Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1844e6db-be81-3a39-9aae-5a47a24abd44.roa
File:                     1844e6db-be81-3a39-9aae-5a47a24abd44.roa (raw, json)
Hash identifier:          IHvHudI2zq4/xYWylEdZdKtH8eD+QSvJlQtVOh2xo5g=
Subject key identifier:   DC:92:6F:A1:98:3F:12:28:DC:FE:A5:BF:99:F6:70:E8:31:22:34:9D
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584DB7703EF489C8D28A47F20680
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1844e6db-be81-3a39-9aae-5a47a24abd44.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     400662
IP address blocks:        98.142.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3e:f4:89:c8:d2:8a:47:f2:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=5a02c1e2-793a-458d-afa6-90f6b1d3f953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:a3:ac:44:4a:bd:9f:7a:e4:a7:2c:32:63:
                    15:62:ff:32:dc:e8:65:2e:61:46:f9:50:a6:44:26:
                    bf:a6:34:48:73:78:3c:18:45:b8:af:ba:43:cf:1b:
                    b4:7e:2a:b8:0d:7f:97:9b:78:9f:c6:98:f2:49:7d:
                    a2:a1:de:dd:64:0f:b1:56:b1:35:59:e9:7f:d4:f8:
                    99:ca:43:28:9c:c2:93:ff:44:85:9b:60:b7:83:6f:
                    fd:a9:f0:09:67:65:90:d4:c2:e8:b1:74:d6:a8:71:
                    6c:da:47:3d:9f:ef:66:ce:32:c2:6d:5c:6f:11:6d:
                    14:25:7a:7e:50:8b:af:a5:42:ad:5f:d0:e8:f3:6f:
                    ff:d4:de:6c:1f:16:a7:2a:8e:3d:84:ec:27:a8:95:
                    95:60:3c:ed:e0:00:cf:38:a0:bd:34:09:09:1a:be:
                    99:57:56:6b:e2:9b:a3:28:47:a6:57:cd:43:1d:74:
                    fd:a8:ef:f6:af:3e:fa:12:dd:6d:f5:34:ed:f9:bf:
                    51:d5:94:4f:b9:e1:6b:e4:2a:c4:59:98:ca:22:21:
                    61:a3:d9:a7:42:92:dc:1d:c0:47:5e:21:68:34:60:
                    ed:43:68:a1:ab:22:54:af:9f:07:7e:b3:a7:3d:4e:
                    b7:fe:84:f6:4a:67:d1:8e:d7:5d:cd:a2:c1:1b:8b:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:92:6F:A1:98:3F:12:28:DC:FE:A5:BF:99:F6:70:E8:31:22:34:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1844e6db-be81-3a39-9aae-5a47a24abd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:5f:18:04:2e:97:e4:68:46:91:20:05:fa:2a:dd:06:83:
         83:ae:8c:df:ee:4f:af:52:db:e6:50:04:3e:1e:91:d5:2f:29:
         aa:1b:25:3e:73:e9:7f:7c:dc:9e:05:39:2e:3a:85:3c:a0:2a:
         68:bf:9f:ba:1a:b0:48:bf:f7:3d:24:c1:cb:f8:05:5f:57:53:
         76:db:6a:48:6b:7a:32:08:0c:b4:04:eb:7c:35:28:58:b5:ca:
         f8:f3:b1:bb:cd:0e:3c:73:6d:36:bd:a4:0d:55:49:ea:09:24:
         83:43:0b:52:9f:4f:fe:60:f8:e1:7f:41:1b:f4:1e:3e:c3:cf:
         49:04:7f:e4:69:76:da:a6:9b:0a:f3:65:5d:23:8e:6f:e2:db:
         12:cc:3b:89:1a:16:eb:38:21:e5:07:e2:06:b2:ad:80:0c:e2:
         9f:3a:bd:8d:3e:11:d1:bd:e3:8a:d2:ec:77:03:5b:f5:75:89:
         f8:f7:2a:96:f9:bf:38:05:18:6f:c7:ac:e4:04:13:b1:dd:91:
         63:11:14:65:02:1a:4e:93:56:ab:71:64:e0:0e:96:11:2c:dc:
         50:ae:be:51:20:23:60:91:67:d8:53:c3:0d:ab:78:d8:bf:ea:
         e1:02:eb:ac:78:db:8a:48:6c:58:7e:2b:4c:91:9b:8b:93:d6:
         6f:49:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:12:28 2026 by rpki-client