Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/653f3ba7-c395-3852-bd4d-3684cf87f35c.roa
File:                     653f3ba7-c395-3852-bd4d-3684cf87f35c.roa (raw, json)
Hash identifier:          e4M6fQnMSYP81Ac5M6Rk4LVu4BsQ6WHSy/GahtL4EEY=
Subject key identifier:   36:12:08:F8:E8:16:9B:00:DD:D3:F9:C3:85:7A:4B:F8:41:B5:FD:56
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584E4AEF3400153867CE53831340
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/653f3ba7-c395-3852-bd4d-3684cf87f35c.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     213122
IP address blocks:        144.172.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:34:00:15:38:67:ce:53:83:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c87bfeb0-84d3-4205-8b7e-06a25497d322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:48:5e:de:e0:da:6e:2d:7a:98:bf:74:41:
                    2e:9d:dc:1f:90:81:86:3b:5c:78:e2:8b:12:62:e6:
                    c5:cc:bc:1f:51:82:d6:c2:82:6f:db:28:e5:8f:2e:
                    b8:ad:e9:d4:49:b3:62:df:82:85:95:6b:4c:26:94:
                    de:ad:00:0f:fa:3c:b2:87:25:f3:bf:07:4d:5e:88:
                    f8:51:59:36:e4:77:48:c0:f6:3f:f0:cd:41:b1:0e:
                    eb:7b:6e:ec:ce:04:8e:26:ed:1b:d7:6d:1c:d0:96:
                    c2:18:64:a4:4b:a2:83:8f:19:f4:a4:d9:96:31:09:
                    c7:87:ca:e5:35:5e:19:80:90:7e:2a:4b:da:f6:48:
                    f2:d2:8c:15:f1:3e:27:18:89:cc:b1:6f:1f:13:7b:
                    7a:88:be:3a:0d:87:ab:34:78:fc:34:9d:09:f7:7e:
                    8d:07:59:52:9e:43:4d:cc:ae:a2:25:03:c3:9b:3d:
                    79:2e:b0:cd:f7:1b:82:06:33:81:0f:64:88:4f:9a:
                    38:74:a6:7f:17:65:f0:26:59:1a:9a:d2:0c:9d:1a:
                    c9:c8:fd:d7:7e:2f:29:23:27:54:fb:05:95:3d:3c:
                    b3:26:52:5d:a2:20:cb:68:96:7b:c8:ce:7c:91:2a:
                    67:16:61:2c:ef:35:db:93:15:8f:31:92:5b:e5:f8:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:08:F8:E8:16:9B:00:DD:D3:F9:C3:85:7A:4B:F8:41:B5:FD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/653f3ba7-c395-3852-bd4d-3684cf87f35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:7e:c3:ae:f2:16:51:69:b5:a2:bd:dc:df:b7:dd:91:e3:
         c8:01:be:2e:67:01:12:61:3e:5a:e2:12:26:fa:77:9f:db:bf:
         90:84:a0:a2:14:95:89:d0:14:bb:ba:fd:f2:fa:6f:9b:b9:f6:
         cc:76:12:d2:d4:b5:25:0d:58:eb:a0:43:fe:ff:77:e7:90:90:
         a2:9f:11:34:b3:f6:c3:03:a7:dc:12:54:fe:a2:30:92:33:59:
         39:26:ef:66:3c:ab:c0:94:f7:2b:eb:83:5a:32:a7:78:c9:23:
         34:9c:04:cc:7e:ce:a2:4b:a1:82:5b:b9:3b:d6:43:e2:f6:6b:
         8f:ac:3c:8f:48:3a:40:0c:95:a2:19:ab:e4:cb:41:7c:89:cf:
         41:6f:12:7f:8a:72:be:54:d3:6f:30:a7:e5:33:df:67:d4:e0:
         ad:07:84:64:0b:32:84:c4:34:6d:7b:02:c0:61:61:a3:4f:41:
         13:31:d1:7b:39:d3:3e:50:c2:c6:85:be:00:08:4b:4f:a6:e9:
         f3:b2:93:08:2b:97:99:6e:50:6f:2d:1d:f2:e4:4d:bd:3a:be:
         76:cb:11:18:56:33:5b:25:81:c9:27:58:55:0b:fa:0f:42:c8:
         28:b1:1c:c2:39:61:b9:35:a4:c5:b4:ec:04:89:c7:fd:9e:01:
         0a:c1:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:12:10 2026 by rpki-client