Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9255a89e-4bb8-39bc-8292-5005761c51c3.roa
File:                     9255a89e-4bb8-39bc-8292-5005761c51c3.roa (raw, json)
Hash identifier:          FJsiQ8pyyjtimOl4gRI56h+djjr7PiL8pDMkAlTrDdo=
Subject key identifier:   5E:F1:A3:AA:44:8A:19:A9:41:7C:06:82:53:9F:A0:E0:05:88:57:F8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F6D68C5BDC64B756B7DC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9255a89e-4bb8-39bc-8292-5005761c51c3.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     33588
IP address blocks:        98.127.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:6d:68:c5:bd:c6:4b:75:6b:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=459b480d-393f-420d-9ab4-565f4eabddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:cc:80:0f:7e:c1:74:bc:c8:fa:4c:89:cb:
                    3a:ad:8e:4e:c5:1e:83:ea:b6:da:e7:5d:ec:9b:3a:
                    be:7c:97:d5:77:62:41:f3:5d:4a:2a:23:c2:da:b8:
                    99:34:9c:4d:05:67:af:f7:87:76:52:e8:72:8c:d5:
                    7f:3d:02:24:d2:09:a1:28:94:db:35:56:96:4b:fd:
                    99:c7:0b:87:95:25:e3:96:03:c5:73:48:87:e0:a4:
                    56:4d:17:30:01:5d:6a:12:95:d5:0d:5e:dc:8e:c6:
                    44:8b:c8:a7:f6:72:66:5c:bd:95:0b:b0:14:18:0c:
                    07:c6:ac:62:89:d0:1a:59:b5:3b:88:52:ba:18:97:
                    41:3d:7d:2a:0a:3f:93:5c:14:cc:c8:5d:17:bf:a2:
                    79:f2:92:23:3a:bc:06:be:13:0e:04:bf:34:d1:1f:
                    0c:60:9f:e6:12:3f:6d:18:1f:38:cb:ad:a3:b1:f5:
                    d9:6a:a0:0e:1b:04:be:fe:8b:e6:0d:41:3a:04:1d:
                    e3:5e:64:3c:16:c9:6e:a9:ed:38:33:79:6f:c8:96:
                    6b:0e:86:0a:f0:ea:7f:56:9a:be:13:a7:f0:cf:a0:
                    d6:34:0c:cc:4b:46:0a:b9:9b:6f:04:e1:22:30:30:
                    eb:71:b7:98:3e:49:00:f6:e6:58:bc:44:3c:be:cb:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F1:A3:AA:44:8A:19:A9:41:7C:06:82:53:9F:A0:E0:05:88:57:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9255a89e-4bb8-39bc-8292-5005761c51c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:7e:1a:0c:e5:67:7b:33:d5:ad:84:99:ae:9f:27:c6:be:
         52:58:12:1d:48:4c:15:f4:1e:2c:62:28:d0:26:97:24:91:59:
         62:e4:2f:ee:5e:e9:9e:6c:08:75:06:4a:11:88:ed:41:71:f7:
         15:b1:b8:20:4d:75:fe:91:65:a1:51:7a:41:e5:8c:3c:fe:c2:
         4f:a3:a9:a4:f7:af:a3:ff:ae:2d:c7:ab:22:35:1a:19:f3:57:
         0f:e0:e7:4e:98:0d:27:60:43:05:6f:6f:5e:60:5b:c3:2c:1f:
         1f:84:e9:87:e1:98:66:ce:b2:02:df:f5:0e:a9:ca:44:19:d7:
         7b:e7:95:8d:a2:a1:e1:c2:54:29:57:25:29:81:26:b8:3b:e4:
         61:6b:94:4a:92:e4:c1:90:ba:22:f6:02:8b:68:e8:43:19:09:
         69:bb:30:32:30:ae:1f:54:a3:3b:8b:c7:7a:b1:0e:82:1e:0a:
         b5:7d:ed:03:3a:14:71:2b:c8:ac:36:a2:ba:7e:fa:f6:71:59:
         65:22:c8:28:92:71:3f:86:13:32:0b:8b:fe:be:0b:11:72:c0:
         13:92:cc:8f:a7:45:35:36:78:33:01:25:bd:17:53:30:ae:64:
         fb:a6:8d:db:e6:2e:aa:4f:76:4f:7c:9f:c9:fb:8c:82:d0:97:
         22:6f:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:05 2026 by rpki-client