Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/bd733cc1-c210-3b28-a91d-f76c12f8df92.roa
File:                     bd733cc1-c210-3b28-a91d-f76c12f8df92.roa (raw, json)
Hash identifier:          TNriwp5ImlmBhfUaYHZjoS8y9z56EI9A23c+G2sjUcc=
Subject key identifier:   FB:39:DF:2E:37:DD:5C:43:97:85:29:80:1A:33:26:04:5D:9C:C6:33
Certificate issuer:       /CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
Certificate serial:       010D0C9F4328584E45300730347486751BD1EA80
Authority key identifier: BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/bd733cc1-c210-3b28-a91d-f76c12f8df92.roa
Signing time:             Tue 23 Jun 2026 19:36:04 +0000
ROA not before:           Tue 23 Jun 2026 19:36:04 +0000
ROA not after:            Mon 21 Sep 2026 19:36:04 +0000
asID:                     22364
IP address blocks:        204.126.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:30:07:30:34:74:86:75:1b:d1:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
        Validity
            Not Before: Jun 23 19:36:04 2026 GMT
            Not After : Sep 21 19:36:04 2026 GMT
        Subject: CN=60589de3-10de-49be-8912-27ef7a184013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:bc:77:72:e3:62:af:92:69:48:59:c7:ca:
                    70:cb:51:de:33:70:a5:9c:9c:d5:dc:c9:15:92:cc:
                    83:88:55:a9:9d:f6:74:24:db:a9:6a:8a:5e:b6:0d:
                    55:6b:2d:e9:49:50:77:7d:c8:67:70:f6:42:32:d2:
                    2d:af:b5:55:bf:33:45:2c:36:47:5b:8a:1f:3b:6d:
                    f4:17:e7:be:18:5d:c4:d4:d8:f7:7c:dd:cd:c2:00:
                    a1:f0:c7:00:8e:e7:da:32:d7:78:60:7f:b7:c4:f8:
                    fc:08:89:18:26:23:4b:29:fe:77:1a:52:21:f2:e5:
                    57:15:39:6a:0d:51:27:2e:1e:bd:64:3b:79:cf:9c:
                    da:4f:b2:5a:51:6c:0a:4e:3b:a1:ce:cb:19:46:ec:
                    20:65:06:9a:d7:07:c5:85:f1:db:fd:4d:23:99:48:
                    5d:b6:13:2f:e1:62:11:3b:d3:5c:e6:30:59:60:6f:
                    04:2b:09:75:bf:9d:0f:1c:ac:e4:4b:44:73:0c:43:
                    c0:89:1b:6b:34:59:76:90:b6:73:d5:12:83:ce:b7:
                    65:c4:e9:4a:27:35:61:5c:fd:77:8d:2e:14:ee:38:
                    3d:7f:e8:6a:ff:8a:0d:d0:01:d9:91:7e:e9:d1:c7:
                    46:94:23:78:c8:ed:68:5c:1c:85:28:ea:1b:8b:69:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:DF:2E:37:DD:5C:43:97:85:29:80:1A:33:26:04:5D:9C:C6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/bd733cc1-c210-3b28-a91d-f76c12f8df92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.crl

            X509v3 Authority Key Identifier:
                keyid:BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:d9:23:dd:de:37:16:b1:c7:42:0b:22:b7:10:e8:a8:35:
         f0:ab:ac:81:01:02:9d:51:77:2a:76:70:30:f8:6f:a7:52:ff:
         ec:bb:19:cd:0d:13:dd:2c:7d:9c:ef:d5:18:0b:a6:d5:2c:e1:
         21:3c:c8:bd:9d:15:0f:26:97:21:36:52:01:68:be:ac:99:ee:
         ad:2b:d4:c3:83:cc:39:c8:d6:51:22:d6:08:ff:94:27:dd:f1:
         f3:c5:d3:28:89:98:38:02:de:c8:ad:df:91:9a:dc:ef:86:a5:
         d5:6c:22:fa:d6:b0:d5:3c:f5:5b:aa:8d:ad:03:ed:08:1a:f4:
         73:e1:3d:31:88:08:97:87:dc:ac:da:d7:00:2a:69:1f:9c:53:
         14:f9:d5:01:be:c6:4e:19:6a:84:9d:93:4e:47:f4:a8:a2:59:
         dc:a3:3b:ae:8a:08:54:b9:8c:9b:3e:00:95:e4:9a:97:57:6a:
         66:20:ce:a2:d7:e1:c2:ed:89:8e:47:e4:e5:2a:c1:00:1e:2f:
         52:b8:fd:68:8c:9a:ae:0d:96:fc:d8:f4:5e:6e:a3:62:a0:6e:
         47:0b:47:72:fe:17:d5:39:ec:d6:14:53:5f:38:47:20:c0:a8:
         41:bc:4c:a5:47:f5:44:64:70:2a:3e:16:28:3a:ec:5e:03:7e:
         30:dc:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:32:11 2026 by rpki-client