dc-31af-96b4-6b7c424d3c16.roa
File:                     f199210b-84dc-31af-96b4-6b7c424d3c16.roa (raw, json)
Hash identifier:          r13gEztQk5dxjZYSVWhh/7O1eCWOsazjvGA464+cF5E=
Subject key identifier:   4E:4B:BA:3F:DB:13:25:4D:BC:66:FB:F8:F6:C6:0C:E2:55:3F:F9:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52438475072E3B7B33D4B040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f199210b-84dc-31af-96b4-6b7c424d3c16.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        98.239.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:84:75:07:2e:3b:7b:33:d4:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=53057deb-96a0-4462-8f5e-069275c034fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:42:12:db:cc:1d:f8:a0:4e:56:3a:8f:d4:
                    d6:ce:8f:0e:e5:21:2b:9c:67:83:d8:83:95:39:2d:
                    64:8d:d5:f2:4b:fe:54:9f:6c:92:16:70:03:f8:86:
                    7c:e7:52:f1:a5:80:ee:fe:02:fc:9e:df:39:a7:ef:
                    15:47:f0:d4:6a:5f:df:c9:5c:d7:1b:54:30:94:b1:
                    d6:63:d6:f5:05:ad:5e:7a:d2:90:60:5c:19:51:bb:
                    23:ba:4d:79:a9:79:b2:a7:90:11:13:2a:2a:47:33:
                    b3:96:23:58:26:db:4e:f9:27:e0:76:6f:7b:d3:34:
                    96:c5:e6:f0:8a:9d:20:ed:be:88:fc:24:94:21:3b:
                    d0:39:14:4b:7b:48:f5:32:af:2e:d0:e4:98:75:ee:
                    f9:b1:0a:5a:95:3c:d8:0f:ee:03:83:23:20:5f:8a:
                    06:11:23:a6:c2:84:ba:e5:3c:cc:88:cd:29:53:a2:
                    92:a9:f7:8e:63:5d:cb:36:71:d9:1a:7f:e8:3c:f4:
                    66:27:8c:3d:b2:60:3e:6d:49:82:a6:b7:5e:44:ea:
                    9b:52:14:9f:73:cf:bd:1b:a3:bd:cb:81:10:c2:27:
                    1e:9c:cd:e8:10:47:25:06:0f:4a:4d:92:94:bf:a8:
                    49:a0:7e:26:da:34:14:b7:e5:82:59:4f:a0:c7:24:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4B:BA:3F:DB:13:25:4D:BC:66:FB:F8:F6:C6:0C:E2:55:3F:F9:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f199210b-84dc-31af-96b4-6b7c424d3c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.239.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:78:59:a6:40:68:7c:e5:93:c6:64:db:6f:1f:39:51:ec:
         b8:ce:bc:91:42:3d:c7:18:32:15:64:9a:78:f1:69:a0:fe:f8:
         27:6f:d0:ca:93:3a:56:a2:67:ec:6a:5c:2f:df:fb:62:1e:f0:
         a9:03:64:1b:73:2a:e1:3e:a5:ec:82:7c:04:24:af:71:27:9e:
         0b:e3:a9:42:1b:67:81:68:b0:de:2c:d2:40:fb:21:85:97:67:
         c8:9c:a2:69:50:25:61:a2:e0:40:9a:87:93:7e:49:1e:33:b3:
         be:d6:16:b7:ed:bd:04:0d:63:17:b9:7c:c9:41:20:b6:e4:77:
         28:a8:91:98:28:bd:c6:a5:98:9a:57:f5:b8:8a:e4:26:b9:b9:
         4f:b0:c9:c3:13:d9:4f:26:74:8e:40:68:b9:0e:2a:ff:06:ba:
         e7:6b:60:92:94:3d:80:e3:22:03:b1:65:b4:07:d7:ca:cf:da:
         28:41:7e:81:15:66:ed:92:fc:09:09:1a:47:f9:bb:a7:cc:b2:
         45:4d:38:7c:3d:0f:75:5b:8b:54:48:bb:98:fa:45:38:41:af:
         57:8c:46:a4:d5:d3:1f:0c:b9:8d:b6:86:e8:e2:be:26:23:9f:
         23:76:ba:70:0c:3e:f7:98:e6:6f:07:1e:78:a1:a7:bc:45:e6:
         e2:59:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:46 2026 by rpki-client