Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0e62e11-61c8-3dbb-87d4-97b17936f349.roa
File:                     b0e62e11-61c8-3dbb-87d4-97b17936f349.roa (raw, json)
Hash identifier:          D+dFz3BwaBx4KQX+V3bSvN4m2t17TqC2Uc/mzyJ+YBk=
Subject key identifier:   5E:83:91:78:9C:36:F0:87:EC:8D:8E:3B:04:5C:A1:4A:99:0C:EA:14
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EF2E77A753D569506DD200400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0e62e11-61c8-3dbb-87d4-97b17936f349.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        98.22.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:7a:75:3d:56:95:06:dd:20:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=e8bdd436-62df-4ae4-a3ac-cfcee72a2b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:8c:4f:30:8b:00:b2:bf:16:9a:eb:8c:bf:
                    cc:4e:04:5e:85:84:84:c6:c6:1b:47:9c:ed:f6:be:
                    29:11:5c:0a:19:20:7c:c3:0d:11:62:2d:a2:26:ab:
                    d5:f4:58:97:ff:c1:13:05:4c:78:43:b5:3a:c2:8a:
                    fc:c7:3e:a7:5b:ba:22:73:08:2c:62:72:a9:50:38:
                    95:86:77:22:88:1d:1a:4a:69:66:f2:32:46:ce:6c:
                    87:03:7e:ae:b1:35:10:0c:6b:dc:e9:c6:21:6d:cd:
                    39:38:e3:37:51:37:74:43:03:d4:99:57:4b:bf:9c:
                    0e:e3:e3:94:8f:28:99:e8:32:f1:85:3f:24:89:4c:
                    d1:b3:bc:3e:fd:49:3a:70:20:2e:09:9a:ad:d9:c9:
                    e4:f1:b2:94:dc:9d:f2:57:0b:23:e7:36:84:54:c2:
                    2d:16:2f:6d:55:a7:d6:ec:cf:b2:2c:01:d9:fc:bb:
                    8b:56:5e:2c:79:05:c1:92:5d:1d:cb:81:42:53:d1:
                    73:82:4c:d2:7e:e7:a6:7f:4a:eb:14:a3:cc:3c:2f:
                    45:3f:97:a3:ca:ae:80:66:5a:78:00:a5:6b:af:33:
                    e2:2f:da:a4:d6:18:c1:9a:24:19:e9:88:fb:dc:5d:
                    0a:55:09:a5:0f:5f:d3:b8:33:89:d3:a9:49:73:fd:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:91:78:9C:36:F0:87:EC:8D:8E:3B:04:5C:A1:4A:99:0C:EA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0e62e11-61c8-3dbb-87d4-97b17936f349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:d4:aa:ef:8c:c2:8c:22:4f:a1:c0:a5:b9:23:b4:41:45:
         fe:7c:85:6c:eb:6e:30:9e:bf:e5:ca:7c:c8:98:59:2a:50:54:
         b0:ba:d6:a4:32:e1:fc:1b:47:bc:54:4e:3f:be:7f:f5:02:af:
         97:ae:23:1d:81:44:2d:7b:fe:4b:e6:bd:93:5d:d2:19:ca:36:
         0a:90:9e:f6:ee:be:cf:db:db:6f:34:20:bd:fd:3e:12:b4:54:
         9c:dc:58:6c:c0:fd:81:81:7d:02:9a:4a:e2:72:07:6f:87:88:
         13:9c:c0:77:58:f2:54:63:7f:72:90:82:e6:9e:f5:af:23:08:
         b6:df:92:31:34:2d:5c:7d:b8:8c:23:a2:b7:92:3e:ba:ac:dd:
         cf:4e:74:c1:f3:60:96:66:d6:96:47:22:6d:7c:cc:19:c7:80:
         ec:32:5b:36:ef:7a:da:89:1c:d7:6e:47:2d:00:f4:83:2b:c5:
         f2:ba:d3:75:1b:d2:50:aa:4e:01:2c:73:a3:97:65:7c:6e:64:
         d0:0d:67:b4:8f:c4:bb:bd:1c:23:42:35:d0:2c:1f:9d:a3:ca:
         2f:2e:9f:07:f3:e3:d2:bf:33:f5:39:2f:bf:11:50:6e:92:63:
         f5:a5:18:9a:89:00:34:c1:9c:c0:7b:44:61:c1:90:ed:1f:95:
         b0:86:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:29:06 2026 by rpki-client