Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/d518ebf9-f9e0-3515-bf89-2ed986a9ce84.roa
File:                     d518ebf9-f9e0-3515-bf89-2ed986a9ce84.roa (raw, json)
Hash identifier:          hEiWgZpQ7wSRWRm+cYYxSvEfTuNffoaOl8Xp30+v49A=
Subject key identifier:   D6:7D:1D:24:0C:B0:3E:BF:F2:2E:CE:E5:FE:E1:C1:07:6E:C9:B2:96
Certificate issuer:       /CN=bb49c202-f644-4fa6-8a36-084312761f72
Certificate serial:       010D0C9F4328584D5879C7569E0CEA3051424800
Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/d518ebf9-f9e0-3515-bf89-2ed986a9ce84.roa
Signing time:             Tue 31 Mar 2026 00:38:05 +0000
ROA not before:           Tue 31 Mar 2026 00:38:05 +0000
ROA not after:            Mon 29 Jun 2026 00:38:05 +0000
asID:                     62240
IP address blocks:        172.98.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:79:c7:56:9e:0c:ea:30:51:42:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72
        Validity
            Not Before: Mar 31 00:38:05 2026 GMT
            Not After : Jun 29 00:38:05 2026 GMT
        Subject: CN=5be640eb-61c7-4263-bba2-f0dd07a5e8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:78:85:95:85:22:3e:a2:a4:01:01:f2:f5:
                    dd:3e:fb:24:1d:20:1f:05:93:dc:bf:a3:84:ec:10:
                    29:2c:b3:d9:71:40:72:b9:62:d8:e1:16:23:e7:55:
                    84:75:bb:6f:ce:fd:46:ef:d9:8d:8c:17:44:9b:65:
                    fb:0b:e7:b6:00:2c:02:da:c4:f1:6e:87:61:23:6f:
                    2f:fe:70:6b:94:e1:42:20:2a:d1:d4:d5:c9:9f:d2:
                    6a:48:08:9d:7b:b8:8b:50:ca:82:26:e1:6b:03:d1:
                    00:4d:0a:87:eb:7c:ce:12:63:82:9a:32:63:1c:2b:
                    e9:63:33:98:5d:85:e7:63:a4:26:03:14:52:c6:fc:
                    d8:84:b4:9e:c1:a2:30:4a:17:88:68:d7:e9:d7:32:
                    29:f5:ff:da:a5:f3:69:72:a7:f5:49:1a:25:7d:69:
                    3d:e5:4d:e9:38:fd:bf:1d:97:d0:37:e5:34:43:ff:
                    91:24:30:fd:bd:77:92:86:bc:b1:6b:37:c7:5c:8e:
                    e9:4c:dc:2c:d1:5e:65:1a:8a:c2:dd:a0:42:5c:5d:
                    c4:b8:b6:14:18:88:d2:98:6b:94:62:30:e1:70:2d:
                    76:7c:90:d5:89:2e:95:5f:b2:19:b3:05:c0:75:6d:
                    02:0e:b5:66:ee:a0:45:05:ef:f6:5b:16:ab:b8:4d:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:1D:24:0C:B0:3E:BF:F2:2E:CE:E5:FE:E1:C1:07:6E:C9:B2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/d518ebf9-f9e0-3515-bf89-2ed986a9ce84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:13:11:e0:90:b2:f9:c9:76:42:dc:a4:90:e4:26:98:d8:
         f2:9e:d7:89:57:25:ab:b2:41:45:02:4f:3e:97:ad:46:6a:13:
         0f:8f:f3:1a:86:15:b8:a2:b8:bc:bf:c4:5d:24:66:00:3d:2b:
         62:4c:66:3a:a3:56:e7:c2:86:57:8d:fd:c3:21:d9:74:d0:66:
         e7:09:13:94:04:23:33:e9:1d:b0:1a:be:b0:91:4e:f5:4f:ac:
         31:f9:0d:32:a9:44:c8:4f:ff:a3:5d:4c:d4:63:5d:f6:69:3a:
         41:22:af:cb:d6:9e:2e:94:4e:2d:54:7d:30:3e:21:7b:c7:9d:
         7f:63:f4:c0:e7:3c:14:1c:9c:eb:f1:34:c3:db:df:5f:6a:17:
         00:a5:04:cc:c9:16:1a:69:5e:4c:6a:42:f5:d2:b9:9b:50:7c:
         3d:1e:9d:a7:c8:de:a5:b0:46:50:fb:44:d0:69:86:16:e4:c0:
         10:dd:47:d2:72:08:9e:c1:0d:4c:f7:fe:f2:4e:79:ff:3f:5f:
         22:49:6f:7a:5d:81:09:9c:79:2f:cc:61:ee:57:b7:bf:0f:80:
         a5:f7:b9:0a:64:d5:6b:dd:37:60:08:8e:0e:18:5a:6c:bd:52:
         7c:3a:b4:47:aa:0c:c2:9a:2d:46:48:00:3f:1b:51:38:3b:5c:
         85:58:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 08:18:31 2026 by rpki-client