Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2cd76a78-ea53-3a1e-926d-274a1c52274e.roa
File:                     2cd76a78-ea53-3a1e-926d-274a1c52274e.roa (raw, json)
Hash identifier:          Bs7ohlUsilvn45wapto5gFGTSUtLP29SnMHk5/5w1I4=
Subject key identifier:   40:B4:5D:07:4F:A4:7E:31:10:A9:C0:F4:02:4C:84:92:8A:40:60:C2
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E6C6F64E2058AAF8379CD9780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2cd76a78-ea53-3a1e-926d-274a1c52274e.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     21859
IP address blocks:        98.98.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:64:e2:05:8a:af:83:79:cd:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=a43d022e-f080-4c8a-bd36-2e369f461b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:17:26:e0:de:e3:4c:bc:f4:7c:80:19:5d:
                    f4:fe:75:21:80:86:30:13:69:9d:d5:37:a5:ed:a3:
                    82:d6:06:2e:04:02:5f:9b:5c:54:2e:7c:e4:7e:f8:
                    d4:cf:d1:f3:b9:53:6d:45:62:a1:7b:e6:7b:6c:03:
                    3b:fc:a1:31:d3:ae:90:6a:fd:97:a1:09:c4:88:10:
                    85:02:25:aa:76:2c:32:67:65:65:b6:aa:be:59:be:
                    ff:62:d2:bb:21:fd:b2:31:74:c0:45:1f:55:27:aa:
                    38:b9:62:90:59:86:8f:e9:0f:99:98:4f:3b:1b:6e:
                    ac:ad:f4:b4:4c:9b:c0:c9:39:16:1e:63:00:62:71:
                    f9:68:f8:50:36:5e:d6:17:e2:95:fd:e4:c2:db:92:
                    e7:5f:9f:ee:ac:63:1b:0d:1e:0c:17:55:02:04:48:
                    15:63:ec:65:e3:60:34:da:36:c4:c1:e2:9e:ba:35:
                    69:04:66:1f:cd:05:8f:60:ec:9e:4d:d8:77:fe:74:
                    17:d7:41:1f:a9:f5:66:44:66:c4:b3:3f:b9:b2:80:
                    49:d9:d9:ed:aa:89:1e:87:fa:af:45:5c:a4:ae:e8:
                    e5:c3:25:af:dd:04:10:8c:62:fa:5d:ec:59:37:43:
                    b5:03:59:00:32:3d:10:ed:1e:b9:0f:25:0e:4b:89:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:5D:07:4F:A4:7E:31:10:A9:C0:F4:02:4C:84:92:8A:40:60:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2cd76a78-ea53-3a1e-926d-274a1c52274e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:17:91:55:ae:d1:4a:dc:7d:b1:ea:90:5d:d2:39:e3:af:18:
         0f:e1:46:a9:03:7f:b7:87:ea:61:09:1e:c8:18:6f:f7:88:9b:
         2b:42:3a:5e:0f:af:65:64:c0:8b:ca:af:a1:6c:fb:bf:fc:23:
         38:f3:65:ba:af:da:da:20:04:97:57:b3:f2:5f:9f:5b:26:cd:
         f0:99:ea:1c:7b:cc:80:2c:77:49:f8:b3:28:17:c6:9b:df:6f:
         4a:2f:79:e7:a3:5e:0a:98:10:49:4d:c8:ef:e3:43:5f:cd:37:
         9e:53:bb:e5:10:49:6c:40:23:19:54:f5:21:fa:30:54:08:37:
         58:be:c1:37:73:da:89:2c:2c:5e:6d:8e:e0:1b:b8:73:86:3a:
         60:c1:04:fc:ca:97:96:ce:cc:f3:31:c5:56:e0:8f:58:5a:7e:
         6b:f6:52:ab:c2:1f:14:b6:13:ea:f7:1a:00:8a:bd:37:2d:3d:
         75:cd:83:e5:78:39:7d:24:ff:cc:76:bc:34:73:81:32:04:f9:
         f8:f8:54:81:f3:20:00:13:b0:a8:bb:3f:d7:1b:7b:36:e2:2f:
         c6:b3:06:77:52:52:9f:07:7b:74:4b:1a:c4:3e:8d:19:68:1b:
         3f:f0:0c:f4:8b:2b:f1:fe:71:92:3b:19:19:2a:59:5a:de:bc:
         1d:10:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:58:36 2026 by rpki-client