Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9818985f-9c2c-33ab-b78b-991734de29e1.roa
File:                     9818985f-9c2c-33ab-b78b-991734de29e1.roa (raw, json)
Hash identifier:          B+XlaBzd5rREKs14xZ20AgpNT5I0LedREPBqNeT3Tuk=
Subject key identifier:   8C:56:8E:8D:41:F3:88:12:68:0B:62:44:B5:92:30:1F:26:07:98:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E6FB590D77789F48DB580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9818985f-9c2c-33ab-b78b-991734de29e1.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        98.248.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:6f:b5:90:d7:77:89:f4:8d:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=df3aa71a-64ee-4346-842a-37b63a0c71c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:f8:7f:81:bb:e1:54:b9:c7:de:54:53:cb:
                    08:72:44:71:60:20:24:1f:d2:1d:65:cb:9b:2f:8c:
                    ad:d0:7e:5d:42:d1:65:13:98:a6:97:07:f3:f3:ae:
                    c3:ce:c5:c9:2f:dd:c0:19:b8:26:49:cc:bf:39:89:
                    fa:dc:bc:ce:56:63:63:b2:ea:e6:f5:ac:1a:6e:37:
                    55:d5:2b:e0:91:95:2a:24:04:40:c1:88:f5:92:7d:
                    ff:1a:24:f9:8c:c5:ad:fe:eb:bd:4b:8c:c0:29:a4:
                    09:4a:78:7f:d3:91:c5:73:cb:1c:dc:f2:dd:26:eb:
                    b9:b6:8f:94:f7:96:a2:2d:93:eb:e3:57:dc:59:35:
                    6c:80:2a:6f:cb:ef:c7:40:fa:e9:c0:75:7c:1a:ee:
                    3b:ff:19:e5:62:fa:44:53:39:0b:79:fb:31:b3:2a:
                    f3:9e:10:63:23:1f:3a:c2:66:43:c3:07:33:86:0a:
                    2c:f3:04:d5:30:33:de:56:f0:71:d0:1f:9a:fc:ea:
                    33:94:39:d7:ee:ae:bc:05:22:28:8e:f3:d7:c0:ab:
                    cc:de:49:5a:2a:b5:f9:f0:25:25:02:dc:d7:f0:66:
                    89:e3:43:ef:0c:d8:f5:55:34:f9:07:cf:0e:a2:f2:
                    fc:2d:bb:8b:63:4d:58:14:a8:6e:6b:ca:51:76:8a:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:56:8E:8D:41:F3:88:12:68:0B:62:44:B5:92:30:1F:26:07:98:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9818985f-9c2c-33ab-b78b-991734de29e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.248.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:e8:49:57:ed:53:5a:a0:ce:9c:fb:b8:27:a8:35:31:eb:b1:
         f5:2c:be:07:a4:9f:3e:5d:ac:9c:61:73:65:be:74:43:b8:d3:
         95:c9:e3:b7:8d:99:a6:02:7d:54:53:e8:3c:fb:6e:12:d3:62:
         7e:71:dd:59:d3:6a:b1:36:4a:d2:85:77:24:4c:ca:27:47:9b:
         0d:3c:15:74:62:3a:8a:41:e8:ad:53:83:52:f9:fe:f0:52:31:
         34:6e:20:61:e4:2e:c0:d8:8a:fc:b9:6f:9a:5b:07:a3:fb:de:
         03:7b:af:0c:bd:1c:79:f3:3b:77:91:a0:b5:a3:ce:ed:06:66:
         04:b4:46:ce:c6:15:a8:b6:a2:65:c7:17:cf:29:aa:02:8b:5c:
         d9:f3:c8:e4:80:f8:00:0b:b5:4f:78:35:db:fc:a3:a9:8b:39:
         69:59:29:af:c9:35:56:cd:59:2f:f3:f6:3c:84:c3:fe:54:3b:
         39:5c:d1:41:27:c6:8c:ee:b1:7a:01:fd:5b:7a:96:36:1f:c6:
         db:41:7d:43:75:28:8c:92:91:5c:ce:0a:c0:82:6c:d1:a5:9f:
         13:92:e1:b4:98:33:1d:9b:c8:70:1a:5e:61:4d:db:51:8a:3c:
         9d:cb:8f:4c:48:8c:6b:4c:43:aa:0f:8a:72:97:47:1d:f0:9e:
         e1:17:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:57:31 2026 by rpki-client