Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b84034bd-48ff-302c-97af-c33a1d9747ac.roa
File:                     b84034bd-48ff-302c-97af-c33a1d9747ac.roa (raw, json)
Hash identifier:          0paPi8cKtGmHIJhlmu3eJ8wIWnu4JGLdq5KBxZmAbEY=
Subject key identifier:   FC:47:AB:40:4F:72:AF:14:80:AE:DA:41:49:72:C0:EB:3D:CF:60:C0
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584DCAFB0A08061DAF6E299BF5E0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b84034bd-48ff-302c-97af-c33a1d9747ac.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     400866
IP address blocks:        98.98.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0a:08:06:1d:af:6e:29:9b:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=81f55f5b-240b-4825-b8fa-9a4edc7fd47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:b5:8f:b4:ea:41:52:d4:e5:ee:c3:5a:b9:
                    a0:d2:50:e3:53:95:20:ca:fd:9b:1c:22:96:12:22:
                    91:bf:a2:8c:2a:5c:f0:0b:89:26:03:61:3f:fa:ef:
                    09:31:a5:d4:f8:3b:df:aa:68:17:fd:9d:a1:e5:f1:
                    16:91:b8:5d:f5:89:72:31:4d:a4:13:7e:c6:ef:0f:
                    c3:2a:b7:8b:e8:b7:56:c9:cc:c1:ed:22:c3:d5:71:
                    8b:d6:9a:66:45:de:d7:e4:80:42:f6:ce:ca:5c:26:
                    1a:12:99:2d:df:b2:9c:68:29:df:4a:fe:77:fe:b5:
                    6a:de:c2:89:53:26:15:74:33:12:46:9e:c5:f1:a3:
                    e7:c3:58:7d:25:61:32:10:9f:2e:a7:a8:0a:b4:37:
                    33:98:28:4d:d6:71:32:e0:8a:f7:2a:81:7e:9a:cb:
                    98:41:bd:da:de:04:b4:a2:77:6b:4e:b8:8a:85:cc:
                    db:87:56:11:ba:ac:a0:61:08:ff:0b:31:58:c9:bd:
                    1a:ac:fa:1e:97:11:49:cc:fc:17:1d:cb:ef:c5:f9:
                    f0:a0:8c:a4:da:2b:8c:08:65:17:47:99:8c:ff:0d:
                    7a:13:9f:85:ad:a4:25:7f:b3:1f:fe:77:b0:96:9a:
                    c5:ce:36:fc:08:f6:7f:9f:77:16:7a:3a:61:18:06:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:47:AB:40:4F:72:AF:14:80:AE:DA:41:49:72:C0:EB:3D:CF:60:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b84034bd-48ff-302c-97af-c33a1d9747ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:12:0b:dc:f9:db:77:63:d6:cf:8b:ba:c1:a0:9d:21:34:94:
         54:19:c7:85:d8:2d:b3:36:c1:df:fd:41:5b:78:9c:f5:11:7d:
         ef:88:58:88:e8:02:d3:95:54:73:12:82:b2:4b:09:41:ac:6c:
         20:d5:49:88:65:9c:e0:b1:fb:53:e2:9c:71:87:a4:3a:68:da:
         e4:5b:31:5a:27:5c:38:c1:f7:54:2b:27:52:6a:11:78:0f:86:
         87:fb:52:81:02:5e:da:70:c2:89:ac:e0:29:38:8e:ee:ef:ea:
         c9:05:6e:11:06:d0:2f:90:bd:4b:bc:9a:91:4a:8d:b9:e2:35:
         df:12:1c:76:7b:52:ad:ad:60:2c:42:53:c2:f0:c9:3d:53:a5:
         61:2c:93:5e:3c:ae:e3:12:7f:70:3c:44:30:af:09:a8:db:a2:
         4a:a1:c6:fa:73:b7:33:de:f8:fc:45:7e:6a:11:95:cc:d1:ad:
         be:02:44:5d:7d:8a:10:fc:d7:71:15:02:a2:ed:35:27:01:0f:
         72:fd:f1:b4:f7:06:c5:3d:b5:1f:39:08:80:6b:9b:64:f6:32:
         53:f9:2a:1a:fe:80:ed:06:15:97:17:22:72:fc:8d:4c:9d:90:
         25:b1:d4:9d:92:38:a5:0f:8e:a3:7a:55:2b:ad:f6:e3:1a:6d:
         47:a8:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:48 2026 by rpki-client