Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa
File:                     1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa (raw, json)
Hash identifier:          U/77NXAKyLu4kdk2wewiQU0yjyMBqjIT4p7U+2q5Xyw=
Subject key identifier:   2F:1B:B2:9E:06:AB:B4:07:06:9A:27:80:57:1F:3D:BC:3D:F7:64:01
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E11B42F487ABAEC7F6257D180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     21859
IP address blocks:        98.98.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2f:48:7a:ba:ec:7f:62:57:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=4f653905-c7ca-49b8-a145-2daee8e142cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:3e:e2:7d:ce:a6:e3:27:29:bf:9c:9c:6b:
                    ba:4c:1b:60:78:b5:1b:72:f3:8e:ad:36:cb:a9:ad:
                    4f:bf:d1:24:35:a8:e0:08:58:36:3d:62:76:a0:bb:
                    18:e0:d8:ec:e4:9f:5d:bb:3b:be:05:ca:42:44:03:
                    54:3f:d2:b7:21:af:2b:fa:e8:90:a2:a6:5b:04:2e:
                    1c:64:76:19:89:ed:ad:b8:c0:28:59:b8:71:0f:e4:
                    ac:1b:4f:07:56:7b:22:9b:9c:6f:69:c0:3c:3d:21:
                    3f:00:55:2e:bc:5b:d6:3f:73:6f:78:1a:54:c2:47:
                    24:86:f9:7b:3f:42:c2:30:45:c4:80:d8:5d:c8:00:
                    50:dc:ea:9c:cd:a8:fd:17:05:a6:e5:b1:46:1b:0a:
                    37:ea:44:e6:30:39:02:b3:9e:99:3c:74:fe:0d:6e:
                    ea:a4:ff:8f:44:21:12:f7:46:ef:85:b7:cd:35:af:
                    7b:0c:55:11:91:d7:39:24:69:0b:fc:11:36:70:6a:
                    5f:b5:18:59:bb:19:1c:cd:cd:1f:f3:ea:a2:5d:27:
                    a2:a2:c5:1a:4c:3d:3c:74:e7:c0:f7:dd:6e:7f:3e:
                    89:b7:44:5b:ef:48:75:bd:9e:91:ba:44:62:20:19:
                    98:85:e2:d5:7e:37:b3:89:3b:4c:a7:1e:1b:04:34:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:B2:9E:06:AB:B4:07:06:9A:27:80:57:1F:3D:BC:3D:F7:64:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:98:43:1b:e7:26:7b:0c:46:c1:59:f0:d8:60:91:43:12:
         f5:3f:11:97:75:ad:ad:aa:0e:34:c1:9a:f4:fb:1e:c5:1b:63:
         67:28:3c:c0:30:df:c7:13:44:80:43:5a:39:02:9f:95:b5:e7:
         3b:09:e2:7a:e8:d1:6b:f7:b6:7b:4d:a0:14:ed:d2:1e:94:71:
         dc:7d:46:c3:63:e2:90:ad:ec:15:d3:05:fb:10:58:66:c0:31:
         c2:36:5c:e2:a1:56:47:ee:47:ed:3e:6b:63:3e:b3:60:f9:b7:
         3b:0e:b9:05:18:62:3e:7d:e4:7b:56:a3:d9:7f:46:85:65:e0:
         dc:6c:07:de:71:cd:7f:1f:a3:4b:ff:50:dc:77:cb:01:15:dc:
         4d:83:35:78:cd:71:0d:c8:db:c6:37:4a:f6:25:15:23:fe:52:
         a6:58:4a:f0:32:11:51:1c:13:7b:2c:a6:bd:b6:38:f4:ce:58:
         be:54:ef:bc:15:c7:2e:d0:96:70:99:50:bc:e0:44:fa:92:e6:
         41:b2:09:23:5c:35:fc:80:5e:70:ce:96:f7:31:f9:79:e9:c8:
         05:2a:c7:d6:a1:03:08:d4:11:70:5d:ae:7e:f2:c1:cf:da:c3:
         ee:02:49:2a:95:6e:c8:5e:2a:7d:a9:9d:16:75:f0:69:83:22:
         26:54:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:40:35 2026 by rpki-client