Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8e476a3-d6ec-3d40-8a3d-e293f8bca260.roa
File:                     e8e476a3-d6ec-3d40-8a3d-e293f8bca260.roa (raw, json)
Hash identifier:          MyIRXZPhYkL+g5wUUm00Z8U+JdgzvHMRZZKkehXBn5k=
Subject key identifier:   5F:5E:CC:1B:4B:CE:C4:FF:F1:99:67:3C:30:B5:DA:E9:4C:3C:91:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7D9602316F61588A82CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8e476a3-d6ec-3d40-8a3d-e293f8bca260.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        98.252.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:d9:60:23:16:f6:15:88:a8:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=12152619-936c-457f-8777-a7631ba2296d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:49:3c:32:c2:82:e4:e0:6e:db:f1:14:af:
                    b9:cf:99:17:23:28:d2:1b:cf:ee:8a:7d:6d:7c:87:
                    28:0e:e9:a6:82:be:0c:4d:dc:a4:8d:59:43:85:b8:
                    dc:9b:63:f3:df:6c:51:9d:3f:2e:89:c8:dc:52:5e:
                    48:42:2e:4a:ee:3a:17:d2:ff:02:f8:7b:77:a4:c3:
                    ae:a3:41:8c:68:da:cc:fa:57:84:ae:f9:e0:0e:35:
                    c4:02:e1:9a:75:fd:9e:19:c4:9e:39:e3:11:fe:a0:
                    5e:5c:73:27:b8:de:80:a9:cc:48:d8:0b:2c:7b:83:
                    0d:c3:1b:d7:c4:c3:91:f0:f2:4c:cc:2c:2a:94:4c:
                    9c:24:d1:0c:c3:70:c2:08:23:70:f9:c7:f3:65:0e:
                    bc:d8:6b:fb:3b:06:4c:3a:32:11:a5:b7:97:12:d2:
                    48:78:1c:7b:06:28:46:33:ca:85:96:30:6f:18:dc:
                    52:16:4a:7d:9d:77:4f:96:20:36:c0:7f:f3:53:3a:
                    cf:aa:61:51:03:39:94:d2:a2:11:dc:fd:5b:58:5b:
                    6e:6c:f2:6f:ce:01:24:a3:68:7a:a2:80:cb:f8:a5:
                    13:d3:4e:75:bf:9d:9a:2c:24:e5:26:e5:62:e3:4e:
                    6c:4a:4a:bd:b5:78:2f:0b:79:54:88:cb:6e:ae:24:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:CC:1B:4B:CE:C4:FF:F1:99:67:3C:30:B5:DA:E9:4C:3C:91:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8e476a3-d6ec-3d40-8a3d-e293f8bca260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:72:91:8f:09:e2:43:eb:00:ea:b2:1f:e6:c3:e9:da:22:
         dc:c2:f9:79:d7:49:e0:36:4b:37:3a:3f:48:00:0d:24:e8:4e:
         e9:6c:3f:3c:90:08:b2:2e:81:e0:53:2a:19:68:93:d0:27:0c:
         b5:62:7e:41:e6:07:94:82:81:1e:a9:f2:4c:ba:88:99:d3:3f:
         52:ca:f6:d8:ee:a6:5c:ad:45:9d:15:f1:ba:be:36:0b:93:98:
         3e:78:fa:ee:e6:0d:bb:23:d2:a1:41:f1:32:81:87:75:e9:7a:
         12:3a:9f:7e:a4:d6:8e:89:2a:06:43:ed:23:37:66:40:40:75:
         ea:d8:b8:4a:b1:2e:ed:a2:70:16:1e:51:8b:c7:bc:12:a8:0c:
         88:23:ad:01:59:c6:56:15:b4:9d:5a:79:0c:9c:38:95:d4:05:
         25:31:ed:7b:06:78:4d:e4:fd:85:b4:1c:62:20:5c:da:7f:6d:
         8a:7f:14:e4:90:94:bd:3f:8f:a5:71:8d:d8:15:da:18:1d:20:
         89:48:2c:b5:45:ca:f7:d1:e4:38:92:5d:23:69:ca:7d:7f:42:
         8a:be:c3:b6:c1:b4:77:50:11:fe:ba:5a:6c:37:80:dd:7b:a2:
         47:72:c4:22:e9:b5:d5:9a:d9:ec:b9:07:72:a7:cf:52:d5:12:
         89:be:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:43:03 2026 by rpki-client