Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa
File:                     99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa (raw, json)
Hash identifier:          SB1DCNxgOQt2vbTgArGQBgUArn627wpSI1a5Ps2tKcA=
Subject key identifier:   E0:65:E3:AE:EE:CC:42:39:19:84:4D:3D:5D:08:A4:0D:0E:9F:D1:FC
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584E66DA05E6676E644E5C109080
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     174
IP address blocks:        216.98.226.0/24 maxlen: 24
                          216.98.227.0/24 maxlen: 24
                          216.98.228.0/24 maxlen: 24
                          216.98.229.0/24 maxlen: 24
                          216.98.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:05:e6:67:6e:64:4e:5c:10:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=731d2204-84a0-4755-8b69-1882000225a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:87:b6:0f:a8:10:31:76:6e:c2:5e:09:f0:
                    27:81:5d:91:ca:06:ee:8e:34:e7:69:de:18:3e:46:
                    a4:94:75:67:7b:f8:72:92:8d:dc:32:23:20:a3:f2:
                    83:3b:91:30:21:53:16:f9:7b:93:0a:0e:ba:e4:90:
                    03:03:48:89:6f:32:62:35:8e:e9:36:6b:46:b5:c0:
                    41:85:b2:e8:58:59:23:1d:0f:47:31:a9:55:ef:6c:
                    96:59:ee:11:11:a6:22:6d:f7:d8:82:79:5f:50:b3:
                    fc:00:31:69:72:b2:14:3e:c5:16:a0:36:52:6a:23:
                    f2:da:b7:04:d3:da:af:7d:0b:9f:a3:8a:42:fa:17:
                    ca:9e:9d:c9:61:22:0a:5f:22:f5:f3:d1:02:fd:9b:
                    f2:f0:9b:94:3c:d5:01:bc:d8:21:65:f9:ed:24:1c:
                    ff:b9:79:4f:39:a1:d5:c8:38:38:04:9d:a1:4a:5d:
                    e3:df:dc:4c:8e:e2:7f:84:a6:11:bf:83:d2:e2:f6:
                    0a:6f:a3:77:8e:7c:9a:fb:a2:a5:1a:c4:c6:d5:05:
                    c2:3b:00:22:11:f0:b2:85:1d:45:8b:05:8a:dd:0a:
                    f8:3e:66:e8:ee:12:79:24:da:0f:bd:6a:81:98:e9:
                    ac:64:98:34:3c:4c:1b:aa:42:cc:52:f8:f2:66:08:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:65:E3:AE:EE:CC:42:39:19:84:4D:3D:5D:08:A4:0D:0E:9F:D1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.226.0-216.98.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:72:d9:71:e9:d3:d8:6e:fe:94:2b:35:c7:71:0e:f1:15:4e:
         ff:81:4d:3b:47:df:9f:5c:70:30:0e:1c:2a:57:15:2d:04:b3:
         5f:69:d8:29:00:9e:f8:0e:06:c7:7e:9d:c0:7f:87:fa:4d:ea:
         28:98:1e:e8:2d:82:00:2c:23:18:08:3f:8f:55:f4:26:dd:21:
         2c:91:f7:5d:d6:3d:d9:ca:60:10:a3:2e:9b:b0:45:49:97:93:
         bc:fe:b3:a4:d5:07:d7:0c:fe:6a:77:8e:e4:8c:a0:60:80:26:
         6f:cb:4e:c7:ed:ee:5f:6d:08:7d:b2:e8:1c:a1:31:c0:d4:09:
         46:61:70:e5:e0:f1:08:06:f5:01:1b:c2:9c:cb:0c:a0:2d:2b:
         ea:9c:04:97:88:bc:2e:c8:19:ef:72:b4:17:ec:68:3b:05:00:
         49:b6:b3:48:9d:57:0e:56:5a:6f:8e:e5:1c:1d:ad:c1:44:a7:
         80:9b:a7:fd:dc:8f:d1:8b:8a:5d:42:62:8f:3f:d4:f0:88:7e:
         af:73:f6:18:2d:f8:c2:80:26:80:7e:53:98:7b:d0:4c:b8:9e:
         10:63:d6:60:af:8c:aa:42:c2:3e:9b:69:4b:0a:44:84:d7:85:
         c8:a5:ee:84:c6:c0:01:b3:c6:c8:54:6a:c8:16:10:ec:03:8b:
         23:40:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:20 2026 by rpki-client