Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01db3054-1c20-3fcb-827a-1bef49b4208d.roa
File:                     01db3054-1c20-3fcb-827a-1bef49b4208d.roa (raw, json)
Hash identifier:          FcoLkQlDtzEj50Xh9H0CSYOk4Dp18IJeVjkFYwTNoAk=
Subject key identifier:   13:3D:54:7C:46:18:E2:54:67:1E:18:49:70:70:36:52:F2:A0:03:C9
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EDC920B6A96D9E40804165080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01db3054-1c20-3fcb-827a-1bef49b4208d.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     25899
IP address blocks:        98.142.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:0b:6a:96:d9:e4:08:04:16:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=ef718b8a-f6a1-47d7-8bbe-73f1231e068d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:8a:7d:54:4f:e6:6c:2b:fc:98:31:c7:c0:
                    45:20:ac:40:ab:a4:6a:d6:dd:c6:41:c9:e9:b0:14:
                    3e:ac:9e:c3:fe:7e:30:1b:c5:4b:0a:09:86:b2:63:
                    b8:10:77:f0:2f:08:7e:5c:72:9a:f8:67:a9:cf:8e:
                    72:4c:1e:e7:a4:ec:34:f1:eb:9c:b1:8a:12:9b:bb:
                    91:12:c6:bb:b9:01:5b:d6:07:0f:63:0d:a7:56:89:
                    93:ab:4d:ef:d6:a9:89:bb:54:e3:69:5f:ff:05:54:
                    6f:25:08:64:00:ee:47:51:45:f6:89:26:06:bf:a5:
                    54:a9:26:ac:da:2d:d8:04:53:76:8d:31:93:c6:a5:
                    7e:f0:2f:21:85:29:d7:03:2e:55:c3:e7:d5:e0:7f:
                    1a:c9:32:b2:dd:e0:73:8b:a6:7b:a9:5b:ca:7a:1c:
                    7d:9a:9c:d6:69:d6:1a:bd:68:88:88:80:af:c8:64:
                    2b:5a:c6:8e:a7:8a:15:ab:f1:91:9e:a4:7f:06:df:
                    05:bb:18:32:57:6a:71:90:b5:2a:4b:b8:04:e9:d0:
                    37:b8:ad:84:d8:1f:c2:0e:86:cc:0a:38:0a:c9:94:
                    72:07:27:b4:43:42:f8:2c:a0:4f:9c:29:5c:bb:46:
                    7a:77:4d:5c:dc:2c:79:e2:33:e4:07:28:1c:17:8d:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:54:7C:46:18:E2:54:67:1E:18:49:70:70:36:52:F2:A0:03:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01db3054-1c20-3fcb-827a-1bef49b4208d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:d7:ce:18:5b:60:46:1e:13:07:1b:65:f9:21:9c:ca:e2:
         10:6c:07:58:23:9a:be:4c:89:f8:50:52:07:6f:14:63:19:8c:
         36:4d:bd:b6:f6:0a:a4:84:ce:89:61:ec:b5:e2:25:d0:81:f2:
         03:bb:c4:30:f1:c3:8d:dd:be:fe:a8:13:4d:2e:44:e1:45:e9:
         bf:eb:ae:66:10:3c:a1:ad:a8:8b:a2:d5:59:cf:7e:99:f3:65:
         62:23:64:97:dd:ee:81:74:68:b7:38:81:ac:18:a4:3c:89:ca:
         c9:cf:8c:0a:54:ea:c4:af:d9:b1:5b:38:8a:6b:2c:42:7f:51:
         24:e7:83:c5:66:5b:fe:4a:f6:80:fb:ff:51:b4:c8:2e:43:67:
         60:ce:1d:23:8a:1e:14:75:68:79:14:d9:2a:a2:6c:ba:46:dd:
         3d:ad:8c:33:72:67:2b:b8:0a:aa:04:3a:23:27:fb:15:93:36:
         ee:ec:b0:5a:23:68:1d:0d:bc:86:06:7f:8a:7f:4e:e9:2e:a5:
         43:e4:e4:01:29:65:6d:80:43:3b:1e:67:61:f2:29:59:a9:24:
         72:61:88:c9:78:98:44:eb:d5:2f:c1:3b:ae:9f:68:84:c4:4d:
         fa:53:8f:f5:a6:3a:61:33:ad:e6:83:92:a1:e7:2a:0e:a9:75:
         e0:6b:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:41 2026 by rpki-client