Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/98b4e7b4-08bc-3923-bf80-ee41ae1f5225.roa
File:                     98b4e7b4-08bc-3923-bf80-ee41ae1f5225.roa (raw, json)
Hash identifier:          fADMBORNUuwIt1NO9OWsTAquLuE1FdLV0uGiCJywTDU=
Subject key identifier:   50:F2:DF:77:11:5F:77:E3:23:B2:02:D7:E1:33:79:6D:40:42:97:BB
Certificate issuer:       /CN=f97b644e-a01f-43c5-83e0-146254941d5f
Certificate serial:       010D0C9F4328584D237A6A35C673D501F7465440
Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/98b4e7b4-08bc-3923-bf80-ee41ae1f5225.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     36290
IP address blocks:        208.70.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:6a:35:c6:73:d5:01:f7:46:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=61c0ff10-61ce-4cd1-91f1-fc568fecf7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:34:25:c7:59:a0:a1:01:93:f5:34:c5:76:
                    cf:57:fb:d7:ae:42:da:fb:0e:97:70:a7:9e:56:90:
                    fb:8d:c1:c2:36:88:c8:29:48:bc:cb:89:00:7f:5f:
                    d8:6f:7b:46:e4:4f:9d:d5:65:33:18:e4:9b:d0:b1:
                    82:a0:d9:e5:13:96:a2:b1:10:78:a8:40:36:3d:4d:
                    e6:64:05:6e:be:27:2b:7e:0d:a7:9f:f8:ff:db:3e:
                    51:bb:c8:75:d0:bb:cb:0a:4a:97:f4:6d:5d:98:b7:
                    0b:8a:e6:1f:ce:12:65:9b:b8:53:a4:d6:5b:25:48:
                    65:22:43:32:21:7a:25:d9:b5:c1:8e:49:bc:b2:d1:
                    42:5a:1b:47:ec:e8:09:ee:b1:d9:96:a8:7d:69:80:
                    9d:63:e9:1c:d3:44:c1:6c:ea:02:c6:13:5c:5b:da:
                    a1:fe:fa:0b:87:73:73:18:24:ff:33:9d:42:5a:80:
                    18:a0:8c:c0:79:8d:f1:44:78:c3:e3:9c:bd:b3:67:
                    f8:00:4b:c4:5f:81:9a:aa:b6:c4:c2:01:8a:47:7d:
                    98:d5:7a:f7:bf:bd:20:ec:e7:b2:57:bf:d4:5d:ee:
                    6c:b7:cd:87:ef:66:a8:cf:b4:a7:1a:3a:a4:00:0f:
                    2a:48:2c:fd:1d:e7:06:87:a9:42:53:7b:20:20:6c:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F2:DF:77:11:5F:77:E3:23:B2:02:D7:E1:33:79:6D:40:42:97:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/98b4e7b4-08bc-3923-bf80-ee41ae1f5225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:40:88:79:1d:f7:33:66:20:5c:38:f7:0f:54:ca:43:b1:
         c2:30:3c:c4:12:b6:ea:26:31:97:f2:d4:df:6f:5f:9c:b6:48:
         c4:30:5d:64:b8:90:43:e9:df:9c:a9:83:df:d3:c2:c6:95:41:
         e9:11:07:67:04:91:f4:38:4d:ac:5c:c6:7d:20:a0:7b:ee:68:
         e3:55:4b:3d:d2:17:45:8d:fe:13:83:b4:f9:b8:57:dc:7b:df:
         37:12:94:16:db:92:76:fa:38:b8:ba:24:27:67:d4:d0:59:6d:
         c9:f6:ae:a4:d5:0b:32:b5:45:37:16:ec:f8:b4:2b:14:13:4e:
         9c:3c:c3:53:7c:5e:cb:85:c1:3a:6d:33:d1:00:1c:61:1a:a4:
         de:2b:39:d7:7f:93:01:e3:58:cc:d4:32:f1:39:d4:62:79:98:
         33:2d:e6:85:9d:db:95:f4:01:7c:d6:1c:52:dd:82:e3:c8:e7:
         20:7e:94:47:b5:5e:e8:bc:bf:6a:d6:25:08:74:86:78:d7:e6:
         16:d6:75:b5:4d:f7:c9:e8:5a:e1:54:8b:de:e6:91:f0:e8:aa:
         cf:0d:b1:8a:45:77:12:09:3c:d5:62:b1:2e:79:1f:0a:2e:5c:
         d1:71:47:7c:ce:de:93:74:6c:1a:8e:b9:f2:44:f8:d5:b8:4c:
         41:4e:a8:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemo1xnPVAfdGVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx
ZDVmMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NjFjMGZmMTAtNjFjZS00Y2QxLTkxZjEtZmM1NjhmZWNmN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdw0JcdZoKEBk/U0xXbPV/vXrkLa+w6XcKee
VpD7jcHCNojIKUi8y4kAf1/Yb3tG5E+d1WUzGOSb0LGCoNnlE5aisRB4qEA2PU3m
ZAVuvicrfg2nn/j/2z5Ru8h10LvLCkqX9G1dmLcLiuYfzhJlm7hTpNZbJUhlIkMy
IXol2bXBjkm8stFCWhtH7OgJ7rHZlqh9aYCdY+kc00TBbOoCxhNcW9qh/voLh3Nz
GCT/M51CWoAYoIzAeY3xRHjD45y9s2f4AEvEX4GaqrbEwgGKR32Y1Xr3v70g7Oey
V7/UXe5st82H72aoz7SnGjqkAA8qSCz9HecGh6lCU3sgIGydFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDy33cRX3fjI7IC1+EzeW1AQpe7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi
NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvOThiNGU3YjQtMDhiYy0z
OTIzLWJmODAtZWU0MWFlMWY1MjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz
ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0
MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy
NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKp4QIh5HfczZiBcOPcPVMpDscIwPMQStuomMZfy1N9vX5y2SMQwXWS4
kEPp35ypg9/TwsaVQekRB2cEkfQ4Taxcxn0goHvuaONVSz3SF0WN/hODtPm4V9x7
3zcSlBbbknb6OLi6JCdn1NBZbcn2rqTVCzK1RTcW7Pi0KxQTTpw8w1N8XsuFwTpt
M9EAHGEapN4rOdd/kwHjWMzUMvE51GJ5mDMt5oWd25X0AXzWHFLdguPI5yB+lEe1
Xui8v2rWJQh0hnjX5hbWdbVN98noWuFUi97mkfDoqs8NsYpFdxIJPNVisS55Hwou
XNFxR3zO3pN0bBqOufJE+NW4TEFOqI8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:10 2026 by rpki-client