Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7683f12-7f7e-30bf-8953-2f96329e10fe.roa
File:                     a7683f12-7f7e-30bf-8953-2f96329e10fe.roa (raw, json)
Hash identifier:          zBPKE6Ge5BbPpnLzSiH64/ATB39a+ikOWZ+51dX5rpo=
Subject key identifier:   72:B3:B5:43:87:CF:EA:FE:11:E6:AC:9E:64:0C:67:F6:3E:88:8D:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF513C87C0FF8AE7E35500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7683f12-7f7e-30bf-8953-2f96329e10fe.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        98.246.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:51:3c:87:c0:ff:8a:e7:e3:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=a987bb6a-a725-4111-9760-7e8204c39511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:83:99:e8:c6:5f:07:32:5a:ae:73:fc:d7:
                    3a:93:91:64:8f:a4:7b:8c:43:22:01:e0:24:75:b9:
                    49:c0:9d:3b:43:b2:a7:14:2c:e3:ae:79:36:21:0c:
                    be:87:5c:01:9f:b1:5d:e5:f7:e6:e1:be:be:1b:30:
                    74:90:a1:be:e0:c5:58:43:17:e3:b5:79:ab:fa:09:
                    8e:4f:e1:bf:aa:a4:b2:50:67:be:e0:4d:19:4e:90:
                    32:2f:6c:c6:5d:1c:ff:69:23:83:d8:54:e3:ae:a9:
                    de:11:d2:41:b2:af:f1:73:e5:51:e3:66:87:fe:0a:
                    24:1f:f4:36:d9:a4:97:86:36:50:e4:a3:df:83:7b:
                    a3:4c:c4:5e:43:f1:0a:37:3d:d5:b4:8a:2a:9a:fd:
                    06:96:e3:ee:24:9c:25:b6:92:5b:9b:32:f0:ec:4f:
                    11:00:43:b3:33:2c:b0:b8:af:d9:35:35:2e:9b:e5:
                    1a:12:28:0e:20:63:3c:86:18:16:19:05:ef:23:3a:
                    41:be:76:2e:55:bc:d3:9c:d5:e0:cf:c4:ce:f2:39:
                    ba:1b:f1:be:16:09:b7:a6:d9:aa:91:83:59:d9:aa:
                    4b:cd:ba:00:a1:e7:09:1f:45:38:3c:c2:76:d6:1a:
                    73:68:17:e9:d8:88:0d:1e:62:bd:0a:3b:97:32:27:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:B5:43:87:CF:EA:FE:11:E6:AC:9E:64:0C:67:F6:3E:88:8D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7683f12-7f7e-30bf-8953-2f96329e10fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ba:67:d0:fa:e6:30:4c:ae:f2:1b:86:11:a6:1e:6f:f2:7b:
         ed:76:21:64:b3:b8:d3:f1:13:66:0f:59:67:e6:45:77:b1:47:
         62:03:13:d3:99:dc:08:fb:f1:8c:48:01:7a:6a:d7:cc:7c:68:
         ab:0b:f5:20:01:5c:05:f4:16:b1:e2:7a:14:5b:fb:2a:2f:32:
         15:c6:55:94:85:8c:99:53:98:82:f5:5f:dc:69:ed:a9:66:85:
         66:84:2a:dc:1b:3b:34:08:19:d3:30:5c:65:c9:d0:b8:34:9e:
         e1:fd:38:2b:4e:61:a9:fd:7b:f7:97:7c:71:0b:af:92:27:65:
         57:4d:60:6d:ce:3e:f0:48:14:be:96:5a:75:2a:e1:eb:b4:e3:
         e5:81:37:6d:43:95:f3:ec:eb:66:15:69:09:b2:19:90:b7:e7:
         f5:4c:2e:20:b6:0d:a9:86:43:e9:52:90:8a:64:88:47:af:27:
         2c:63:bd:91:7c:5f:a9:18:14:eb:4f:83:63:6d:aa:b7:64:22:
         71:76:cf:2b:72:fd:af:f7:20:d2:ee:1a:73:ea:4c:16:17:17:
         ab:d3:78:8d:c2:16:ee:d3:87:4c:57:89:e6:f3:01:da:d3:68:
         bd:8c:e3:cb:06:fa:15:93:0b:37:61:5c:dd:85:85:ce:78:3e:
         4f:aa:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:26 2026 by rpki-client