Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc8817b2-3a75-3787-b995-61f61104a979.roa
File:                     bc8817b2-3a75-3787-b995-61f61104a979.roa (raw, json)
Hash identifier:          Ka8CTfZbpG4mwFLYrGsTm2PErSOSFSadY/qaT25/LK4=
Subject key identifier:   23:AF:F7:DF:C1:56:10:20:0B:F5:66:C9:04:66:8C:27:84:19:FE:CB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584DDBBB0FC571852C3EE6FE5D40
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc8817b2-3a75-3787-b995-61f61104a979.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     21859
IP address blocks:        98.98.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:0f:c5:71:85:2c:3e:e6:fe:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=5d81dcbd-c5d6-41d7-b5c1-b79f2f602a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:b4:d3:b1:fe:ea:f3:08:94:d6:ec:16:01:
                    1d:d1:28:68:81:cb:3e:93:60:8e:1f:0e:55:af:09:
                    3d:ab:c1:3e:81:c5:df:20:e1:d5:5d:56:8c:ff:c4:
                    50:85:19:80:64:ea:fb:f4:b0:09:b1:0d:eb:70:23:
                    54:0a:f6:af:00:25:ec:f0:cf:a0:c1:5b:c3:c4:3a:
                    b6:10:96:a5:d3:0a:ea:3e:88:ee:44:e0:c6:ae:45:
                    c1:a4:e9:87:76:f4:75:39:32:d5:ec:13:a1:8c:8d:
                    8c:b5:5f:9b:96:24:dd:94:a3:e6:d3:5d:29:d7:5e:
                    6a:8b:d1:97:87:8d:d1:1f:f2:b1:f8:24:57:73:df:
                    b4:23:5b:8c:72:90:16:c4:2c:c8:27:cd:4c:5f:be:
                    37:dc:c4:c1:4a:dd:81:43:ea:1a:c4:c0:6d:4b:af:
                    83:1c:d8:f2:25:84:68:3e:7e:9a:be:03:9b:2b:b2:
                    1a:90:17:bd:6f:71:e9:a9:c5:99:39:f6:9a:72:27:
                    1a:de:4f:e9:cb:49:f6:c2:28:b1:62:9d:c0:02:fe:
                    c1:16:3b:21:e4:ac:dd:ea:34:00:0d:82:6e:ea:67:
                    68:e0:4d:5b:51:9c:57:c1:53:de:3d:35:a2:fb:28:
                    2c:df:2a:b1:86:df:59:a8:74:f0:e5:24:72:c7:03:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AF:F7:DF:C1:56:10:20:0B:F5:66:C9:04:66:8C:27:84:19:FE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc8817b2-3a75-3787-b995-61f61104a979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:21:56:b7:a2:5f:5b:8c:d4:d0:80:32:07:7d:8e:12:fe:ec:
         a3:2a:3e:9a:57:9e:b5:a5:d4:60:6a:53:f6:cd:a5:85:c5:c8:
         a8:73:10:f0:10:8d:9e:6e:a1:a1:6f:1f:b7:98:45:ae:fd:ff:
         2d:ee:ab:44:0e:af:6e:5a:c8:d6:30:9d:4a:58:81:91:70:46:
         a7:3b:29:dd:01:69:c7:e6:31:d7:91:09:67:7e:97:35:0a:56:
         3e:9e:fb:9b:54:8b:c2:ba:cf:f2:65:50:97:63:f5:ba:5f:a6:
         15:a8:ba:f9:71:5b:bc:e5:ae:c4:01:e1:dc:ab:7a:e3:17:f3:
         0a:2a:98:e9:6a:5c:73:01:7c:61:cb:af:e5:75:75:c2:1c:86:
         3e:28:5f:4f:dc:23:1f:a4:30:14:61:9a:3f:f1:48:e6:1b:53:
         fc:ca:94:a1:ad:5d:5e:37:65:61:d8:bf:a9:72:54:29:5b:b0:
         65:75:83:22:e3:a2:af:81:34:5b:12:a8:28:ff:d3:ed:af:21:
         bf:00:6f:57:02:10:8b:4a:bd:ec:fe:d4:2d:e2:0e:15:55:b1:
         6f:d8:86:6b:3e:95:e6:95:ee:bf:0a:2a:cb:96:d8:9b:d5:09:
         38:31:f8:f8:33:a2:1b:16:51:b4:72:bb:57:bb:1c:1f:f6:92:
         98:07:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:45:58 2026 by rpki-client