Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/b1e69160-db79-3d9e-a04f-f938ef3def0c.roa
File:                     b1e69160-db79-3d9e-a04f-f938ef3def0c.roa (raw, json)
Hash identifier:          upBXc9ZCHzau3RVUJ7cynVA7PvoQD6jSv7wW3vWtscQ=
Subject key identifier:   4B:BB:94:48:6E:6B:1F:B4:DB:21:90:40:20:DB:24:77:F7:4A:A9:B7
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584DA11AAD54D14B58588073ACC0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/b1e69160-db79-3d9e-a04f-f938ef3def0c.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     14956
IP address blocks:        144.172.106.0/24 maxlen: 24
                          144.172.107.0/24 maxlen: 24
                          144.172.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:ad:54:d1:4b:58:58:80:73:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=f5572329-bfa2-4008-bb15-d4c90af0e594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:28:ea:c3:5d:08:54:67:f8:ca:55:1e:7f:
                    e2:54:7d:7f:09:bc:45:f4:4a:f3:89:69:3f:c9:94:
                    16:0b:d7:33:db:31:a8:f1:b0:bb:82:ce:b8:a3:01:
                    b2:d2:0b:53:e4:47:2c:ed:2d:2f:27:63:73:79:1c:
                    f7:17:d2:21:ee:1c:8f:33:21:c3:f9:ce:5a:0e:a0:
                    25:83:2a:20:de:20:f3:6a:8d:7a:2a:e4:d8:b5:92:
                    cc:d7:b7:f8:86:aa:f9:ab:a4:3c:50:55:6f:b3:5b:
                    94:14:b8:de:d4:95:99:58:47:bc:1d:4e:46:9c:3b:
                    53:9e:65:2b:3d:41:a1:65:a2:71:01:d6:0e:7c:89:
                    89:1f:5f:ef:82:8f:d9:56:89:7e:50:6b:04:5a:17:
                    9e:ac:5d:4d:77:62:d1:cc:ae:96:dc:90:f3:6c:db:
                    7a:83:61:7f:14:1a:5e:b2:d2:ed:f3:98:fd:3b:63:
                    a1:7e:6b:39:e0:76:f7:88:22:ae:7f:8b:72:3a:a1:
                    63:4f:4d:28:82:4a:1a:98:0a:1b:f8:03:00:02:0f:
                    9a:8e:60:e6:91:11:16:cb:2c:61:17:32:94:df:fe:
                    d8:8e:12:80:a9:b7:60:14:61:e4:f0:39:b6:b7:0a:
                    16:a5:7c:3d:10:e7:87:0a:84:5b:50:97:2e:26:a0:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:94:48:6E:6B:1F:B4:DB:21:90:40:20:DB:24:77:F7:4A:A9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/b1e69160-db79-3d9e-a04f-f938ef3def0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.106.0/23
                  144.172.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:b2:19:f4:ca:11:a5:71:7e:55:be:4a:56:f6:12:41:8a:
         8c:53:64:47:9f:7a:7f:10:42:c5:c1:de:7d:29:2f:18:17:55:
         df:68:47:62:fa:ab:23:b5:d3:72:a0:fb:06:64:6c:bd:6d:ea:
         14:d7:b4:ba:9a:fe:c3:ea:78:0c:a5:39:c2:00:9c:01:d7:66:
         dc:b2:e6:91:b4:11:5e:12:1b:2b:47:8b:64:35:80:1d:9a:f0:
         21:9e:48:bf:01:01:0f:1a:bf:b9:b0:d4:b8:33:5e:26:1d:e3:
         20:af:1f:5c:69:bd:99:53:81:e2:f4:53:ce:83:f7:e5:52:e9:
         e7:c4:c8:42:f2:69:77:ea:7a:4a:fc:79:ac:1f:99:8e:dd:91:
         5c:16:86:34:4e:5a:e4:ce:c8:eb:f9:4f:45:85:20:4e:14:d8:
         9a:4b:42:48:e0:46:4e:d7:2b:38:1d:d1:5b:cb:71:01:99:f8:
         05:a7:3c:57:65:af:3c:3d:74:17:04:fb:74:16:6a:80:6f:33:
         c3:3f:f2:62:81:be:c6:ce:b2:ad:7e:44:8f:c5:d9:36:be:35:
         29:7b:05:b9:32:a1:00:eb:a0:72:da:1b:3a:d8:43:ea:29:85:
         82:03:61:52:33:84:cd:69:b8:7c:8a:ed:57:c5:b7:5f:7a:b0:
         e6:40:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 20:10:03 2026 by rpki-client