Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237691e1-217b-326a-8b4d-25c9b1ed02df.roa
File:                     237691e1-217b-326a-8b4d-25c9b1ed02df.roa (raw, json)
Hash identifier:          dOuX1ZSKwjN6mMceh52DisrHkcrwo38Sym2PT44Pj9Y=
Subject key identifier:   1D:14:A0:4F:DA:20:F6:7B:2B:E3:2A:16:92:38:3D:36:3A:EC:DC:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61454F165223DF13CC777500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237691e1-217b-326a-8b4d-25c9b1ed02df.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        98.252.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:4f:16:52:23:df:13:cc:77:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=4af330ba-be8d-47c8-be84-27cb3cc0ef69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:6b:7e:fa:fe:f4:7e:a3:30:f5:27:98:c0:
                    1b:6e:02:6e:a0:68:10:49:33:be:4a:02:07:9e:17:
                    68:a0:67:89:6b:ac:72:cd:ca:dd:d2:5b:27:1a:13:
                    d7:b1:a2:3b:0f:51:f6:82:17:29:a9:22:66:55:18:
                    a0:cd:74:a9:ba:24:b9:3d:8c:4a:96:50:25:0d:8e:
                    0b:d1:94:e0:fb:16:b1:54:dd:15:8a:1f:b6:16:e5:
                    83:59:60:29:ed:23:b1:8d:7e:f6:f4:1c:5e:39:00:
                    0b:18:3f:a5:86:7a:40:d6:d6:84:68:2e:fc:e0:63:
                    fb:95:09:e9:05:ae:69:4c:5b:b6:4e:58:1f:92:cf:
                    6c:25:62:9f:9d:31:cd:70:f7:b6:5f:27:d8:f7:3d:
                    cc:42:93:41:16:bb:e7:66:bc:be:90:e4:93:8d:07:
                    f7:30:0c:4c:41:ec:16:80:b5:20:2c:7a:0a:fa:73:
                    97:e4:e4:0b:0b:46:ea:b8:8c:74:da:a0:12:91:0e:
                    d3:9e:7b:4a:3e:ea:45:9a:6c:a5:44:83:fc:13:72:
                    a5:58:4d:14:28:68:be:c7:0c:9d:9f:7f:e5:6b:79:
                    6a:ee:44:6e:73:f3:13:d6:16:4e:97:4e:35:63:37:
                    15:69:81:bc:eb:08:d9:03:e3:8c:d2:41:ed:d7:35:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:A0:4F:DA:20:F6:7B:2B:E3:2A:16:92:38:3D:36:3A:EC:DC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237691e1-217b-326a-8b4d-25c9b1ed02df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:43:08:a6:9e:24:c3:24:fc:10:6b:59:e7:c9:00:24:e8:
         4a:4f:b1:aa:b5:4b:ba:c4:61:cd:c0:2c:1e:22:bf:ae:83:8a:
         58:4b:9b:f7:62:6b:16:bf:e5:f3:e0:9e:b9:97:8a:ca:92:71:
         59:41:00:df:77:cd:00:cc:94:a4:91:62:00:00:a9:30:56:1d:
         fc:8d:d8:f7:17:b3:ed:d1:c2:20:a0:37:57:e8:52:5b:1b:98:
         c9:af:be:c5:20:15:e2:76:5a:ab:79:3a:45:45:5d:49:45:9b:
         db:82:17:b5:96:c6:34:d7:41:24:d5:85:7c:76:c7:19:7d:c0:
         f6:24:02:fc:c9:fa:90:af:0e:9d:82:c2:f6:ab:44:b6:ee:be:
         04:85:db:95:f0:ac:64:17:50:13:70:02:3b:4a:22:19:0a:2c:
         96:2e:d1:dd:0d:5b:c4:54:71:9b:7b:cd:0e:ea:1f:1d:14:61:
         ff:7b:ac:57:59:cc:ae:8e:26:ee:7b:d9:63:ab:5a:9e:a6:1d:
         84:17:ea:be:f8:9e:76:11:91:ee:9a:48:37:d8:dc:51:a6:36:
         18:f8:5e:9f:bd:b6:93:f8:4d:4a:a3:38:56:04:fe:9d:d4:94:
         a2:5a:b7:15:12:bf:1d:58:9b:f4:67:fb:8e:df:94:d2:74:e5:
         4b:74:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:35:20 2026 by rpki-client