Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa
File:                     8c42da20-6726-3d1a-85d1-a6d776837620.roa (raw, json)
Hash identifier:          LDOh1z2Ezwi9QYURqWAvMvC5///huZFiQxSi7bSix9w=
Subject key identifier:   5D:52:03:47:31:1A:10:AD:8E:2E:88:B9:0A:41:96:99:EC:88:3D:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E623FF6984C063CC19E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        98.234.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:62:3f:f6:98:4c:06:3c:c1:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=2d26b7f8-7b3a-4106-b1be-4a0e54d2adb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:9f:70:f9:a5:ef:b3:f0:0f:8b:86:de:93:
                    ae:c7:7e:db:15:e8:af:65:b5:4d:76:1e:95:bc:e2:
                    5b:9f:ac:50:1f:bb:df:c2:b5:d0:de:9b:55:cb:f2:
                    06:85:75:c5:83:f2:ff:26:b5:51:fe:fd:4f:c9:31:
                    43:93:3a:7a:a7:ff:15:76:e0:db:b3:98:f9:0c:17:
                    d2:35:65:4c:85:56:d7:48:86:5a:da:a3:d8:e8:3d:
                    04:27:d8:a0:83:c0:a8:4f:24:22:41:5d:fe:0b:c2:
                    71:de:4d:df:7a:df:45:4b:1d:2c:63:3d:62:c0:58:
                    cc:96:d5:69:18:9e:30:ee:88:86:2d:79:59:8d:d8:
                    3b:23:ea:cf:97:7f:f8:cc:94:34:da:68:fe:90:70:
                    28:74:50:a0:e8:2b:11:7d:29:f1:2b:1b:2b:43:8e:
                    44:34:12:dd:3d:a8:c7:06:4e:58:d3:f0:89:d6:50:
                    1c:f3:ac:a5:1b:1e:a0:13:91:72:74:d0:35:f6:de:
                    7c:c5:ba:6c:d5:01:d0:b9:ce:f6:0d:ad:7a:6b:dc:
                    40:db:cb:53:7f:31:06:8b:fd:78:d7:36:ec:af:ed:
                    39:c7:4c:9c:56:93:d8:9d:2b:13:f5:e8:9a:18:6e:
                    05:47:a2:2c:7b:b0:8e:40:31:54:ac:7a:c9:0e:b0:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:52:03:47:31:1A:10:AD:8E:2E:88:B9:0A:41:96:99:EC:88:3D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.234.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:b5:a0:2b:9f:f8:60:f1:63:38:7f:4c:09:79:60:73:ef:b0:
         fa:26:69:64:7a:1b:d7:e5:09:4d:b3:48:80:01:13:b3:3f:71:
         63:7b:8e:7d:3e:ad:3c:eb:33:b2:d0:44:4d:33:47:25:65:5d:
         10:63:64:34:60:33:76:dc:b3:2c:12:63:35:c7:dc:29:52:fd:
         bc:ec:4f:94:67:65:1c:d3:6a:c4:88:e8:f1:8a:15:54:ea:2e:
         e8:e7:92:2e:20:95:80:ae:ba:6b:b6:dc:ca:3e:9a:42:f7:cb:
         e7:16:50:72:69:ff:06:fb:d4:d4:fa:be:93:05:93:55:76:54:
         ec:06:46:32:c3:87:56:33:e7:08:d1:64:ca:49:2f:23:0a:d9:
         43:19:8f:4e:ae:59:39:8a:78:10:4f:6c:38:86:9c:d7:e9:69:
         84:89:dd:6b:10:fc:ce:9e:04:9c:74:60:a9:c8:5a:ef:01:de:
         f7:71:ba:16:55:2c:dd:e6:c9:8a:9b:76:18:50:7c:e6:2a:18:
         7c:de:b4:4d:38:47:03:0a:f5:ae:25:a4:de:94:95:6f:5a:5b:
         4c:c3:87:8a:9e:4b:03:46:df:49:1a:0b:7b:98:37:f2:00:c3:
         dc:b0:91:8d:0b:58:d7:1a:2a:86:6c:8f:d6:d9:9d:ca:74:be:
         d5:fd:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:49 2026 by rpki-client