Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42a3d720-8d52-35f0-ace7-01ba20486d4e.roa
File:                     42a3d720-8d52-35f0-ace7-01ba20486d4e.roa (raw, json)
Hash identifier:          hOC0puAexsdgAa/3eLGk3UhM8zMuLaqla1gMmpaRXvw=
Subject key identifier:   C9:CD:20:46:91:C4:8B:C4:35:81:36:62:D2:96:5A:8D:5A:D0:A5:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86320292EB50BC368C0C380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42a3d720-8d52-35f0-ace7-01ba20486d4e.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.57.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:20:29:2e:b5:0b:c3:68:c0:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=2cf24a77-b0e4-48ef-851e-2d5b95152e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:28:e4:9f:f6:b7:72:24:6c:5e:ac:78:f3:
                    d9:cd:3d:6e:92:f6:49:5a:1e:4f:cd:b2:0f:3d:65:
                    d8:de:5b:e8:dc:f2:db:20:ed:4d:0b:10:00:c8:c0:
                    d7:65:83:66:9f:46:73:6a:54:ec:36:86:aa:6b:dd:
                    03:1c:48:ba:87:33:b2:d7:b3:f5:57:9b:3c:86:05:
                    2c:b1:18:75:af:b9:81:4a:67:4a:0f:d0:07:de:8b:
                    0b:d9:91:6f:78:0c:af:49:fa:59:96:4d:fe:02:68:
                    a7:43:1b:4f:87:64:8c:43:65:22:73:e9:ac:b4:c9:
                    92:11:21:ae:fa:6b:2e:80:d8:54:66:d0:e9:cd:61:
                    bc:9e:64:88:f2:18:97:25:4f:87:7c:aa:a7:29:50:
                    ac:42:06:7f:5d:a5:89:96:a7:18:0f:70:de:15:de:
                    1c:cf:59:28:b0:18:43:60:01:1c:eb:4c:18:3d:44:
                    70:1a:12:41:4d:cb:0d:53:92:60:86:8c:fd:2c:e3:
                    31:20:2f:1e:34:08:6e:2e:d6:ed:1a:5c:47:74:26:
                    1b:cd:b3:af:e6:f4:79:29:00:b3:74:4e:3c:dd:40:
                    d8:3b:46:93:f8:5b:2c:e0:09:b4:e8:e6:bf:25:30:
                    fb:8a:09:71:a0:27:7c:12:58:d3:53:74:be:ce:52:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:20:46:91:C4:8B:C4:35:81:36:62:D2:96:5A:8D:5A:D0:A5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42a3d720-8d52-35f0-ace7-01ba20486d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:e6:61:b6:5a:7a:7d:41:aa:13:54:e9:e1:be:dc:37:53:
         ef:96:5a:fe:e7:bf:c7:11:54:e8:df:dd:a1:72:c4:f4:e8:e6:
         20:b1:12:6b:48:79:84:42:d7:7c:8b:f0:dd:f9:bf:3f:df:1c:
         e2:3c:71:28:e0:07:58:25:67:27:96:c8:ff:ae:d4:3b:04:59:
         f5:7d:fc:3f:bb:16:27:f4:95:ae:f8:ac:cd:79:cc:69:3c:14:
         7a:93:ec:51:1b:46:39:16:81:45:c2:9f:54:d5:4b:ea:81:bd:
         74:e3:4c:78:18:9a:f5:62:6c:98:c3:c8:d6:a0:13:ac:a0:e8:
         06:1b:88:1b:e3:ab:16:1b:b2:3a:fe:3a:30:20:08:96:5f:55:
         82:5d:47:58:d6:83:75:2d:19:b3:fb:23:66:4f:b9:6f:ef:a4:
         e6:b0:cf:6f:57:93:f3:96:82:dd:e9:8d:9f:48:68:ee:7a:81:
         69:cd:46:b1:7f:0a:a1:da:3d:6d:ed:d0:1f:48:a3:74:6f:9b:
         8e:5e:c8:7e:80:f1:35:34:9c:85:ab:59:ba:86:bb:12:56:8c:
         3f:5d:22:19:3c:5d:86:4e:0a:bd:af:b8:8a:76:53:a9:0c:97:
         bb:f5:a6:28:e9:ca:86:22:b1:48:e7:bc:20:9c:4b:3c:3c:e9:
         48:a2:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:14:53 2026 by rpki-client