Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/a58e149d-27d2-3647-8aaf-29d25e3d4158.roa
File:                     a58e149d-27d2-3647-8aaf-29d25e3d4158.roa (raw, json)
Hash identifier:          7OTyfXqrHJJt+MorXTRcBolBnr8/2x+2AgUkG7O5IaA=
Subject key identifier:   AD:7A:9B:9B:CC:9A:29:89:DB:49:0A:16:4F:94:57:32:01:27:3B:8D
Certificate issuer:       /CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
Certificate serial:       010D0C9F4328584DE87A7339456BCCADE8BDD780
Authority key identifier: EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/a58e149d-27d2-3647-8aaf-29d25e3d4158.roa
Signing time:             Thu 21 May 2026 14:35:50 +0000
ROA not before:           Thu 21 May 2026 14:35:50 +0000
ROA not after:            Wed 19 Aug 2026 14:33:28 +0000
asID:                     13896
IP address blocks:        162.223.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:7a:73:39:45:6b:cc:ad:e8:bd:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
        Validity
            Not Before: May 21 14:35:50 2026 GMT
            Not After : Aug 19 14:33:28 2026 GMT
        Subject: CN=9b31e721-b650-470b-b5f6-84cec8978da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:58:4e:41:5f:d5:31:3d:ee:c5:ff:75:57:
                    3e:c8:29:8d:0e:48:67:f9:94:09:19:90:c0:cd:88:
                    3e:5f:ee:23:18:0e:96:a4:f0:bd:37:5a:a5:9e:3a:
                    5b:ca:d0:56:6c:a5:92:f7:07:d8:82:39:57:8c:a3:
                    92:80:54:75:54:d4:d8:be:2c:bf:48:d1:91:df:e7:
                    f3:98:73:27:58:b4:c5:90:8c:a2:16:d2:c9:be:3f:
                    c4:8b:19:3b:2e:e1:ae:97:60:f8:20:bd:e7:e3:85:
                    c1:aa:c8:4d:43:d7:20:f8:a9:b6:72:7c:28:06:a6:
                    5f:7d:a2:e8:ef:02:75:eb:14:b1:9f:61:59:92:94:
                    fc:d2:9e:53:b5:9d:8f:6c:1c:c5:42:3a:bc:a1:77:
                    39:72:21:6a:14:ec:03:61:0a:5c:72:f7:c0:bf:fd:
                    71:17:40:51:34:99:41:27:ce:2c:33:85:54:23:e8:
                    9c:39:af:7f:95:d9:7d:ae:ae:4e:86:77:3b:e6:f3:
                    f7:67:da:d2:3c:ba:92:4f:7e:ba:05:9a:b6:49:b7:
                    88:c1:ca:96:8f:40:75:7d:87:db:e4:f5:75:e8:8b:
                    c0:28:d5:ec:e5:5c:62:ac:52:f5:a3:30:bc:81:bc:
                    ac:98:6b:f8:a3:95:55:2f:ab:e5:54:d0:d6:8f:ed:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7A:9B:9B:CC:9A:29:89:DB:49:0A:16:4F:94:57:32:01:27:3B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/a58e149d-27d2-3647-8aaf-29d25e3d4158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl

            X509v3 Authority Key Identifier:
                keyid:EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fe:99:7d:30:07:2f:17:dd:2f:7d:ce:47:4f:3d:21:ea:e6:
         0d:1f:de:2e:5c:4c:e5:5d:aa:3b:7d:af:b7:ca:d5:6f:f4:37:
         96:bc:7a:2a:57:b4:55:2b:88:80:48:bc:8d:70:eb:c5:42:80:
         12:04:06:a8:75:6c:0a:a7:5e:72:14:0c:3e:2c:86:bd:ea:ac:
         31:cb:21:19:61:6c:26:a3:82:44:62:b9:cc:b2:19:36:48:4b:
         bd:04:49:56:ff:14:b4:22:74:f7:49:4e:fc:55:d8:7f:e2:a4:
         3b:19:ce:2e:51:92:11:20:80:5b:d9:62:28:e9:a4:08:5e:d6:
         b2:50:25:35:e3:22:5e:35:c8:15:40:a9:dd:fb:29:61:f9:f1:
         16:6f:cb:c7:69:55:ee:e5:2b:db:5e:67:17:7d:4c:fa:40:cb:
         12:7b:2e:e7:c8:f7:93:3c:ea:e6:fa:ab:17:c1:9a:3a:56:a5:
         73:74:dc:75:2a:f7:d3:28:25:df:e8:8d:02:f5:6e:e0:2b:cc:
         3e:ab:8a:de:12:c0:80:66:49:38:b2:77:e2:2c:5b:bf:ec:3b:
         5f:e4:4b:83:c0:60:79:40:c0:c9:f2:bf:98:45:6b:cc:72:60:
         4f:7e:40:b2:0d:27:38:f3:60:e8:d1:60:ba:db:55:50:b8:bf:
         fc:56:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:09 2026 by rpki-client