Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
File:                     ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa (raw, json)
Hash identifier:          RvtA+H24GeFObWcy6S6yvSC7PCs25e1Bdy48wb1TUBg=
Subject key identifier:   E2:98:3C:00:A5:61:92:BB:82:4F:51:54:E8:73:2D:06:84:B5:AA:61
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328584DBBA03E74B25449FFF4369C80
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     7057
IP address blocks:        98.143.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:3e:74:b2:54:49:ff:f4:36:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=2c2df708-c0c8-4d4e-9773-48cfe0e31d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:30:71:ca:9b:17:84:a8:ad:6e:3e:f9:bf:
                    b0:ae:1b:46:66:3f:e4:2d:04:49:22:7c:13:7e:4a:
                    c5:51:73:74:c7:f8:85:92:be:7f:e5:eb:ae:f7:12:
                    f4:bd:24:b9:b8:0d:0e:41:7f:c7:30:cf:4a:4a:7f:
                    a8:25:d7:8f:3d:5c:b8:4c:41:83:27:7b:ab:f6:08:
                    84:e5:b6:9c:b3:a4:8d:a9:89:28:0a:ff:af:6a:e2:
                    4e:12:bc:8e:e1:76:fd:d8:7c:91:44:55:ad:1e:e8:
                    d3:6f:16:58:b2:54:71:e2:60:e3:27:5e:55:50:5b:
                    ee:0e:c0:3a:1d:42:c1:eb:e2:a3:74:6a:5b:71:2d:
                    ee:65:8b:fa:cd:b4:7d:62:23:b8:6f:a3:84:04:a9:
                    40:e6:71:78:b2:fb:17:c9:9f:9a:87:17:80:59:f9:
                    2f:15:1b:dd:43:a3:d2:f2:58:5e:70:b0:e6:8a:70:
                    15:c8:e5:91:25:87:08:db:9a:c5:b8:46:5e:81:ff:
                    98:62:a5:b6:b0:2b:79:d5:53:80:54:27:de:98:ff:
                    ef:1f:25:4a:b5:e2:66:a5:71:55:50:20:55:17:1c:
                    c5:af:55:05:2e:92:dc:58:43:c1:75:1c:79:26:ed:
                    dd:94:3e:02:dd:8f:de:4c:93:76:bf:e4:bd:45:d8:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:3C:00:A5:61:92:BB:82:4F:51:54:E8:73:2D:06:84:B5:AA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:fd:17:bf:aa:16:d5:e7:56:96:b5:6b:e3:f7:1e:a1:e7:
         96:94:4b:33:92:c6:96:d7:15:3f:6b:0a:72:2a:f0:46:f8:50:
         b0:7e:d8:3a:2d:36:44:2f:6a:43:07:c0:ab:36:0d:2e:f8:54:
         e7:8e:12:30:ab:f0:c0:e6:c0:1a:5f:00:64:3c:4f:0d:3b:ab:
         ea:72:ea:fd:a7:a4:b4:61:6f:75:dc:59:84:6d:30:6c:1c:73:
         f5:13:15:be:16:b5:f8:f7:64:a2:0e:df:9b:a5:a5:50:e5:89:
         22:7b:33:98:0d:29:f6:d1:d7:c7:b1:58:8d:5c:81:f9:32:3b:
         8a:5b:f9:92:c3:ee:84:5a:d1:17:67:af:fa:01:aa:b0:e4:fc:
         fa:49:7f:2b:b8:e8:77:54:71:04:c3:c1:99:3a:8f:e2:2d:39:
         11:92:4b:4c:24:8f:e0:00:a4:62:1a:03:95:ad:9f:a2:1e:7f:
         eb:ee:c3:b3:5e:25:db:da:5a:3a:20:5f:f3:62:ff:8d:24:8c:
         e8:2f:94:20:a4:03:50:f4:53:e6:52:ab:3c:c7:65:9e:84:d4:
         3d:7b:61:22:32:5a:71:f8:d0:06:4a:28:1d:7e:26:22:66:cf:
         3e:d1:0c:a4:f3:00:4b:11:0e:eb:02:05:78:7a:d3:ca:cb:4c:
         58:47:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:36 2026 by rpki-client