Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa
File:                     af72ac96-389c-3eb8-a84c-7f22db7a7533.roa (raw, json)
Hash identifier:          0P8AH3E/w5px//n9qUfN7gz7mROZnwYrtp2D/hkPQqk=
Subject key identifier:   8A:BD:18:73:44:6B:CC:3F:48:D0:CD:88:DA:DA:CB:30:09:37:56:46
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584ECD37302C3919025C5C52B480
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     2734
IP address blocks:        98.158.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:30:2c:39:19:02:5c:5c:52:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=357e9eb2-005c-4f03-8357-ac134feb4568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:db:31:09:81:00:28:40:ab:88:25:13:cb:
                    52:c1:5b:20:1e:36:ed:81:1a:3e:84:5d:3b:31:c6:
                    93:e8:0c:06:ec:ca:00:8c:8f:dc:8c:5f:3f:28:cd:
                    79:f9:2d:5e:0d:40:78:c1:b7:5e:99:ea:6e:c1:99:
                    64:91:75:e7:77:ef:9c:35:4f:17:31:ad:a0:b9:c4:
                    3a:59:9c:a5:f9:69:c1:bf:11:88:0c:38:13:cb:ad:
                    0e:d3:1f:ba:e9:1d:0b:45:cb:b4:e5:85:f3:61:68:
                    89:8a:7a:8a:81:20:6d:f7:ca:ea:45:08:0f:97:60:
                    4a:e3:99:23:55:5e:e0:ea:66:ee:de:3c:c6:fc:cd:
                    fa:50:c6:c1:50:f4:25:95:75:9e:65:e7:eb:32:5a:
                    07:5e:85:0e:d7:bf:7e:f2:ba:b7:7a:d8:e8:8b:af:
                    51:1d:1c:b3:c9:86:e1:e6:16:f2:20:ea:57:3d:e1:
                    d5:da:69:d3:ce:4f:ca:e2:c4:c1:07:bd:66:19:e3:
                    95:5f:a0:1c:ed:59:13:44:89:b2:7b:f6:54:7c:43:
                    e9:7d:dd:ee:7b:45:17:59:a9:f7:44:80:50:a2:27:
                    f3:29:a4:92:e5:4c:98:6d:48:ad:39:ce:43:62:a6:
                    3f:d9:5d:3e:51:fc:83:0a:0a:46:bf:13:29:a4:13:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:18:73:44:6B:CC:3F:48:D0:CD:88:DA:DA:CB:30:09:37:56:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:35:fd:11:48:36:ed:30:09:0a:d9:10:d7:f3:9f:98:a6:20:
         07:a5:20:da:09:60:9a:a9:71:64:82:ce:d3:2c:76:e2:e4:d2:
         0b:3a:98:22:a1:55:bb:a7:35:29:30:72:b2:f5:17:1a:0f:a4:
         f8:9f:72:26:8b:fd:55:d5:1c:cb:97:c1:33:fb:17:88:e0:3c:
         be:2a:60:34:a8:8e:c5:d7:b3:7e:ed:fe:a7:0d:b0:a0:52:e9:
         5f:cb:c9:29:70:4d:ad:cb:0b:c6:9b:da:a1:33:b0:68:33:f4:
         77:49:22:c2:45:70:ab:e5:12:c2:e3:d5:26:59:df:62:32:e9:
         1b:49:09:03:7d:aa:29:91:91:42:4b:14:02:b3:b6:23:d2:6b:
         26:d0:b5:13:a5:32:8c:e0:3f:3c:bb:96:10:8c:91:c5:d1:d8:
         cd:87:2a:6e:69:ab:2c:84:cf:3f:c0:97:4c:fd:e0:ba:cf:06:
         1a:9f:5f:ed:b5:98:28:0d:55:e1:0b:fc:a7:d2:d2:12:98:8b:
         44:35:fc:45:8c:8a:4f:06:55:d6:64:53:33:16:d0:21:fc:3b:
         92:f8:29:dc:c9:90:b1:38:76:0a:44:5e:50:dd:2c:be:64:d1:
         a3:b7:34:ac:ec:db:8b:11:e3:1b:76:f4:65:de:f8:f6:0f:c1:
         55:d4:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:14:25 2026 by rpki-client