Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c9758c-a4b7-3aa3-955f-0d05b1363b7e.roa
File:                     42c9758c-a4b7-3aa3-955f-0d05b1363b7e.roa (raw, json)
Hash identifier:          DzEzylbP32cw8nUKmsOWAFhdz8o1T1m1gvv0LNPzEL4=
Subject key identifier:   C7:C1:38:46:0E:73:4D:7E:DE:C4:5C:4E:4C:A3:A0:21:C0:3C:CB:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862DCC6F92FD3A87C121B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c9758c-a4b7-3aa3-955f-0d05b1363b7e.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        98.250.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:dc:c6:f9:2f:d3:a8:7c:12:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=18fd056c-6826-4cb5-925d-f114419fa96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:5d:d4:9a:c0:73:1c:39:72:0f:8a:0a:e7:
                    f9:45:c3:01:65:ea:b4:2a:fd:79:73:05:06:4f:24:
                    78:4f:62:ab:83:5c:9b:e8:23:db:e6:43:d4:52:b3:
                    8f:5f:02:b4:1f:87:0d:50:86:2d:7d:17:4c:11:61:
                    94:f2:30:19:89:80:f4:8a:23:e6:4a:30:e3:ee:3e:
                    a6:6d:74:28:8b:40:6c:74:8f:93:43:28:5b:86:e5:
                    25:92:8d:59:07:33:4b:68:24:bf:43:f4:79:66:8c:
                    7a:8e:18:4f:47:93:bd:ca:66:18:cd:7e:55:f7:15:
                    ce:f6:b2:5e:26:c3:8e:6b:1b:26:05:8d:de:90:3c:
                    d2:6a:c2:84:b2:53:ac:52:05:bb:04:de:b3:41:60:
                    23:9a:14:09:50:87:50:ec:c7:32:af:24:56:1b:6b:
                    be:ab:d9:3f:29:a0:31:60:c2:13:42:41:51:36:ea:
                    d3:e5:71:67:a5:e7:cf:6a:ad:ba:7d:a8:6b:1e:a4:
                    b4:72:4c:a1:9c:ad:96:15:ff:82:d1:37:77:e8:8b:
                    fd:8e:bc:8c:41:f7:25:65:6e:9d:8f:3a:27:d8:3e:
                    36:59:20:1f:af:e6:b1:a5:79:ab:6f:bf:34:54:96:
                    62:d0:eb:91:3a:e6:72:c2:40:3a:48:60:2c:c6:c6:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C1:38:46:0E:73:4D:7E:DE:C4:5C:4E:4C:A3:A0:21:C0:3C:CB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c9758c-a4b7-3aa3-955f-0d05b1363b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:21:df:8e:82:37:5c:04:9a:a6:f9:0f:8c:3d:01:56:3c:
         7b:e1:09:e4:03:7f:a7:ef:9f:64:be:c1:bc:fc:1b:bc:86:df:
         24:94:bb:de:9b:15:ad:7a:7a:d0:5b:9c:40:71:17:15:3b:99:
         d6:39:99:be:a3:7b:11:ef:60:5d:ec:ef:28:81:2d:72:ee:4b:
         9b:bd:c9:70:46:de:0d:2f:61:37:69:28:76:44:3b:44:d0:16:
         84:56:e8:7e:01:37:4c:14:74:aa:42:6e:67:06:a1:10:42:73:
         65:ff:9f:40:2c:9a:62:11:05:66:a9:5b:bb:ba:f9:7d:ec:7d:
         0f:43:e1:00:af:4b:81:cc:c9:e2:82:25:fd:ed:61:e4:a4:a7:
         43:79:c9:2f:1f:99:ff:5a:ec:99:f9:0b:ce:82:34:7c:73:2f:
         38:bc:a7:2b:22:53:22:fe:01:97:3e:7d:b9:e1:28:56:c2:b3:
         8b:7a:3e:aa:7b:fc:f3:9a:dc:fa:5e:72:09:e3:61:02:9f:02:
         57:7e:0e:74:4a:1b:3f:2b:8a:59:0a:8e:24:c6:2a:59:a0:85:
         c3:6e:da:6d:e6:c5:75:c2:dd:ce:1f:1d:de:be:80:3b:ef:98:
         db:31:18:9c:35:39:ef:73:c1:c4:c1:16:92:8d:59:1d:e3:07:
         fc:18:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:47:23 2026 by rpki-client