Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b601d3d-e29d-3a4d-b170-95bc65fcbc84.roa
File:                     4b601d3d-e29d-3a4d-b170-95bc65fcbc84.roa (raw, json)
Hash identifier:          Hv7k6ZciMzmCaNLNcJCG534BpnJurvR0Q+E8WITQoLc=
Subject key identifier:   0B:A1:9B:4C:07:E7:15:E5:C9:8A:84:40:5C:42:35:5F:D5:CF:2F:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED864645398383860A055B180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b601d3d-e29d-3a4d-b170-95bc65fcbc84.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.34.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:64:53:98:38:38:60:a0:55:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=0732d90f-f366-4b71-8fac-52b5ec3861ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:1c:3b:fd:d7:51:ac:ad:5d:e8:ff:1e:23:
                    4c:56:52:90:9c:a0:56:ce:81:bf:fc:44:05:ef:24:
                    5c:41:8e:12:42:0c:61:a7:99:ef:23:83:70:aa:21:
                    6c:3a:9b:9f:31:14:4c:02:9b:a2:9b:0f:28:2a:b9:
                    ae:89:37:6f:a0:9c:17:3f:0d:a0:af:8d:30:de:17:
                    a1:83:16:84:1b:bb:fd:21:1b:37:e1:13:bb:d7:b5:
                    1e:59:c3:ec:cd:2b:16:7d:0b:04:df:a2:a2:fc:a1:
                    f5:4b:69:b8:7f:16:5d:39:25:76:c0:3d:1c:9e:a8:
                    a7:d9:61:37:31:ab:83:42:5b:91:38:dc:4e:6b:23:
                    f6:d8:8e:3f:8e:45:32:86:12:ce:24:d1:cc:31:75:
                    53:97:e8:bc:ee:6c:fb:b4:6f:62:70:6f:5d:a9:36:
                    af:e9:ee:10:d6:79:07:37:ab:03:02:78:96:44:e0:
                    da:e8:30:79:0b:72:6c:4b:dc:a1:2f:b0:cf:d4:c8:
                    64:bf:e3:ec:25:a0:42:a1:18:94:47:e7:66:3e:03:
                    56:ec:51:2a:d4:25:1f:68:e7:84:79:eb:74:e0:68:
                    87:3c:bc:51:25:1b:5c:3c:24:a8:f6:fe:29:81:b1:
                    e1:c2:aa:4b:74:11:2a:11:94:71:1b:2a:be:08:4f:
                    2c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:9B:4C:07:E7:15:E5:C9:8A:84:40:5C:42:35:5F:D5:CF:2F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b601d3d-e29d-3a4d-b170-95bc65fcbc84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:37:f7:7e:1b:4a:45:b8:b7:7f:26:37:4b:7c:a7:91:d5:
         9d:2e:0f:49:9e:cb:e9:ed:5c:c6:50:17:74:aa:ca:84:82:2a:
         15:33:c6:8c:23:df:3c:5e:65:19:55:12:34:cf:8e:61:1e:1d:
         40:64:31:1f:b4:6a:2e:7a:4e:4b:3e:3f:ce:0c:70:1a:1e:20:
         f5:af:82:2b:00:45:79:83:03:96:e8:08:dd:87:1f:57:ec:7f:
         b0:db:5d:77:dc:16:65:7a:4b:6d:83:4a:9e:8d:73:fd:27:44:
         77:23:d9:92:17:44:7e:d4:6c:23:7c:e1:70:30:a7:d6:cb:ba:
         8d:6b:dc:7e:38:e4:12:51:3c:4b:6e:54:ba:5a:6b:34:d8:bd:
         6c:9a:c5:2c:ad:63:05:6d:11:d4:b2:7a:bc:e4:17:d2:1d:8a:
         74:45:98:3f:4a:28:22:02:01:26:50:30:08:cf:d1:9d:d1:8b:
         82:f4:aa:fe:b7:be:25:c7:cb:f6:73:ca:8c:e5:62:ff:cc:ec:
         b9:bc:14:ff:bc:fd:6f:7b:77:f1:ba:b2:21:10:b6:e7:20:a5:
         4d:bc:36:21:57:85:76:48:ad:1b:6c:69:b2:5a:eb:c8:04:89:
         56:0b:d4:a5:12:05:2d:d9:73:ee:fa:9b:e8:24:f1:8d:e3:16:
         b2:e2:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:42:09 2026 by rpki-client