Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cb44221e-6d75-301d-8034-5c462b952531.roa
File:                     cb44221e-6d75-301d-8034-5c462b952531.roa (raw, json)
Hash identifier:          QHTtZqlGSsXLqU61idMQ1rhy23CAL9HKpOC6P6ff+DY=
Subject key identifier:   AD:2A:2C:FD:AA:08:1D:2D:07:3D:B3:76:67:39:5A:A6:46:E0:4F:C8
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584EC371C45110F65E47FB150CF0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cb44221e-6d75-301d-8034-5c462b952531.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     198983
IP address blocks:        45.61.152.0/22 maxlen: 24
                          104.194.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c4:51:10:f6:5e:47:fb:15:0c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=c6652c14-478d-4ef2-a7ab-0282d3e588a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:1b:11:69:a9:bd:5c:ed:d8:66:07:60:af:
                    dc:12:22:98:90:ac:6c:c2:31:0f:59:b0:d4:83:ce:
                    c0:0b:e7:21:a1:eb:85:af:26:f5:03:5f:df:86:d8:
                    d2:a0:55:21:86:32:8d:4c:03:bc:ce:30:5d:d9:63:
                    93:47:d5:ee:d1:06:43:ae:ab:79:7e:61:e4:58:6a:
                    36:79:41:04:c7:7c:ee:e0:fc:50:a2:a4:42:41:82:
                    17:76:fa:f1:26:7a:75:95:58:fc:28:7f:45:d9:61:
                    a4:86:8d:75:ea:7c:65:ec:b1:54:ee:72:37:38:50:
                    a6:f9:f7:a7:9c:04:a1:28:76:82:83:77:a5:a8:95:
                    58:11:e0:2f:cb:96:62:48:59:c1:e0:81:76:97:06:
                    71:42:ef:42:7e:2d:ed:70:5b:b9:2d:c6:e2:b6:9a:
                    ca:5f:ed:9b:16:09:0e:ed:3c:f6:1c:7e:76:e7:84:
                    55:e9:84:63:9c:43:d6:47:40:2f:b1:56:fd:bd:c1:
                    ce:03:1e:d8:81:23:94:04:7e:c3:21:8e:49:ec:e1:
                    e4:a9:f5:bc:0e:96:99:84:63:de:29:bb:9b:af:56:
                    e8:50:6c:e8:48:11:cc:c8:3f:28:52:8e:2f:22:2e:
                    04:d5:b3:7b:ac:37:03:b3:bc:00:0b:28:b4:a1:eb:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2A:2C:FD:AA:08:1D:2D:07:3D:B3:76:67:39:5A:A6:46:E0:4F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cb44221e-6d75-301d-8034-5c462b952531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.152.0/22
                  104.194.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:13:de:1a:f3:37:42:9b:8a:0f:9f:7d:17:2d:6c:27:4d:49:
         93:46:f0:f1:8b:49:d2:ee:08:24:90:7c:d6:28:de:bb:28:8b:
         0e:0b:c6:fd:01:eb:2a:ff:f6:f1:6e:03:9c:0f:da:1c:fc:0d:
         81:86:29:06:8e:c3:b4:ae:8c:58:62:99:95:6b:b0:00:63:6e:
         3b:af:fe:bc:a4:7e:7f:d0:c0:3e:41:66:6a:30:85:ef:af:96:
         8e:f7:51:96:bf:25:f5:60:96:f7:c8:18:b5:84:c6:bb:88:4c:
         d0:16:46:43:cd:40:9e:9d:ae:5d:1d:20:af:00:41:28:45:15:
         b3:77:85:96:9e:e3:62:71:5c:63:93:bf:7a:4e:34:41:68:97:
         c0:10:21:e5:0b:54:62:44:42:d0:a8:ed:64:59:70:d3:c8:41:
         fc:47:a1:f7:78:dc:92:97:ba:a7:03:ff:01:ee:3c:3f:db:f0:
         00:23:69:3e:41:81:d7:97:c5:9e:ee:98:99:00:63:f6:ac:e3:
         3b:62:d7:a9:e0:f5:1c:b8:c4:4b:9f:e8:dd:4e:62:32:64:99:
         a9:26:38:d9:c1:21:32:ab:89:c8:64:c9:01:94:02:74:57:55:
         0c:ce:16:d0:18:5c:df:44:1d:b9:c2:1a:b8:04:95:39:85:62:
         63:f3:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 23:32:19 2026 by rpki-client