Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/047b789a-aa18-365e-8868-f35fceeb5165.roa
File:                     047b789a-aa18-365e-8868-f35fceeb5165.roa (raw, json)
Hash identifier:          0DRaNsgSZdfAuR/3LTUiZS0NqowjGIGx/rolRbLTg54=
Subject key identifier:   A5:7F:08:F9:73:34:45:97:74:48:FA:9C:CC:3C:CB:DD:E9:7D:C5:4F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CAB8C610F056ED834C3F50000
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/047b789a-aa18-365e-8868-f35fceeb5165.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     21859
IP address blocks:        98.98.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:61:0f:05:6e:d8:34:c3:f5:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=c99018cf-c460-4b14-bd85-d61f641f09d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:f0:1d:73:1b:a5:5f:61:e5:8a:0a:f4:43:
                    16:be:3d:3f:b3:14:23:27:ac:4e:6a:a5:72:d7:87:
                    1f:88:f6:9a:b8:28:e4:88:6e:6b:f1:cc:90:ab:3c:
                    b6:e0:9d:b9:3d:d1:3a:e9:45:b2:f0:61:f3:7b:7c:
                    52:d8:af:06:95:0d:2e:3d:ad:d0:b0:7b:08:1c:95:
                    43:88:7d:89:8b:9b:47:71:bc:d3:9f:85:09:40:04:
                    82:34:90:f3:f7:08:1b:d6:16:ca:79:af:b2:fe:90:
                    7d:5c:c7:8d:5e:d7:18:10:c9:27:93:3e:5e:7a:b2:
                    7e:a9:0d:72:0d:61:37:50:0a:1f:79:ac:a9:68:17:
                    19:1a:cd:a6:82:3a:2f:25:64:64:67:15:2d:26:b2:
                    6a:97:d4:e2:62:b0:af:13:21:00:a5:fd:85:b2:16:
                    c0:01:73:73:98:a1:24:80:c2:7e:ad:54:f0:45:6f:
                    84:ce:f9:2c:e6:00:b7:63:f3:47:a6:8f:4f:8d:16:
                    1c:e7:a3:ed:71:0d:a4:40:a5:b8:60:bb:b9:74:f1:
                    5b:78:6e:a0:81:73:c2:33:42:5c:af:ca:53:7f:25:
                    f7:32:64:c9:26:ac:4e:85:37:80:a6:9f:20:8e:9d:
                    df:d3:c0:48:47:fa:c8:aa:d0:53:a5:5b:01:58:ba:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:08:F9:73:34:45:97:74:48:FA:9C:CC:3C:CB:DD:E9:7D:C5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/047b789a-aa18-365e-8868-f35fceeb5165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:04:2d:b9:ba:2c:a6:c8:52:08:63:0f:ca:40:82:1e:e0:
         90:d3:c7:53:a0:4f:71:88:91:5b:92:fa:6d:a1:b5:52:f3:b2:
         51:88:6f:b2:78:01:0b:83:f8:1b:36:4c:27:91:ec:e4:81:0f:
         d5:61:13:25:4d:8c:e0:87:7b:19:09:4b:c3:2c:8b:56:96:31:
         01:87:ce:b6:33:bb:40:f8:67:b8:e6:ad:e2:5b:fe:f8:7f:9e:
         49:02:78:40:cd:15:ed:d8:28:d9:79:89:b2:89:f2:ab:cc:24:
         89:f8:20:62:1a:91:e2:f9:c5:b9:56:d4:95:94:33:9b:62:ff:
         d2:28:22:34:44:4b:1e:ab:71:40:50:6b:a0:bc:fa:f6:a9:fe:
         72:03:01:81:88:5f:3f:41:23:8c:8d:b0:bd:07:42:15:85:e6:
         f1:e8:fe:a0:56:85:28:ce:a9:6d:d1:07:b7:fd:5b:77:03:eb:
         cf:c7:66:2d:a0:e1:54:5b:f4:70:3c:a0:fc:73:6b:1a:f5:31:
         87:c6:94:19:12:83:df:80:41:aa:53:a4:15:75:0b:b1:de:cb:
         04:ae:54:2d:c6:32:97:de:bd:4b:14:76:1d:2e:aa:25:c9:4f:
         0c:c0:5f:f5:03:d8:82:4e:f8:1f:d6:7a:83:31:f9:d0:f9:2a:
         9a:43:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:06:29 2026 by rpki-client