Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c7f72f3-d136-3f80-b967-b5700f48bbc9.roa
File:                     6c7f72f3-d136-3f80-b967-b5700f48bbc9.roa (raw, json)
Hash identifier:          11UjbCUWcsGiXrz7pIurqLqWzDNaPOlOOPllB3Pfkh8=
Subject key identifier:   82:A4:49:E5:95:D0:CC:B6:A7:B2:B7:56:AF:CB:E7:A7:73:B7:CB:11
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D362E974465B36164606D8600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c7f72f3-d136-3f80-b967-b5700f48bbc9.roa
Signing time:             Wed 18 Mar 2026 17:49:06 +0000
ROA not before:           Wed 18 Mar 2026 17:49:06 +0000
ROA not after:            Tue 16 Jun 2026 17:49:06 +0000
asID:                     20001
IP address blocks:        98.158.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:2e:97:44:65:b3:61:64:60:6d:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 17:49:06 2026 GMT
            Not After : Jun 16 17:49:06 2026 GMT
        Subject: CN=388853da-f021-4c1b-8f48-24b703cfa2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:44:1b:f1:24:52:67:66:33:68:77:a6:0c:
                    64:05:b9:dc:eb:8c:eb:0a:84:93:41:66:19:82:ad:
                    7f:cb:0a:aa:0a:01:40:ae:45:70:a6:86:07:f1:42:
                    c2:1f:2d:94:93:be:8b:98:09:6b:e7:85:eb:1b:fe:
                    e6:c5:d5:1d:15:76:8c:9a:73:f8:af:a9:7f:af:ff:
                    55:01:ad:a3:96:4c:25:34:6f:08:d3:8c:61:df:19:
                    2a:3b:af:5e:78:d5:52:93:58:a6:a1:81:56:74:8e:
                    9e:a0:e6:07:5c:ff:58:3a:19:02:4a:ac:a1:34:b1:
                    7d:4e:de:79:94:77:a8:37:fb:c9:ad:ef:10:d0:82:
                    a6:10:92:55:e6:11:7d:68:06:b2:e8:9d:c9:62:65:
                    df:2e:7d:39:5f:d0:40:86:76:64:20:8e:d0:42:0c:
                    c6:be:b0:1e:87:a2:9d:95:cf:58:29:32:3e:5a:08:
                    3e:12:db:b2:d0:e2:e9:b1:76:10:2a:7b:46:e5:7a:
                    8c:7e:74:ed:b0:a1:d1:52:34:31:3d:02:71:e9:3d:
                    9a:df:43:6b:f0:89:c0:8f:8f:cf:6c:81:f7:04:95:
                    6a:c0:44:c3:4f:15:bd:68:38:68:81:f9:43:b4:43:
                    45:e1:d7:6e:34:83:82:9d:e9:37:2f:9a:45:f6:5a:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:49:E5:95:D0:CC:B6:A7:B2:B7:56:AF:CB:E7:A7:73:B7:CB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c7f72f3-d136-3f80-b967-b5700f48bbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:53:e8:25:c4:ef:a1:c3:68:24:ba:67:69:57:c9:eb:09:63:
         73:ab:0c:ff:c8:f0:68:6a:8d:a6:8e:44:b9:30:83:60:34:96:
         49:5b:64:3d:cb:67:76:29:12:78:53:8d:c0:0c:2b:95:2e:3f:
         f1:a6:11:4b:39:d2:80:6c:ae:be:b3:6f:f7:b0:76:bf:bc:8e:
         ed:15:bf:27:b2:c5:b0:b8:76:87:10:51:7f:3d:4c:2e:e2:a8:
         13:5d:94:3d:fd:63:6d:72:29:c6:eb:b7:c0:4c:b2:7f:8d:df:
         b9:7c:57:46:bb:35:98:97:c9:7a:8a:6b:48:b3:e7:27:73:2f:
         01:08:3a:15:99:b3:ed:a0:f2:6d:30:3d:bc:5b:7b:dc:fc:f4:
         6a:86:04:63:6a:e2:c2:1b:5a:41:53:a9:1d:96:b6:03:db:31:
         4f:68:08:dc:3e:34:10:bd:27:c2:05:a1:a4:3b:da:71:6b:ff:
         a4:ec:6f:18:5a:9c:f3:8e:b0:42:0e:3e:7e:f9:b2:a5:b4:f9:
         f2:89:e3:06:76:a6:90:d5:30:92:c3:b4:df:2a:2a:f0:9a:d1:
         5c:b0:6b:98:c4:c3:28:fc:1c:58:db:d2:53:9e:be:70:1f:21:
         34:84:aa:67:c4:bc:c2:e4:6e:7a:9f:13:ea:a2:87:55:c3:82:
         fc:a9:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:53:43 2026 by rpki-client