Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa
File:                     da636073-8693-3554-9dac-9a99a0593989.roa (raw, json)
Hash identifier:          TbdVmz/e7lWGft5/mAYYE3n2aydhtf8uRGbfEs1lbJg=
Subject key identifier:   07:0F:B7:24:EE:77:7D:01:1B:6F:E3:5F:B9:99:D8:58:26:08:75:87
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D2644C6E7FB8695C47E010B00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     25961
IP address blocks:        98.142.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c6:e7:fb:86:95:c4:7e:01:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=a097ba8a-b296-45e6-8fdf-41e9bf80813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:cb:93:86:5a:55:d1:3c:0b:0b:66:c6:96:
                    5a:2d:bc:7d:b4:46:38:b9:2e:e7:09:a0:54:01:58:
                    9e:08:7d:1f:b9:c9:d4:2b:09:1d:41:3b:eb:7f:b6:
                    99:66:52:ab:f7:f3:83:6a:d0:5a:82:64:6b:2f:ad:
                    f2:0c:4d:ed:12:14:91:6e:9c:fa:36:8a:ec:5a:db:
                    fa:1f:b1:22:c1:f9:1c:eb:12:85:83:48:69:84:0b:
                    8a:6a:bf:ba:76:12:ad:47:41:24:5b:2e:1b:3e:09:
                    4e:30:a4:a9:8a:f0:e5:12:5c:e1:82:fb:a5:3c:28:
                    66:2b:7f:c3:7f:84:b3:f0:58:e7:25:04:f1:dc:a8:
                    c3:bc:f6:ae:a1:a5:ba:3d:30:f1:6a:dc:8a:c4:8c:
                    6c:35:66:49:3f:54:a5:60:5b:ce:e6:52:a1:2d:8f:
                    da:28:79:56:fc:bf:a1:60:66:21:d6:b0:2c:12:dc:
                    f0:05:1c:a0:1c:a4:0f:87:8e:c0:92:70:eb:ba:e6:
                    45:39:49:b4:f9:f5:c1:09:21:56:49:fc:29:42:eb:
                    32:21:55:ee:67:ee:56:e4:1d:44:c7:cc:68:8e:dc:
                    c6:b9:9f:a5:8c:43:05:7c:0a:90:06:36:fd:41:6d:
                    c4:b6:1a:7d:0a:e4:3a:fb:13:28:39:6b:1b:ca:f1:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:B7:24:EE:77:7D:01:1B:6F:E3:5F:B9:99:D8:58:26:08:75:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:62:8a:74:b3:a2:79:96:a3:5e:a0:a8:f7:19:74:62:31:
         ea:83:88:39:16:b7:4f:be:a7:bc:c8:c0:29:79:c1:f4:ed:96:
         fa:2a:5a:01:a7:0d:de:a3:10:af:dd:78:1c:6d:48:d6:e0:d5:
         d1:b0:bf:77:57:a7:e5:45:da:96:bb:6b:15:f2:f3:6a:36:1a:
         78:eb:31:dc:72:ba:e1:79:77:10:40:74:c8:24:c9:28:9c:4f:
         41:f8:77:88:51:28:67:22:cc:7a:3e:8b:32:a4:d2:9b:00:de:
         22:f0:f9:4b:f6:92:8c:5f:52:f9:f6:3d:6b:ef:af:6b:ed:f3:
         e6:f1:fa:65:af:c8:75:7b:00:ef:99:03:44:63:99:0f:e2:0a:
         c8:8f:dc:ac:f1:4e:c3:87:ef:f3:7a:4a:fb:4a:74:9e:fb:84:
         45:65:2d:23:47:4a:57:96:88:f9:bc:0d:e5:d9:b1:32:5c:3f:
         0e:0b:28:fa:98:04:0f:6f:ba:c8:d0:40:ec:17:81:8a:36:35:
         3f:af:35:d7:f1:5d:df:c6:3c:95:0e:2f:49:34:d9:87:62:58:
         e4:ce:31:de:19:29:63:e0:9d:99:25:fb:a7:20:63:e2:9e:6c:
         cc:80:6c:0a:7d:4b:4f:8a:59:16:93:9e:8b:3d:90:6a:20:af:
         ba:a6:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:52 2026 by rpki-client