Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/047b789a-aa18-365e-8868-f35fceeb5165.roa
File:                     047b789a-aa18-365e-8868-f35fceeb5165.roa (raw, json)
Hash identifier:          O93B+3OISmG8b07GB+1fR6BFshoa+WlXqqXIhgGKKg0=
Subject key identifier:   72:F6:B5:C7:1D:5E:2E:5E:08:89:D9:EA:DA:D7:E3:1B:CC:AA:F9:0F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E6C6F74304BF33F097AFF7C50
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/047b789a-aa18-365e-8868-f35fceeb5165.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     21859
IP address blocks:        98.98.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:74:30:4b:f3:3f:09:7a:ff:7c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=e22587c2-cd4d-4025-8dc6-e36914cebaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:e0:30:de:70:09:8d:92:46:6f:75:5d:b8:
                    f7:6d:84:af:ad:50:b2:b1:0b:00:11:d7:83:1c:6f:
                    5c:4e:95:7b:d5:af:33:03:a2:2a:8c:3d:2f:9f:03:
                    3f:a1:04:fd:08:99:43:1d:1c:02:ac:32:f8:23:82:
                    a7:f5:c3:8f:bf:f1:57:92:a8:5d:6b:f8:fc:ac:2a:
                    52:81:39:51:81:9f:e9:3c:9c:a0:b0:37:08:7e:bc:
                    82:0f:35:28:dd:32:3f:ff:42:6c:66:6e:54:85:2c:
                    ce:d7:4a:db:97:64:70:a1:65:a5:ac:1c:40:e4:38:
                    70:e4:48:1f:d5:0c:7c:0a:83:09:55:3e:cb:aa:d1:
                    8a:98:59:e8:0c:7c:f8:ba:4a:be:72:3b:87:c0:79:
                    a9:ba:32:27:86:86:d4:6f:81:0a:01:66:c6:5f:ad:
                    4a:e6:48:c6:e6:b5:8d:3e:35:6c:fe:24:9f:cd:44:
                    1c:9e:6e:4b:63:32:c0:fb:57:35:17:58:94:02:30:
                    c2:14:eb:de:2d:34:13:54:7c:1b:06:54:cc:d8:7f:
                    77:52:61:ca:01:e6:c1:bd:a3:56:36:98:31:b8:d6:
                    88:18:4a:c5:65:6f:1b:d2:37:d9:ca:9e:bd:b4:67:
                    ea:b7:19:32:f5:56:61:e5:d9:ad:a1:a1:5e:c4:19:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:B5:C7:1D:5E:2E:5E:08:89:D9:EA:DA:D7:E3:1B:CC:AA:F9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/047b789a-aa18-365e-8868-f35fceeb5165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:57:c1:0f:c3:35:90:69:d7:e9:d6:b2:a6:8d:f0:d1:e0:
         d0:29:c7:50:8c:15:fe:9e:50:12:f8:9c:4b:c2:7f:8d:32:e8:
         2d:d9:b7:c6:a3:c0:89:54:2e:08:4e:12:23:d8:04:3c:04:2f:
         54:cd:c4:61:7a:9b:93:ef:1a:27:a4:11:b3:4c:bb:35:79:73:
         96:55:54:92:48:ad:7c:53:b5:1f:f8:5d:73:84:72:e8:a1:c8:
         f1:2f:15:a3:16:10:37:6a:d6:c7:20:b5:1b:e9:cf:a4:a1:39:
         87:96:3d:ec:72:94:6d:b2:98:52:3a:da:52:fb:74:eb:86:a8:
         e7:92:d7:2f:50:e2:c1:9d:69:00:9a:7e:41:f0:23:9d:f6:26:
         f9:1e:fc:02:5b:07:2d:d6:14:fa:0b:1e:a4:24:04:c4:a9:ad:
         e1:56:43:38:f2:5a:41:c7:93:b5:5b:e4:ca:61:e7:45:61:48:
         0d:33:f3:9f:8e:5a:33:3f:0f:50:db:dd:81:60:05:25:8c:af:
         d3:0d:d6:a2:df:17:98:49:6a:f4:c1:59:3c:3e:0b:31:cb:d2:
         20:4b:e8:da:86:e3:26:aa:9e:e9:54:e1:5c:44:7b:5a:b1:e9:
         af:16:ce:f0:c5:da:ed:5d:8f:20:21:64:f2:1c:9a:b0:95:e2:
         86:d0:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:26 2026 by rpki-client