Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/9da36b71-9a85-3543-8f8c-b69dedecea5b.roa
File:                     9da36b71-9a85-3543-8f8c-b69dedecea5b.roa (raw, json)
Hash identifier:          arJUNPKgoCVC2ecNfViJ9azdKGo42LiZKjf1eM8wK9Y=
Subject key identifier:   1A:0C:49:C2:74:5B:B4:00:90:43:41:85:C4:EA:3D:DE:08:42:D5:84
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584D89D2B6F57CAD8C3E84FA0140
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/9da36b71-9a85-3543-8f8c-b69dedecea5b.roa
Signing time:             Fri 17 Apr 2026 16:51:53 +0000
ROA not before:           Fri 17 Apr 2026 16:51:53 +0000
ROA not after:            Thu 16 Jul 2026 16:51:53 +0000
asID:                     401333
IP address blocks:        75.98.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:d2:b6:f5:7c:ad:8c:3e:84:fa:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Apr 17 16:51:53 2026 GMT
            Not After : Jul 16 16:51:53 2026 GMT
        Subject: CN=347c1e1f-6641-4256-ad5f-0f6bd600ff58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:0b:94:70:84:0e:e9:d6:60:95:99:52:b4:
                    bd:cd:5c:f6:c0:7b:f7:4d:9a:b4:cc:ef:ae:78:67:
                    f2:a8:a6:53:a1:bd:37:27:76:ad:13:76:4a:a1:cc:
                    eb:82:2c:75:4f:36:34:d2:17:6a:9c:ed:4c:c4:ee:
                    12:7a:7e:a1:fd:b4:48:ee:7e:42:69:5c:39:11:6c:
                    dc:70:d6:85:89:8a:ea:b4:9f:98:57:f2:27:29:c4:
                    77:8b:d0:b8:8e:f9:f0:ff:98:9d:e2:c7:b6:fa:9e:
                    ad:0b:32:d2:eb:87:0c:40:da:72:30:fc:ff:b6:b1:
                    17:7f:a9:5a:72:61:3c:c7:02:35:14:8f:ef:f9:81:
                    bc:fe:ed:9f:51:aa:eb:34:88:cd:e8:01:07:0e:c7:
                    e9:e9:18:51:51:90:8a:35:d6:33:66:0b:67:d2:8b:
                    67:54:34:d1:da:43:4f:5c:f0:23:1b:86:74:35:db:
                    f5:ab:2b:86:42:b7:d5:b0:5b:5a:ab:71:74:a0:b2:
                    d4:98:cb:37:ad:6e:76:1d:9d:e7:f6:19:a5:66:41:
                    a3:71:37:5b:a8:26:fc:41:77:64:bd:45:fa:4c:42:
                    d4:5a:4b:ec:99:93:9b:3e:b8:78:fc:08:ee:ac:f6:
                    62:45:5e:69:6b:11:11:02:23:7b:d0:bd:f8:d5:c1:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:49:C2:74:5B:B4:00:90:43:41:85:C4:EA:3D:DE:08:42:D5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/9da36b71-9a85-3543-8f8c-b69dedecea5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:ac:39:d0:5b:b5:3c:a0:da:d0:de:58:97:2a:c2:4e:4e:
         e8:7e:3f:b3:c6:0f:07:8a:d5:36:be:64:c2:5f:40:9c:63:e5:
         12:28:b3:f8:04:d0:65:a6:97:d6:24:b8:f4:60:9a:fa:bd:05:
         92:9b:ba:23:b0:19:df:5c:04:bb:25:fc:65:f1:d9:c3:65:9a:
         85:12:b3:fe:27:bb:bd:25:ca:50:ad:aa:d8:8a:7f:8b:bf:a9:
         db:db:ff:1e:8b:67:28:e1:70:14:2b:6c:d5:51:92:75:3e:ee:
         c5:e4:c4:dc:8e:96:d8:ab:d2:cc:3f:2f:f6:5a:92:54:fd:d4:
         cc:b9:fb:18:20:7f:d3:a2:8e:a3:c3:91:ad:39:b4:5f:ef:b2:
         ca:09:ec:74:3d:fc:67:2e:83:ea:ea:47:7e:45:af:c3:99:ef:
         b9:cf:cb:5a:ad:a0:e0:78:97:0f:94:14:e8:37:68:47:a5:61:
         c9:32:50:6b:c2:37:ba:1c:01:46:0d:5b:db:5d:f0:a9:cc:64:
         87:83:b9:90:e2:08:85:4a:b3:9c:39:ac:d6:99:ef:9b:72:89:
         05:63:6e:b9:7e:b6:b9:20:c5:63:ab:f4:49:fc:23:0e:a5:a1:
         1c:91:92:50:a4:45:d1:9a:ec:a0:23:94:ed:0c:3f:4a:69:3a:
         05:f4:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:04 2026 by rpki-client