Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fc385e2-b218-32b0-be21-df26803d5199.roa
File:                     6fc385e2-b218-32b0-be21-df26803d5199.roa (raw, json)
Hash identifier:          0V3tfEMlIMgLQz+9bipck7H+rcex3QvgD7eM2MVX4hQ=
Subject key identifier:   FF:99:61:25:62:49:F6:7D:FB:84:57:07:C3:AE:43:0B:81:A0:79:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A82BD9554F051382102FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fc385e2-b218-32b0-be21-df26803d5199.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        98.251.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:2b:d9:55:4f:05:13:82:10:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=97c23580-dc06-4f13-ae9d-d1bcc3cf986e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:62:54:b3:be:e8:12:dd:83:7d:4d:4c:a8:
                    c9:3c:d3:23:2e:e5:5e:2f:ca:2f:5a:ed:f6:f8:03:
                    3d:c5:62:a9:b8:5e:71:5c:47:d6:cb:d5:51:21:aa:
                    00:7b:32:c7:ba:df:d7:2e:b9:63:ba:c8:b2:f3:88:
                    35:63:4c:7f:a8:aa:cf:1d:69:f3:11:19:db:f0:3a:
                    d3:be:49:7a:fe:8d:c0:2a:07:0b:2d:71:95:df:03:
                    30:c6:1f:ac:81:dc:6e:e1:6e:17:d3:0f:59:fd:41:
                    c5:1e:af:d9:9e:60:4c:63:c1:46:7a:b6:3b:3e:38:
                    f2:ea:04:ad:8d:6c:c8:df:1a:f4:8d:4d:88:1a:32:
                    1d:3d:70:8d:fb:5b:90:4a:5d:a6:a4:fe:59:fb:d3:
                    8d:b8:01:d8:52:04:fc:c3:47:1a:b1:77:a3:0b:94:
                    3d:95:2c:82:65:85:a4:2e:55:c4:0c:d0:8d:d4:d7:
                    83:83:95:42:80:3c:fa:da:a1:8e:28:6a:60:17:bc:
                    ec:66:00:f5:d9:e2:09:3f:65:aa:06:9f:a8:bf:1d:
                    b6:93:15:9b:47:29:a2:95:a3:0b:6d:c4:05:8c:cf:
                    21:95:dc:d6:8f:73:85:d4:31:24:70:50:1f:b7:7f:
                    8e:68:67:9e:cd:09:cb:80:d7:4a:1d:47:6a:2b:27:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:61:25:62:49:F6:7D:FB:84:57:07:C3:AE:43:0B:81:A0:79:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fc385e2-b218-32b0-be21-df26803d5199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:c5:d8:08:6b:55:6a:82:83:80:5e:e1:c4:72:7b:40:e9:
         16:bf:ce:17:b7:36:71:15:4d:f3:78:3b:cf:4b:2a:30:95:2e:
         05:af:70:38:7a:41:8d:88:60:9e:d4:2d:92:0a:ac:db:df:1d:
         b9:03:90:e1:6a:7c:d6:af:f1:c8:c1:d9:95:9c:43:b5:2e:90:
         ac:f3:49:3c:9c:a6:2d:df:82:ca:7e:2f:1d:44:72:d1:36:39:
         8a:c6:19:4e:44:ee:63:42:bf:92:8d:a1:19:0e:4c:70:71:e8:
         d4:9f:e3:14:68:c5:b0:2c:ad:37:27:22:30:0f:98:1c:3c:d3:
         ed:04:d7:c9:1c:01:27:ce:ac:b5:1b:2a:ff:1c:a3:1e:bc:58:
         a8:6f:70:c5:cd:b8:d4:44:ba:62:a4:5d:08:75:22:a2:0b:8c:
         f4:df:8a:39:82:1d:b8:09:21:5d:f2:22:e0:8e:f3:1c:7b:38:
         f6:d3:be:db:c4:14:a7:9c:b4:7a:c9:51:33:ac:1d:4e:4a:ed:
         a1:e1:6e:18:99:50:08:fe:72:5e:8a:0a:16:11:f6:3b:11:cd:
         7d:23:be:2a:a4:cc:5f:17:82:49:fc:1e:8a:de:9e:f4:96:13:
         a0:ba:9e:02:ea:fb:5a:2d:19:1e:e2:de:0d:0d:e1:90:1c:5e:
         33:c3:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:49:43 2026 by rpki-client