Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b77b0c24-451b-33bd-877c-6aa5fd131b7d.roa
File:                     b77b0c24-451b-33bd-877c-6aa5fd131b7d.roa (raw, json)
Hash identifier:          KrvmZP+u+jVviJxw4BALJYunUa2fX58tALsl0GkFDBQ=
Subject key identifier:   18:70:E8:3E:4E:B8:73:5C:AB:74:32:2C:D6:68:51:03:72:B3:EE:1F
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584E5A49F623555D642CE8560180
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b77b0c24-451b-33bd-877c-6aa5fd131b7d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     21740
IP address blocks:        98.124.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f6:23:55:5d:64:2c:e8:56:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=a4537f78-9093-4582-937f-3b233c158b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:2f:0b:b4:00:2e:ea:26:0a:4d:b2:bd:70:
                    2c:90:3b:99:8a:cd:48:09:0b:d4:3a:e2:3b:be:71:
                    d2:27:7d:b5:67:39:d0:51:46:c7:8d:78:7c:9e:3d:
                    af:71:eb:90:69:a3:8b:4d:71:d2:7a:a8:55:15:2d:
                    bd:0a:5f:cc:50:6f:15:a4:63:c2:27:72:c1:d9:e0:
                    98:79:bf:74:55:83:68:46:ce:55:44:55:de:56:56:
                    86:9e:c8:08:19:a7:ca:35:ae:d9:4d:31:0e:c8:b6:
                    3c:36:24:4f:fa:f2:92:77:d9:78:03:ec:eb:9b:0c:
                    23:56:c0:42:e3:d4:bc:44:d8:cf:13:3f:8b:2d:37:
                    03:5c:c6:2a:74:80:93:9c:85:a9:cd:49:d8:be:aa:
                    e2:a3:a6:86:50:9d:1c:7e:a5:0a:a1:22:a6:18:94:
                    26:39:b1:04:7f:7c:b9:d2:44:c4:a3:4d:1c:ce:3c:
                    31:4e:05:5c:c2:aa:47:cf:00:f8:b3:33:bf:5c:ad:
                    01:6c:96:46:e9:7f:fd:c3:2d:3b:2b:ed:26:04:e8:
                    92:5e:55:68:df:ba:5d:9c:c0:29:35:02:bb:bd:5f:
                    6b:96:a3:d6:7a:b8:b8:c8:b9:42:d3:93:6b:bd:e6:
                    d7:01:2b:9e:c0:11:f4:e6:23:32:e1:d8:4a:28:47:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:70:E8:3E:4E:B8:73:5C:AB:74:32:2C:D6:68:51:03:72:B3:EE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b77b0c24-451b-33bd-877c-6aa5fd131b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:02:bf:d0:11:f0:39:be:28:a3:a4:02:76:56:a3:81:80:
         86:53:40:d1:48:6b:be:eb:d7:ec:14:94:25:94:3d:56:82:1e:
         19:87:c2:ef:e3:64:6f:20:8e:4c:c0:e5:e3:0b:ba:78:b1:49:
         d9:5a:52:c2:f5:41:48:94:77:ba:0b:d3:4e:1c:02:77:2d:90:
         72:b3:19:6d:5d:e9:b1:f3:9b:90:5f:f2:1e:fb:1a:be:09:19:
         b0:10:d4:02:27:1e:b8:84:53:e4:b8:0f:b1:b4:a5:ed:57:70:
         22:a8:e5:aa:2b:99:83:d5:21:bf:93:cb:25:2c:71:05:bd:d7:
         a8:54:92:f9:53:4f:9d:4f:85:cb:04:ef:29:7d:e9:2d:b5:ea:
         ac:23:ca:0e:66:85:26:55:53:43:cb:ed:6c:52:25:e5:88:af:
         ec:9b:81:54:56:37:d4:26:29:5d:11:f7:f8:48:7e:e8:4c:42:
         8d:57:bb:b0:6e:d8:f5:05:32:05:1d:2c:08:d6:45:36:e2:c9:
         40:1f:d2:bd:f2:6b:1e:8c:c7:2c:ea:86:d1:aa:48:40:2e:9d:
         4a:68:1d:d7:eb:c1:fb:83:86:71:ff:7f:77:c8:f6:f2:12:3b:
         dd:fc:84:7c:f2:fa:84:78:fb:f2:8a:6a:e1:17:17:c6:92:9d:
         fa:ac:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:52 2026 by rpki-client