Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/e28aa410-923e-32d7-b263-565b4472bcdf.roa
File:                     e28aa410-923e-32d7-b263-565b4472bcdf.roa (raw, json)
Hash identifier:          r/ZTkq34bnuSwPdu/YUiNp/AX/VVuqC3+XZbfyih2T0=
Subject key identifier:   03:5B:FC:11:73:C4:B4:5C:4E:24:54:7A:FD:5B:6C:D4:0D:58:D3:DA
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584E69A4B7FDEDEEEFF491F9DD80
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/e28aa410-923e-32d7-b263-565b4472bcdf.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     401333
IP address blocks:        75.98.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b7:fd:ed:ee:ef:f4:91:f9:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=a9970f16-da0e-4a08-b334-ddb25994451a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a3:b7:b9:80:76:b6:fc:d1:7d:09:d5:0b:bd:
                    95:22:88:e4:bd:89:61:3f:ef:71:b5:d3:18:70:24:
                    d4:e1:fa:b2:05:bb:73:9d:42:b6:e1:39:d7:f9:f7:
                    65:59:76:a9:5c:2f:8a:b0:c3:21:94:a6:73:ed:77:
                    88:d8:6e:5f:ee:97:31:dd:52:c3:b2:13:c9:a4:05:
                    7a:dc:1d:ad:e2:92:fe:12:a5:98:36:c1:eb:c6:64:
                    09:65:e3:26:07:66:20:e7:08:dc:7d:3c:3b:f4:af:
                    ea:28:35:a5:69:0b:20:74:d4:d0:78:18:55:7a:76:
                    84:91:2b:ba:ed:70:39:78:90:25:5f:f3:b8:49:cc:
                    10:4e:e8:f5:68:9f:3a:e0:59:8e:92:2e:e2:8b:11:
                    81:4d:46:3c:c7:78:ac:0d:ed:2b:9d:9a:12:02:83:
                    59:25:74:c1:9c:1a:9d:ba:31:da:3e:a4:6b:4b:45:
                    bb:c3:ed:27:65:82:73:20:c5:fe:b7:a6:e8:ad:97:
                    be:ce:8f:93:af:95:45:9c:20:d4:84:53:c0:f2:ff:
                    57:85:23:5d:ac:52:4f:c6:00:54:78:d1:94:59:8d:
                    57:5f:49:4f:56:19:26:8b:02:8c:cc:e6:88:b1:bd:
                    3b:c5:71:c1:66:1e:bd:0b:ac:3b:fc:c4:ab:de:ce:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:FC:11:73:C4:B4:5C:4E:24:54:7A:FD:5B:6C:D4:0D:58:D3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/e28aa410-923e-32d7-b263-565b4472bcdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:67:ff:24:73:e2:05:69:70:ad:fb:1d:ff:6a:e7:c8:ea:
         a4:38:cf:e9:9d:a9:28:e9:11:eb:cd:28:6b:6b:ad:c1:f4:6d:
         5d:77:25:a3:0b:a9:2c:63:73:ed:af:87:73:2c:fe:e0:d4:72:
         93:8e:31:63:53:e2:13:92:0e:79:39:cc:2b:f7:0e:f7:d6:68:
         97:ac:d4:b4:e6:c6:c0:e8:0b:e2:2c:27:16:83:f2:60:38:1d:
         ed:ad:79:09:53:9c:7d:5f:f5:fb:71:4d:fe:93:f0:1c:d4:94:
         9d:af:3c:3b:74:99:22:57:0c:53:f6:48:dc:d6:01:b6:87:70:
         32:fe:92:71:53:c5:1f:cb:8d:9b:71:c9:6e:d2:22:96:31:36:
         c2:09:bd:8a:4f:ae:0f:48:8b:6f:26:49:cd:49:97:5b:c9:08:
         24:48:06:18:72:27:ce:86:3f:f6:99:40:21:d9:d9:83:a9:a0:
         4d:91:22:e8:34:fc:c0:4c:0d:2b:e3:ef:d9:de:fd:00:e2:4d:
         49:1c:75:7d:5f:a6:10:6c:f2:67:be:e3:37:2e:0c:70:c8:25:
         9e:ed:16:3d:f0:95:d4:65:5b:f8:9c:74:e7:a7:fe:a6:c5:02:
         f6:3b:26:39:39:93:2e:c0:6c:04:35:5d:fa:97:a0:76:ec:6d:
         85:79:b2:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLf97e7v9JH53YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi
ZWNjMB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk
YTk5NzBmMTYtZGEwZS00YTA4LWIzMzQtZGRiMjU5OTQ0NTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KO3uYB2tvzRfQnVC72VIojkvYlhP+9xtdMY
cCTU4fqyBbtznUK24TnX+fdlWXapXC+KsMMhlKZz7XeI2G5f7pcx3VLDshPJpAV6
3B2t4pL+EqWYNsHrxmQJZeMmB2Yg5wjcfTw79K/qKDWlaQsgdNTQeBhVenaEkSu6
7XA5eJAlX/O4ScwQTuj1aJ864FmOki7iixGBTUY8x3isDe0rnZoSAoNZJXTBnBqd
ujHaPqRrS0W7w+0nZYJzIMX+t6borZe+zo+Tr5VFnCDUhFPA8v9XhSNdrFJPxgBU
eNGUWY1XX0lPVhkmiwKMzOaIsb07xXHBZh69C6w7/MSr3s6YxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANb/BFzxLRcTiRUev1bbNQNWNPaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4
N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvZTI4YWE0MTAtOTIzZS0z
MmQ3LWIyNjMtNTY1YjQ0NzJiY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh
NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi
YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1
ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwwZ/8kc+IFaXCt+x3/aufI6qQ4z+mdqSjpEevNKGtrrcH0bV13JaML
qSxjc+2vh3Ms/uDUcpOOMWNT4hOSDnk5zCv3DvfWaJes1LTmxsDoC+IsJxaD8mA4
He2teQlTnH1f9ftxTf6T8BzUlJ2vPDt0mSJXDFP2SNzWAbaHcDL+knFTxR/LjZtx
yW7SIpYxNsIJvYpPrg9Ii28mSc1Jl1vJCCRIBhhyJ86GP/aZQCHZ2YOpoE2RIug0
/MBMDSvj79ne/QDiTUkcdX1fphBs8me+4zcuDHDIJZ7tFj3wldRlW/icdOen/qbF
AvY7Jjk5ky7AbAQ1XfqXoHbsbYV5sgg=
-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:23 2026 by rpki-client