Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aee84e07-38dd-379c-af51-fab968e634fa.roa
File:                     aee84e07-38dd-379c-af51-fab968e634fa.roa (raw, json)
Hash identifier:          xpBDjyFzejQt47WkLxIRT8qVRpwVGmyit79RJaakqvg=
Subject key identifier:   D8:DE:97:E1:76:60:6D:C5:39:7B:85:9B:04:73:EC:8F:48:4F:F1:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862DD17BE9D866D36E08F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aee84e07-38dd-379c-af51-fab968e634fa.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        98.250.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:dd:17:be:9d:86:6d:36:e0:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=a8eea188-ffad-49fd-b270-d6bba07f7ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ad:14:12:ba:db:5b:26:a0:50:5c:07:4f:4d:
                    fd:03:d8:bf:4f:1f:e9:3d:42:5d:14:5b:2d:44:8e:
                    98:ae:6a:4e:0e:22:4a:d2:f9:01:09:ba:4b:89:6d:
                    b9:b2:6b:60:05:a7:89:bd:25:88:09:83:63:b5:12:
                    7d:11:06:91:d2:34:a0:6a:8a:87:65:74:42:93:77:
                    d3:61:05:ad:ad:74:69:3e:38:05:d7:12:5a:21:5c:
                    98:c8:80:01:7a:51:4f:dd:a8:3e:a7:c2:c9:ab:69:
                    51:43:a1:38:6c:15:de:22:d8:3d:19:ec:55:92:cc:
                    e5:07:ce:0c:69:ee:74:93:50:61:e9:75:09:aa:aa:
                    66:fe:63:9a:38:48:27:bf:54:c3:e3:ad:25:a5:36:
                    42:f1:df:2d:20:82:c7:15:9f:6e:6b:97:72:ce:f3:
                    12:c8:0d:d4:83:fc:3a:a8:65:31:22:13:be:8a:fd:
                    df:61:5d:d8:a8:a8:3b:01:e2:f3:a0:49:be:6d:cb:
                    73:2c:68:02:5e:da:03:d5:de:af:64:71:85:cf:cc:
                    1a:ec:13:6e:9e:d7:e5:04:2c:35:33:c5:55:05:04:
                    4f:7c:9a:6e:01:3f:db:9a:4a:7b:06:d6:f6:f2:1f:
                    b5:0e:2f:75:d8:eb:23:7a:0a:42:98:a3:b6:6d:f8:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DE:97:E1:76:60:6D:C5:39:7B:85:9B:04:73:EC:8F:48:4F:F1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aee84e07-38dd-379c-af51-fab968e634fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:61:94:1d:2c:05:07:54:5c:b3:b8:da:f1:57:48:2e:e4:
         b2:23:43:bf:1d:3c:c5:85:8f:c5:36:11:73:96:ca:d6:c2:57:
         7c:b0:da:9f:8a:66:35:20:ba:b7:6c:ea:a3:e7:89:cb:7a:43:
         8a:20:bd:41:c3:b3:f2:d7:1f:24:b6:7b:75:74:91:3a:00:18:
         a9:a4:19:c0:4f:4d:33:87:66:8f:01:a6:ff:09:f0:68:3a:49:
         72:28:ce:0a:02:28:a9:68:8d:7b:79:e6:c1:24:21:4b:5c:c5:
         07:39:36:16:ef:6d:c9:a6:42:4f:a4:cb:26:3f:79:8e:21:62:
         29:db:7b:e0:e0:8f:80:39:90:9a:63:f6:c8:d6:d2:f5:2e:71:
         15:27:e5:74:e8:97:a9:31:6b:ed:8f:e4:03:a6:da:fa:fe:dd:
         3e:62:25:8b:32:43:1a:64:34:63:4d:ed:d9:ab:58:bd:73:e1:
         53:95:15:e2:7c:0b:0b:83:a4:3d:54:2d:19:36:36:97:ef:1f:
         17:b7:51:2c:d5:e2:c2:3c:f2:90:80:7d:3f:2e:51:8e:15:54:
         3a:a1:f9:a4:87:eb:3a:4b:c7:bd:e6:f5:fc:c2:66:c6:38:81:
         ec:48:f8:72:33:f7:7a:b8:38:80:50:81:df:17:9b:52:55:cb:
         ab:0e:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:12:39 2026 by rpki-client