Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84a01fa2-dfa8-3eab-bc27-c771d8ca18d8.roa
File:                     84a01fa2-dfa8-3eab-bc27-c771d8ca18d8.roa (raw, json)
Hash identifier:          enDkhxvxdjuS+LQ8sJqxcQ20jtt3SkbAB5wifj9lFJU=
Subject key identifier:   7B:1D:23:41:F3:F2:42:44:AD:86:5F:07:1F:ED:44:9C:4D:41:70:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D785D56699C5C38C41E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84a01fa2-dfa8-3eab-bc27-c771d8ca18d8.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        98.207.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:78:5d:56:69:9c:5c:38:c4:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d72e7e54-820d-40f1-ad68-40a001e1d4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:65:8a:bb:d8:27:1d:89:58:3a:65:41:eb:
                    9c:66:7a:e6:11:05:dd:d3:05:1b:18:2a:e6:ed:2f:
                    d1:e6:0b:08:1d:c8:43:2b:23:19:e8:7e:dc:48:b8:
                    3c:f8:b7:83:e9:0f:e4:1c:ee:09:a3:5c:f6:e6:c3:
                    b2:eb:32:4f:b9:4b:46:9b:74:5d:62:f0:da:fb:94:
                    90:2e:c3:ec:58:e4:ed:c8:1a:5b:e8:74:70:36:ef:
                    a9:cd:83:0f:52:5e:48:07:95:e6:e4:00:32:62:15:
                    2d:92:99:19:07:24:c5:e2:97:ef:ae:11:48:ba:55:
                    8a:20:d6:5e:c0:4e:59:e6:b9:d7:bf:04:ef:53:40:
                    e8:52:5a:c5:ed:af:bd:ca:db:e6:92:a4:b6:52:61:
                    01:72:cd:1b:ef:65:1e:e8:c0:c8:f7:40:b4:9b:56:
                    db:e8:6e:b3:0a:3f:4b:b5:9e:c2:93:fa:f8:28:20:
                    d2:46:66:b9:c2:1d:e7:ab:be:6d:31:e6:9e:97:43:
                    af:f4:d9:b4:8d:d6:d6:57:0e:03:78:7f:91:ac:8f:
                    d3:56:f9:6a:d3:c9:b2:50:23:db:e2:f6:4b:af:68:
                    22:c3:f6:69:42:79:aa:61:7d:6b:c7:8d:7d:9f:fa:
                    56:47:0c:f8:49:d9:a4:8f:1f:4f:f5:dc:57:58:bd:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:23:41:F3:F2:42:44:AD:86:5F:07:1F:ED:44:9C:4D:41:70:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84a01fa2-dfa8-3eab-bc27-c771d8ca18d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.207.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:bb:8e:3d:41:1e:ce:c8:cc:89:83:03:5c:0c:05:80:7b:
         0b:56:80:9f:b6:f8:d2:c6:9a:6a:74:0a:63:96:de:18:98:71:
         68:0c:3c:8e:b9:50:b8:39:bc:6f:ec:c8:62:1e:73:46:14:d5:
         55:44:21:44:98:ce:b4:60:f9:58:ac:7c:ed:a1:9c:d6:f2:f4:
         16:cd:c4:bb:bb:c8:58:96:8d:9a:d5:01:18:4f:ac:17:05:1e:
         cc:64:50:61:cf:f3:b0:1f:f3:50:77:f9:f5:49:92:b9:2b:92:
         a4:10:34:4d:d5:f1:59:e9:90:ef:7c:55:da:ac:e3:77:f2:75:
         d0:1e:fc:48:c1:f2:d1:24:d9:e9:d5:f1:5a:c7:e1:11:2e:c1:
         e8:56:10:7a:5a:71:91:f4:a7:6d:ff:2c:6f:54:b7:e3:48:89:
         1c:01:4b:1f:a9:10:b2:7e:db:77:d8:cc:06:ae:6e:c7:d8:98:
         bd:5c:37:4c:c4:ea:d4:3b:01:b7:fb:5f:ec:aa:cd:fe:80:c7:
         64:70:d9:0c:65:05:52:3c:c0:88:fa:b9:45:03:09:53:2d:4b:
         53:6a:a3:33:eb:a9:78:ae:53:07:2e:6d:84:06:4c:bd:33:b9:
         79:67:f8:6a:c2:04:73:0e:38:2e:f9:a5:30:79:a5:73:d7:c2:
         c1:09:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:42:26 2026 by rpki-client