Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6110f40f-c0a2-3b30-a901-f84714b08d89.roa
File:                     6110f40f-c0a2-3b30-a901-f84714b08d89.roa (raw, json)
Hash identifier:          3eC/nMxHbONddvBj3rEVVZKmfc+7PY++9GAvg4DPKfc=
Subject key identifier:   C5:2F:95:2B:12:70:E7:39:86:E4:A9:38:F3:D6:6A:2B:1D:E4:44:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4987BC70CC6BFF5BB6510E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6110f40f-c0a2-3b30-a901-f84714b08d89.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        98.220.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:bc:70:cc:6b:ff:5b:b6:51:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a7de9fff-f2e8-4e52-92f4-0edfe8f8e59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:18:68:ac:fc:53:fc:2d:15:b9:e1:45:3b:
                    16:74:08:4b:ce:c3:42:a5:56:7c:b8:b5:22:45:2f:
                    26:55:e9:ab:12:61:24:77:3c:17:3c:ca:5f:09:97:
                    df:c3:13:58:ac:76:ee:89:79:d7:88:82:c2:79:f3:
                    3c:f1:18:fb:47:ff:ab:03:a1:4c:bf:fd:56:88:d8:
                    7d:4d:05:66:85:3f:69:30:91:55:a2:d1:c8:96:fb:
                    a1:a5:d3:79:63:75:23:74:d0:69:e9:b5:fb:ea:27:
                    b8:62:5d:1b:a1:13:c4:68:14:c9:fa:cd:64:49:87:
                    49:0a:a7:2e:cf:cb:35:e5:51:58:f9:57:ac:bd:de:
                    8a:d7:0e:ae:bc:f1:57:c4:22:38:f8:30:a5:da:53:
                    d3:67:de:b0:c6:a8:82:d0:7e:d0:96:99:67:0f:0e:
                    1f:6d:90:40:d3:fb:f3:c9:85:70:33:13:b8:2f:e9:
                    8b:e6:51:95:70:eb:b6:1e:78:ed:f7:b8:24:cf:08:
                    30:74:b6:2e:9e:3c:d8:cf:03:de:dd:24:ac:69:b3:
                    96:3a:b3:cf:b7:75:f8:49:ce:71:ed:82:69:24:79:
                    54:8c:7e:bd:b1:92:de:15:2c:d0:38:78:c0:c6:8c:
                    24:2f:a3:d6:d3:13:98:a5:67:30:c6:93:04:f0:3d:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2F:95:2B:12:70:E7:39:86:E4:A9:38:F3:D6:6A:2B:1D:E4:44:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6110f40f-c0a2-3b30-a901-f84714b08d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.220.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:f9:39:67:6b:ed:fd:01:3f:5e:64:8f:63:ae:2c:ad:2b:
         42:97:03:d6:38:e2:9b:9a:24:57:3f:32:ee:0c:38:e5:25:54:
         6e:f1:01:07:e3:df:c0:d4:da:8d:a1:36:28:bb:38:84:07:bb:
         62:99:37:2a:85:91:00:4d:6c:0c:2c:89:6c:12:64:1c:02:0a:
         6c:39:7e:dc:a7:18:20:f7:a6:d4:3b:6c:8b:20:82:af:98:d7:
         a4:31:a0:71:da:84:9e:29:50:9c:05:3f:5d:89:75:1d:02:9b:
         b8:bd:3f:dc:3e:69:3a:40:61:74:19:a7:6a:9e:90:71:8a:85:
         98:51:63:48:d1:24:32:92:29:d9:21:75:33:0c:fd:90:33:d7:
         51:69:c3:e1:21:d7:c6:02:99:57:ec:6f:11:a4:1c:e0:5f:af:
         ec:e7:67:ce:84:6e:7e:f6:e4:59:4b:69:75:05:b1:35:25:85:
         a4:86:db:0b:ee:cd:a3:64:c0:3c:9a:5b:36:69:4d:8e:27:07:
         c3:1f:76:32:a6:bc:4e:79:4c:02:e1:9a:e9:a6:10:dc:25:d1:
         a0:99:83:91:94:f3:e3:3a:bc:9b:4e:e6:54:e5:91:df:10:2d:
         55:ad:6c:6f:f6:3c:21:af:ec:8f:ea:1d:14:c7:d9:54:56:6e:
         d7:7f:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:19:54 2026 by rpki-client