Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9222d65-f18c-35c5-9f24-ce1c214a8320.roa
File:                     f9222d65-f18c-35c5-9f24-ce1c214a8320.roa (raw, json)
Hash identifier:          ux8IYHpWfSlA4cxDrDweVlvbtXOsgRR97m1ML3tD0z4=
Subject key identifier:   A8:78:27:F8:33:5C:C1:01:D8:F3:9F:2E:07:CF:2D:66:61:A6:35:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC9CDF478A8A1E64F41100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9222d65-f18c-35c5-9f24-ce1c214a8320.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.196.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:9c:df:47:8a:8a:1e:64:f4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=9377448f-e2ed-4123-b0e1-a751d3e8da15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:22:2a:e4:27:d0:4b:18:d6:a8:dc:a8:d2:
                    dd:11:f4:74:cd:20:b7:c1:05:c1:2c:f7:10:fb:31:
                    03:c2:d6:69:40:45:db:ea:60:2e:db:7f:a5:ce:66:
                    d0:24:2a:b4:c5:5c:f5:0c:ea:65:52:63:ca:92:4d:
                    77:59:a9:18:0c:0b:9e:24:0a:1b:5f:b6:7a:cf:e5:
                    1a:89:0a:48:08:5f:29:27:e1:8d:47:61:1b:66:0a:
                    68:f1:9b:80:b6:fa:8c:cd:04:9e:84:08:34:30:61:
                    ff:a7:51:23:13:02:1b:2f:68:1a:f5:10:40:ed:72:
                    1b:ac:c1:c1:36:f8:96:98:44:78:6d:76:c1:e0:17:
                    82:bf:92:5c:44:24:8a:a7:67:62:7b:e6:47:76:99:
                    2b:46:04:84:78:e1:2c:6f:78:0e:8d:7a:cf:4b:23:
                    8a:0b:1b:de:10:9e:00:01:82:78:d7:b8:29:ad:e7:
                    06:5b:6f:7a:94:f5:21:b1:fa:2e:a5:12:40:5a:dd:
                    53:2e:b8:f6:8a:30:d0:7c:51:fa:eb:bd:f6:ad:9d:
                    d9:34:30:2b:b0:f9:ed:56:a9:22:e5:e1:5d:df:e1:
                    94:e2:8e:ae:ff:94:40:f5:4d:a8:6b:a6:b3:66:17:
                    f0:62:33:b5:5a:50:ba:55:32:2e:c7:78:0f:98:5a:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:78:27:F8:33:5C:C1:01:D8:F3:9F:2E:07:CF:2D:66:61:A6:35:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9222d65-f18c-35c5-9f24-ce1c214a8320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:4e:b4:d8:93:23:45:11:ed:26:81:4a:31:be:dd:d1:da:
         60:ae:63:c1:31:71:7b:8b:79:a8:41:6b:55:6d:c7:d3:03:f2:
         d8:d3:a7:ab:81:e4:04:68:3b:cb:b8:15:ef:65:5f:46:d8:91:
         0a:2d:35:87:17:1d:e3:fd:bb:3d:bc:1f:7e:8b:8d:e8:cc:08:
         6e:37:bb:b6:c1:02:94:1e:e8:71:19:45:a8:14:35:4a:49:c9:
         80:47:83:7f:00:36:6b:22:23:98:fe:bb:ff:7e:93:15:89:5f:
         70:da:ac:c6:15:18:21:fd:cb:23:88:67:d8:2a:3c:1e:55:72:
         fa:6e:73:f2:92:94:5d:4c:6d:9b:48:e1:aa:a7:77:16:ae:38:
         1c:4b:c3:65:1d:fc:47:5c:9c:e3:cf:9c:20:5f:9e:d4:a0:1e:
         7b:54:d8:e2:55:ed:cf:11:52:6b:89:bc:e1:e7:6f:db:1b:9d:
         1a:6c:42:60:6a:20:1f:42:d2:bd:54:43:a1:7f:b9:94:8d:73:
         73:81:87:14:a5:66:61:9a:9b:b9:dd:3a:77:a8:3e:bc:3d:e5:
         9c:f6:da:a5:26:82:7f:fa:41:4d:e5:dc:fd:2c:43:7d:66:c7:
         e0:ba:10:ca:99:52:c1:e0:9b:b4:a7:bb:cc:6d:8c:f8:79:51:
         2d:f5:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:05 2026 by rpki-client