Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
File:                     f54edeac-4bda-3704-bd9d-498ce46d662b.roa (raw, json)
Hash identifier:          4bXRFerlGJhAZAftbOLtxm464QbHcS/gjmvMxuPZ0ME=
Subject key identifier:   FC:1A:7C:98:87:3E:C2:AA:61:26:0E:C6:DF:45:91:54:A9:47:E7:43
Certificate issuer:       /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial:       010D0C9F4328584D1B1A191647323FD319339F00
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     152705
IP address blocks:        172.98.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:19:16:47:32:3f:d3:19:33:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=477dc333-03be-4d55-96af-ed0a5ca659b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:b3:90:a6:0f:37:c9:89:4e:2c:90:02:8b:
                    78:01:dc:7a:ea:b1:6a:5a:f3:dc:1d:35:d7:c1:3c:
                    25:63:85:bc:59:43:bc:98:3b:71:fa:5d:ac:5a:64:
                    b4:fa:7c:09:3d:da:4f:cd:d6:f1:63:0d:d0:a6:4f:
                    26:35:07:a0:34:49:50:67:2e:12:ac:68:16:77:9f:
                    31:d1:1e:6c:9a:fb:4c:d9:ff:ff:40:a2:ca:92:a0:
                    ce:63:0d:30:81:e6:78:2e:37:bd:33:80:8c:4f:d5:
                    28:77:54:1b:07:fc:85:93:5f:5b:63:ee:d6:81:9c:
                    c5:c6:81:3a:17:56:a0:f9:9c:7b:31:f5:1b:27:07:
                    01:d4:ac:52:7f:f8:e6:90:85:d9:3b:14:fc:b2:98:
                    8f:a2:0b:24:45:14:ed:5d:32:9b:26:99:e0:94:0e:
                    ff:fb:e4:03:a0:c2:05:b9:92:cf:d4:09:d1:60:ea:
                    96:8b:8a:37:6c:7f:6b:be:0e:b7:8c:0c:f1:87:50:
                    24:09:e5:38:71:37:68:7c:e1:ae:a2:9c:8b:56:b8:
                    58:db:10:80:d4:ad:e6:72:d9:86:11:e0:c0:c5:7b:
                    b4:2d:52:98:a2:ba:bd:91:bd:74:4c:56:5b:5d:13:
                    8b:09:34:71:6f:cf:6f:57:10:09:f0:a3:93:5b:b8:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1A:7C:98:87:3E:C2:AA:61:26:0E:C6:DF:45:91:54:A9:47:E7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:9b:ba:67:d4:e4:a9:a3:41:50:92:7a:2d:c9:4c:a4:18:
         a1:83:7b:cf:2d:0d:5c:29:24:49:84:51:b2:71:41:fa:50:16:
         89:50:b3:f4:ab:6c:5a:2f:4b:9e:4b:40:4e:73:0c:80:b2:cb:
         2b:58:6f:06:42:88:e0:8d:f4:d7:26:e7:da:f5:9a:b2:6c:d9:
         9d:eb:68:a5:b9:87:4f:31:5d:f6:6b:9b:30:58:61:00:e3:59:
         a9:c5:0b:0e:26:71:32:02:4b:e8:16:2f:41:2d:15:2c:e8:ce:
         9e:d1:89:83:11:78:7a:92:21:90:21:04:48:5b:06:eb:ca:67:
         7a:fa:cc:bc:1d:66:1b:72:9e:14:f5:3f:7e:88:2d:a3:c3:73:
         e9:4b:97:fb:3c:f6:24:fd:c4:a8:80:0a:be:13:31:6b:7f:c9:
         00:86:ce:42:e7:ee:c0:80:51:28:30:0a:c9:d5:94:03:8c:c1:
         b7:87:cc:1c:8e:c4:c8:db:a8:f7:19:9b:b4:7c:33:21:ae:97:
         c3:0e:a2:bb:ef:7b:aa:55:78:a4:d2:a5:cb:d1:97:e5:97:98:
         db:af:28:68:e7:ad:f1:85:c9:01:a9:47:ce:cc:ed:ed:95:0c:
         2b:f3:12:7c:78:39:7a:66:16:16:23:d7:c8:ac:d4:20:0e:68:
         94:8b:27:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhkWRzI/0xkznwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx
OGU1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
NDc3ZGMzMzMtMDNiZS00ZDU1LTk2YWYtZWQwYTVjYTY1OWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp66zkKYPN8mJTiyQAot4Adx66rFqWvPcHTXX
wTwlY4W8WUO8mDtx+l2sWmS0+nwJPdpPzdbxYw3Qpk8mNQegNElQZy4SrGgWd58x
0R5smvtM2f//QKLKkqDOYw0wgeZ4Lje9M4CMT9Uod1QbB/yFk19bY+7WgZzFxoE6
F1ag+Zx7MfUbJwcB1KxSf/jmkIXZOxT8spiPogskRRTtXTKbJpnglA7/++QDoMIF
uZLP1AnRYOqWi4o3bH9rvg63jAzxh1AkCeU4cTdofOGuopyLVrhY2xCA1K3mctmG
EeDAxXu0LVKYorq9kb10TFZbXROLCTRxb89vVxAJ8KOTW7ie1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwafJiHPsKqYSYOxt9FkVSpR+dDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx
ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvZjU0ZWRlYWMtNGJkYS0z
NzA0LWJkOWQtNDk4Y2U0NmQ2NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll
YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx
MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2
OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADv6m7pn1OSpo0FQknotyUykGKGDe88tDVwpJEmEUbJxQfpQFolQs/Sr
bFovS55LQE5zDICyyytYbwZCiOCN9Ncm59r1mrJs2Z3raKW5h08xXfZrmzBYYQDj
WanFCw4mcTICS+gWL0EtFSzozp7RiYMReHqSIZAhBEhbBuvKZ3r6zLwdZhtynhT1
P36ILaPDc+lLl/s89iT9xKiACr4TMWt/yQCGzkLn7sCAUSgwCsnVlAOMwbeHzByO
xMjbqPcZm7R8MyGul8MOorvve6pVeKTSpcvRl+WXmNuvKGjnrfGFyQGpR87M7e2V
DCvzEnx4OXpmFhYj18is1CAOaJSLJxc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:38 2026 by rpki-client