Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/938d7eaf-8ed2-3ea3-9f76-e8e3f89c8620.roa
File:                     938d7eaf-8ed2-3ea3-9f76-e8e3f89c8620.roa (raw, json)
Hash identifier:          gc4i1cdcIBBqnM8MtD2tfqh3i39PGHur5k3m9BaF2T0=
Subject key identifier:   A9:84:F4:DD:AA:4A:B4:77:77:5F:BC:AB:83:4A:68:CC:DB:3C:CF:B0
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D343A1CAF36037C8CA945C5C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/938d7eaf-8ed2-3ea3-9f76-e8e3f89c8620.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     55246
IP address blocks:        98.142.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1c:af:36:03:7c:8c:a9:45:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=73045515-4561-47eb-a3bf-ca650055bd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:2a:8b:27:a3:56:a0:d5:9a:68:08:39:4e:
                    9e:70:48:b9:73:3d:00:2b:57:5c:4b:ca:4f:6b:31:
                    1c:dd:91:d9:e1:69:fc:c1:5e:60:21:38:94:64:07:
                    35:df:2d:e5:76:1b:a4:7e:c5:f4:d2:71:79:b7:a1:
                    40:89:62:b3:54:47:68:8b:32:ca:ec:b9:bf:60:9b:
                    d8:85:25:4c:61:fa:af:48:9c:ef:51:cf:b5:ef:b5:
                    bc:65:f9:2c:4b:92:08:46:5b:32:42:ff:69:7d:29:
                    d1:10:d6:55:06:41:6c:77:e2:3e:90:6e:00:f4:ed:
                    b4:84:4c:05:68:52:b2:a0:aa:67:25:f6:42:d6:cd:
                    fd:ca:9c:01:6c:b8:c5:75:01:86:80:ca:09:86:0b:
                    b1:66:a1:b9:1f:11:ac:31:32:d5:13:45:09:a1:a6:
                    db:10:f6:5e:1c:a2:08:5b:78:7e:b0:9a:44:5e:37:
                    d7:9b:a4:a1:d8:af:5b:a9:28:49:e1:cd:2e:36:5d:
                    03:5a:0f:b6:aa:87:35:18:b4:a1:cc:05:55:5c:e8:
                    1b:bc:67:95:27:30:1c:08:c3:f6:10:2a:ad:34:90:
                    a4:66:8d:f1:08:85:7a:b4:ae:2e:79:11:0f:9f:3b:
                    12:23:7b:fd:88:96:1d:a2:b9:ec:24:70:00:57:f0:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:F4:DD:AA:4A:B4:77:77:5F:BC:AB:83:4A:68:CC:DB:3C:CF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/938d7eaf-8ed2-3ea3-9f76-e8e3f89c8620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:f6:9d:f3:c7:a1:3d:6f:8d:e5:63:5c:39:8c:6a:55:30:
         ff:cf:59:c8:44:d5:36:57:7a:bf:50:f4:f3:ec:24:93:b6:4d:
         09:a1:3a:d8:6a:9d:91:b4:bb:af:18:ec:05:b8:48:d1:86:43:
         46:0f:af:b4:d5:69:dd:51:b0:b2:bf:06:46:63:b0:b1:f3:bb:
         92:dc:bc:e8:09:e0:7d:47:b3:84:c0:0f:df:cd:07:24:bc:fa:
         fd:1e:f1:44:6c:31:f5:f0:49:2c:48:21:23:47:36:0d:77:da:
         9e:b3:e9:69:a9:e0:36:33:0a:78:cf:41:e9:99:db:11:bb:31:
         9f:de:61:45:15:7f:54:04:9a:55:21:0d:57:35:42:6a:89:79:
         f5:5c:cd:df:76:f0:c8:de:a9:69:0c:51:c6:e4:68:a0:53:26:
         6c:80:a6:9f:9b:45:a1:54:52:83:9d:8a:0e:ce:62:b2:09:1e:
         43:d6:60:89:e7:72:24:4b:55:22:0d:0f:ca:c1:ba:82:d1:95:
         70:27:02:68:35:90:01:73:5f:51:15:a3:ef:fa:c4:99:bd:71:
         b2:a7:40:5f:e2:ea:cf:3c:0b:da:46:d5:f8:75:94:5c:59:7c:
         0f:2e:ac:27:6c:07:91:7b:02:6d:c5:fd:cf:2f:39:c7:d2:95:
         22:ed:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:15 2026 by rpki-client