Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10cf7b3d-a2ce-32eb-a0ea-db5dd9d77bb0.roa
File:                     10cf7b3d-a2ce-32eb-a0ea-db5dd9d77bb0.roa (raw, json)
Hash identifier:          mVLDFunWUlTCNwS9pJ77LYjZMb6DxUBX3LAbYJTXMyw=
Subject key identifier:   15:D3:55:CB:48:F0:78:11:12:4E:33:25:C5:1C:BC:B8:6B:25:3A:50
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D3DFF9219F0DFE45015587400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10cf7b3d-a2ce-32eb-a0ea-db5dd9d77bb0.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     7029
IP address blocks:        98.17.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:92:19:f0:df:e4:50:15:58:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b9016895-0a32-4a1e-bf12-f736b11a78f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:a8:45:3d:20:f4:d4:57:ae:bb:4c:31:aa:
                    91:24:d5:65:98:21:2e:96:df:28:d4:99:b9:b3:b7:
                    0b:48:84:23:cf:40:c7:9a:7a:49:e2:e0:06:ce:1d:
                    86:06:85:ba:98:55:2e:73:00:75:df:08:5b:96:e3:
                    cc:c5:6b:6e:5d:fd:a7:ae:25:9b:82:4e:69:b2:1f:
                    a8:11:ee:62:6b:b9:8e:a7:e7:c5:28:c4:c8:18:e4:
                    6e:5e:a5:73:6b:d9:0f:15:dd:0a:a3:2b:14:2a:3d:
                    d3:49:91:06:f6:41:0d:75:9f:43:5b:a2:c6:f2:63:
                    6c:50:2e:e6:54:f5:1a:65:18:ca:5f:f4:50:6e:11:
                    f2:76:ae:85:be:d2:5f:72:4f:eb:ba:05:e9:c7:25:
                    86:eb:13:63:92:47:af:bf:e3:d9:57:c8:c3:de:5a:
                    0a:fe:8a:82:1a:51:50:e7:ea:ce:29:a6:22:48:c8:
                    88:3e:f0:9e:5b:25:90:7a:69:4b:53:6c:71:31:32:
                    c3:ea:b2:f0:5b:4c:10:0a:2f:ef:43:a2:74:33:62:
                    91:20:74:17:74:fe:e0:23:45:b7:6d:5f:80:d6:88:
                    6b:b6:e5:e6:5f:29:f1:52:e6:e0:18:23:bd:49:c2:
                    09:fa:30:67:73:35:cb:ac:39:8b:f8:be:f3:8b:ea:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D3:55:CB:48:F0:78:11:12:4E:33:25:C5:1C:BC:B8:6B:25:3A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10cf7b3d-a2ce-32eb-a0ea-db5dd9d77bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:03:16:8d:0f:95:dd:92:49:75:7b:7e:ff:ca:05:e7:29:13:
         5c:85:a5:e5:9c:a8:36:8e:70:ed:f8:40:a4:6e:54:21:e6:d9:
         dc:b6:33:e2:b1:be:35:df:95:e0:23:5d:f6:5c:dc:e1:a5:93:
         84:3d:12:de:f7:35:a3:06:2c:39:0d:15:1d:c9:d8:6c:4d:8a:
         ba:7e:f7:9a:7d:1d:2b:bf:97:d6:52:b1:f4:34:b8:b2:15:e4:
         25:f7:cf:f3:fd:8e:fc:d5:ab:17:fd:cc:a0:16:7e:ce:c4:b1:
         71:24:58:da:3a:e9:70:0b:37:da:d8:00:00:66:25:83:f6:cb:
         32:d6:e6:7c:be:98:63:c1:0d:d3:58:3a:6d:6b:71:1c:9d:e7:
         20:8b:49:02:39:3e:e1:dd:e8:ba:38:81:70:e4:7b:25:e7:cb:
         32:83:55:05:47:fa:38:77:8c:36:c5:80:e3:8b:b0:15:fc:5e:
         ec:45:fa:bf:94:5b:13:c4:0c:3b:57:20:bf:0e:00:0b:a2:7e:
         35:35:09:d0:c5:50:b6:4c:d7:3e:46:85:04:a3:08:49:fa:de:
         e9:cd:78:f8:64:67:87:5c:a2:88:2d:64:de:7a:2e:9f:30:d2:
         d0:92:10:8c:f3:87:68:eb:8b:81:4f:44:a5:08:80:18:9d:f6:
         83:42:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:52 2026 by rpki-client