Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f84fb25-8087-30ed-a78b-4418b80f8773.roa
File:                     1f84fb25-8087-30ed-a78b-4418b80f8773.roa (raw, json)
Hash identifier:          xUyRn4TckCmpr15hY5ylb6rFn9MJkmKM1NxXoGr7mjo=
Subject key identifier:   31:D8:30:B1:0C:69:F3:B8:87:FA:5D:36:CA:3E:82:CA:C0:C0:F5:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8643AFD3E113CDF6387E5E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f84fb25-8087-30ed-a78b-4418b80f8773.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.197.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:3a:fd:3e:11:3c:df:63:87:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=b4f840f6-ebc9-48c8-85bf-d63bf874c47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:90:aa:e0:a6:65:df:a8:43:13:53:2c:63:
                    d9:81:01:6d:ff:75:40:d8:88:19:98:88:8b:cc:a0:
                    53:61:2b:24:78:16:9a:a4:aa:90:bd:7d:05:d5:2d:
                    c8:75:f4:bb:f4:97:86:b2:3b:43:32:8a:22:aa:9d:
                    5f:57:83:85:b3:4b:c8:9a:4b:da:e0:e2:1b:34:ae:
                    db:80:42:1b:b8:cd:df:ed:6d:85:f7:f7:30:64:b6:
                    8f:7e:aa:2b:e9:da:bd:e9:b8:cb:9f:2c:19:c8:ea:
                    6a:02:e6:aa:7d:7c:37:e4:30:3a:8d:17:36:bc:3f:
                    cf:58:a7:87:a8:08:b4:bc:aa:6a:6a:f3:07:a8:7d:
                    43:4d:2f:5e:d2:4b:03:6e:b0:14:29:c6:5c:90:0b:
                    6f:b1:45:27:cc:38:a8:33:31:39:8d:1b:4c:f8:95:
                    66:6f:b7:2b:8a:05:6a:1a:b0:71:62:bd:04:d5:a8:
                    d1:c5:7c:8b:f9:7c:15:8e:44:1a:6d:1a:bb:c5:06:
                    4c:b7:dd:3f:7d:89:05:d1:76:8d:eb:c7:d4:72:ae:
                    22:d9:18:c9:c2:36:55:fb:55:c1:47:c8:0c:35:1f:
                    2a:d4:a7:99:c8:69:77:b6:6d:75:d5:63:04:6d:e2:
                    e6:7e:d3:6a:44:c6:17:bf:d4:bc:6d:9f:c6:f2:a4:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D8:30:B1:0C:69:F3:B8:87:FA:5D:36:CA:3E:82:CA:C0:C0:F5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f84fb25-8087-30ed-a78b-4418b80f8773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:24:c2:a0:c3:ae:f2:d6:82:71:09:b2:dd:57:c6:95:7d:
         2e:97:71:98:8d:37:61:45:69:5b:fd:9a:87:12:1d:db:f5:6a:
         1b:10:42:3b:d1:34:62:7c:92:84:aa:25:22:8f:41:2a:99:22:
         cf:01:75:05:88:02:3f:8e:db:ed:a7:64:df:bf:3c:0f:5d:72:
         46:75:08:2c:39:a1:f9:37:84:53:96:7f:4d:e1:89:ec:ff:26:
         8f:36:12:75:82:cf:6a:07:28:a8:f4:15:09:f0:5b:de:32:11:
         74:be:d2:ff:de:ca:15:a8:d4:60:a4:c4:0c:37:9f:4c:26:f9:
         aa:e1:75:06:3c:90:71:02:a7:e9:14:0b:b4:9c:a0:90:f1:fb:
         18:4f:1b:f7:aa:03:c9:17:40:cf:97:e8:33:3a:09:31:98:93:
         cc:72:9b:ec:85:8d:24:56:ba:a7:76:05:24:2c:20:bc:28:b8:
         ba:9d:bc:20:3f:04:7c:f4:17:9f:45:a9:06:82:5e:5d:5c:7a:
         f3:0c:74:7b:a2:d7:1c:bd:6f:9a:80:cc:e7:65:f7:bf:f2:f7:
         93:0c:5d:53:26:e7:38:4d:1b:92:80:ce:0a:ca:0f:82:b3:9a:
         ff:24:7f:22:d4:e0:e4:36:a5:36:7b:8c:41:35:88:78:b1:d1:
         54:0d:31:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:22:00 2026 by rpki-client