Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/09cc1575-76c9-3013-869c-60560a4d603d.roa
File:                     09cc1575-76c9-3013-869c-60560a4d603d.roa (raw, json)
Hash identifier:          m/psqC0BqBDZEmkQEb0P281l7Cv83vq9GhnLShQpWMM=
Subject key identifier:   C6:B0:6E:1D:EA:68:CC:EC:B4:06:D1:23:47:D9:81:83:9F:49:12:3C
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584F4987BB34BF59817B4C589DC0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/09cc1575-76c9-3013-869c-60560a4d603d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26337
IP address blocks:        104.254.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:bb:34:bf:59:81:7b:4c:58:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b260c7a0-f455-4280-b300-995f0efd5329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5a:0e:8d:9f:e6:5f:08:9a:0b:72:f3:18:ee:
                    93:df:cc:53:0c:f9:4e:b3:2d:7e:70:e8:6a:66:71:
                    ab:c9:db:42:96:a6:8d:8f:dc:68:a6:73:6d:22:f0:
                    8b:cc:68:8e:ce:2a:57:d7:96:65:90:90:c1:33:7b:
                    7b:40:c4:e2:5b:10:62:b9:81:13:2f:84:5d:02:c2:
                    4c:54:aa:95:83:51:6a:aa:cd:dd:98:0a:3e:e1:33:
                    e7:d5:54:30:cf:b1:75:c5:cb:22:bc:71:07:9a:33:
                    23:f9:a7:1d:79:a3:f8:8a:2c:17:f5:af:a0:ef:db:
                    93:0e:37:b7:7e:93:ec:1f:ea:88:d4:3b:33:d5:4e:
                    e4:a5:67:2f:77:38:fd:82:4c:27:d3:b0:58:8c:cf:
                    5e:26:48:81:ea:5f:c4:72:06:80:2b:19:d8:49:60:
                    ff:ce:c8:59:ae:24:c8:81:3f:86:e7:33:4c:a5:b9:
                    ad:65:a7:19:33:34:89:d7:56:b9:5a:1c:27:e9:91:
                    bb:d8:fd:8e:f7:ed:b0:16:0d:53:76:26:92:d2:47:
                    47:ae:52:6a:79:c9:6c:44:c2:2d:de:ba:6d:c9:4d:
                    64:01:e8:07:a2:59:15:34:b0:67:d3:69:c7:b2:5a:
                    f3:1d:55:54:65:2a:8d:c7:31:49:d5:97:cb:3c:9b:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B0:6E:1D:EA:68:CC:EC:B4:06:D1:23:47:D9:81:83:9F:49:12:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/09cc1575-76c9-3013-869c-60560a4d603d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d4:21:db:7a:e7:2b:b4:b9:d1:28:c6:6f:2b:36:35:18:47:
         6f:4d:54:17:e7:f8:15:f1:49:a9:77:64:bb:21:28:23:5c:96:
         42:bd:34:73:06:15:15:da:94:9e:e9:7b:a3:08:5c:dd:38:70:
         bb:ab:fc:f3:df:cf:73:a9:aa:35:12:c2:e2:34:c8:73:22:d4:
         00:d2:d8:65:be:de:8b:f0:aa:80:f0:df:8a:bf:7d:e4:21:f2:
         97:0d:72:ac:2c:2a:45:b0:94:2b:e3:b8:13:ea:ee:4d:cd:a6:
         d1:59:3c:bb:12:eb:90:f3:2a:1d:6a:99:d9:f4:8c:f4:98:05:
         9b:55:b1:36:6b:70:69:db:8c:94:3b:a3:b3:a9:4f:27:25:0e:
         73:ea:7b:05:01:62:b8:a5:3b:3c:78:7e:a8:fc:cb:39:a6:28:
         30:75:89:4d:5c:e0:18:40:ad:b7:d1:d5:51:39:2c:ee:7c:57:
         2d:09:c4:a8:8d:0d:56:99:70:17:a5:6d:58:8c:ed:76:90:51:
         81:1e:4b:42:43:14:4c:6c:8a:d6:c8:03:a0:ac:e9:2b:f5:83:
         ab:29:ea:2c:3e:38:00:bd:1e:77:35:52:1c:12:a5:e7:28:8e:
         6e:43:21:87:a9:71:33:34:8c:b9:46:ed:a4:aa:20:d0:c0:5a:
         e3:a3:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:57:30 2026 by rpki-client