Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee2eecef-c82e-3127-9073-2aad0f8773c8.roa
File:                     ee2eecef-c82e-3127-9073-2aad0f8773c8.roa (raw, json)
Hash identifier:          7AVNQ7DogmJ33dbDqmZGswLsOM4hBdPytNfJ3HwvpWk=
Subject key identifier:   8A:D8:99:39:81:51:E7:AB:39:CE:F2:64:53:FC:1A:85:87:29:B4:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863FD1A5F84BE156E896600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee2eecef-c82e-3127-9073-2aad0f8773c8.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        98.209.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:fd:1a:5f:84:be:15:6e:89:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=d1d98008-1c5d-4fcb-807f-223a31a3ca0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:30:b8:47:9c:2b:b3:e9:a7:c9:eb:55:ad:
                    d3:dc:24:98:77:05:c8:dc:39:cb:b7:d6:19:67:b3:
                    5a:69:ae:0c:d6:67:f6:d6:d7:5c:7d:d2:6a:8d:77:
                    95:34:8d:e7:0f:f7:ef:26:15:b5:d6:c1:f7:0c:d1:
                    43:72:0f:a9:3f:80:c4:58:e2:50:93:80:97:34:0a:
                    c7:dd:a0:5c:4d:fd:22:ae:9a:f1:e7:9c:37:02:93:
                    6e:22:94:ba:e6:94:82:4d:53:9b:8e:da:b6:fa:2e:
                    10:82:2e:98:11:d4:1f:a9:09:98:bf:98:e9:81:ca:
                    36:bd:ec:4c:4c:fe:13:b6:c4:b3:5f:dc:6e:52:ef:
                    48:96:74:b6:e5:62:96:b5:5a:9c:0b:5f:fb:6b:db:
                    00:d7:8f:8c:94:ee:c7:7f:cd:c4:ef:d7:c4:dc:ba:
                    b4:c4:24:59:66:49:9f:5a:e1:43:8c:e0:d3:95:5e:
                    7c:8e:7c:d1:f1:e7:2e:bd:8c:8f:b5:c9:6a:d8:8c:
                    6c:5d:6f:4a:a8:85:89:72:2b:e4:3f:5b:c8:2f:88:
                    f7:2f:e7:f0:31:7c:47:ed:52:83:b6:4d:55:b2:dc:
                    08:c1:0e:56:f2:24:13:fa:c7:ad:6b:a1:a0:95:14:
                    fe:4d:7a:19:11:a3:97:06:40:66:20:7f:34:eb:db:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:99:39:81:51:E7:AB:39:CE:F2:64:53:FC:1A:85:87:29:B4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee2eecef-c82e-3127-9073-2aad0f8773c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.209.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:2e:e7:e8:67:96:1f:2e:1c:eb:21:25:d3:8d:c5:e6:da:
         d5:5f:d5:93:c8:78:86:d6:19:e1:6b:e3:cd:06:ef:14:0c:44:
         8e:72:3c:c3:6d:ee:ef:fd:16:ed:91:54:49:a0:e5:06:90:2b:
         f3:56:3f:7f:1a:0c:03:bf:6b:dd:71:f3:d1:4f:2a:47:f5:03:
         af:ae:78:e5:3d:32:1d:e6:f2:01:d0:c9:28:63:3b:f2:f5:9e:
         74:2e:f5:0f:5a:1f:92:41:33:59:56:42:66:75:b8:c4:97:48:
         62:4c:cc:af:10:b3:52:4a:0e:ca:ba:bf:fe:75:af:a5:98:55:
         75:f3:07:ce:ba:0b:7d:63:cf:5b:24:67:a8:a0:e1:98:7b:13:
         cc:72:8c:bb:9a:05:c5:84:20:41:50:d9:9d:2d:87:d5:7a:67:
         c4:90:b5:27:8e:c4:f6:9d:f0:9e:dc:93:44:b4:82:c4:60:78:
         7f:35:43:87:54:29:3c:fd:9b:5b:0d:98:fb:fa:d8:18:36:d0:
         78:b2:97:0a:e9:e9:43:83:4a:69:12:3a:c4:38:af:f6:69:9d:
         51:79:53:4a:1d:77:04:24:db:83:e9:d2:a3:23:1d:96:cd:62:
         ba:18:c1:47:14:ad:3c:18:89:78:d6:49:99:b5:bb:45:70:65:
         14:53:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:43:57 2026 by rpki-client