Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/db0fcf69-663e-3c95-80e5-791ef9b1704b.roa
File:                     db0fcf69-663e-3c95-80e5-791ef9b1704b.roa (raw, json)
Hash identifier:          lO0n2iYi/jdvj/ix6ZokXDLjBqfih6O2EHIFwiWdeYQ=
Subject key identifier:   D1:67:8F:2B:26:9A:10:45:79:F5:65:33:F0:CD:DE:A3:2D:AC:5F:3F
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E5BAF4AF54EDBD4512C9A8F80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/db0fcf69-663e-3c95-80e5-791ef9b1704b.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     137409
IP address blocks:        98.159.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:4a:f5:4e:db:d4:51:2c:9a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=f58065db-83f3-4c31-9988-f52ccaac4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:23:34:69:ba:15:0f:ba:39:6e:45:b4:da:ef:
                    25:c7:4d:e5:45:af:5d:7c:af:f5:7d:55:49:30:45:
                    a6:4d:d0:ae:a4:8b:34:30:25:1d:44:8d:9d:91:22:
                    1f:65:e4:24:f0:ad:5c:5a:f7:3d:06:0c:0d:96:0b:
                    1b:0d:2f:3a:66:83:86:5c:8f:a1:94:6d:b8:03:3f:
                    25:00:26:c2:24:b3:30:4f:96:d1:52:8e:06:ce:83:
                    23:47:f3:0b:a5:10:e1:9a:43:e9:99:6b:09:0f:45:
                    01:6c:95:14:f2:7f:85:30:7a:b0:ab:a5:44:0f:47:
                    98:36:70:8e:b0:36:7f:e7:a6:94:2a:d5:ec:53:ba:
                    4d:8d:36:f6:71:73:31:81:e6:54:0b:23:b6:0e:85:
                    f8:9f:54:4e:b3:8b:6b:6e:0a:01:ea:4a:60:77:23:
                    07:85:7e:5e:e5:59:11:ba:ab:ec:5a:58:ad:39:49:
                    61:6c:89:92:64:cb:a7:ad:93:e4:89:de:fb:16:93:
                    64:a9:78:f7:8d:fc:a8:25:f2:92:b2:4a:06:cd:db:
                    47:e5:49:dc:55:30:7a:28:2f:3e:99:43:ef:a8:6f:
                    63:e1:81:fa:2c:2b:27:16:74:67:f0:85:53:ab:4e:
                    3d:48:4e:b9:cf:e5:62:67:25:94:22:be:f2:06:c9:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:67:8F:2B:26:9A:10:45:79:F5:65:33:F0:CD:DE:A3:2D:AC:5F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/db0fcf69-663e-3c95-80e5-791ef9b1704b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:29:62:e3:ab:82:0f:b8:dc:45:79:ec:6c:b7:f6:b6:2f:91:
         88:6e:1e:a5:61:cb:fb:8a:09:7c:81:a1:5b:aa:6b:60:9c:7f:
         d5:16:2f:6c:b2:78:0c:83:df:f4:d5:67:35:92:38:cd:20:b2:
         d5:47:ff:78:7d:01:3f:71:22:3e:51:9d:8e:40:41:8a:04:eb:
         4d:90:76:df:04:3f:bd:53:2a:32:66:c6:9f:3f:2f:d8:db:50:
         85:e1:fc:bb:fe:e0:14:b3:31:8c:8b:5c:e0:78:1b:a8:9c:5c:
         8b:fa:40:6b:e6:7c:1b:da:8f:e1:52:5f:ce:18:3e:0f:74:c8:
         ce:89:a1:4d:a5:07:90:e8:5c:c0:ba:86:13:c1:78:41:8a:b4:
         3f:d1:a2:e6:66:35:c5:d9:3c:17:ff:14:ae:d7:a3:e0:21:f9:
         d9:74:a4:a0:68:4b:42:78:a6:2c:f1:ee:3e:7e:db:c9:bb:26:
         88:a7:e8:b3:ab:93:62:16:ad:a3:06:28:27:6c:ea:d3:4c:2a:
         02:27:a7:31:0c:1a:86:ad:dd:57:a2:e8:54:74:3f:4f:70:96:
         84:f8:be:60:85:ad:42:ea:87:8e:e6:48:af:9a:02:74:70:1c:
         d0:76:59:09:93:86:fe:a3:62:64:02:da:0f:2c:62:99:bc:36:
         c9:70:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:49:37 2026 by rpki-client