Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa
File:                     99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa (raw, json)
Hash identifier:          1A7xuxJzIVfll5gFB9N8Y994Ar6+DEuxKqHoykt7Wk8=
Subject key identifier:   62:3C:3F:76:A9:F6:DF:70:80:B6:40:35:AF:2F:70:F3:E0:84:C6:F3
Certificate issuer:       /CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
Certificate serial:       010D0C9F4328584D47C505EFA6221B1FF3824330
Authority key identifier: 01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     57844
IP address blocks:        23.247.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:05:ef:a6:22:1b:1f:f3:82:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=ef69e954-f7be-4b2e-b5be-de16faa86c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:7c:14:ac:10:30:5a:09:89:0f:c6:33:30:
                    c3:97:12:fc:ae:7e:6b:16:64:ae:a5:27:a2:69:17:
                    13:c1:31:29:32:29:c4:e6:c6:3d:93:8f:9a:42:68:
                    38:49:31:c0:7a:8c:5c:63:6a:0f:2a:85:4a:ea:75:
                    77:a4:a0:3c:1f:2c:ca:c0:a5:6d:e8:39:83:b4:d7:
                    f5:8e:19:db:06:de:e8:97:fb:34:fe:e4:bd:f3:c8:
                    cd:a7:fb:35:3b:56:b3:99:78:cc:07:73:9c:2f:bd:
                    f4:0f:89:bc:bb:22:fd:fc:13:80:4e:cd:17:3f:ed:
                    2b:55:22:1b:81:11:0f:e4:a1:9f:20:0c:db:d0:a6:
                    11:3b:0e:1a:59:90:ca:62:62:10:0b:37:91:dd:7e:
                    25:01:6b:69:7d:ea:71:e4:70:8e:5d:7c:1c:99:28:
                    fd:21:33:e9:70:0f:8f:ac:3b:10:fd:c1:8a:2c:d8:
                    e3:7f:f0:04:10:4e:0c:2d:46:11:8f:93:d0:3a:1f:
                    75:bd:45:5f:0f:91:16:04:2e:81:fc:e7:d5:fe:56:
                    92:b3:52:03:27:57:7e:89:69:40:06:43:db:6f:9a:
                    05:02:e6:0f:1a:e7:26:34:4c:52:5f:e8:b3:2d:f5:
                    01:30:11:20:09:cd:99:b6:26:2a:41:f2:07:ab:e3:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3C:3F:76:A9:F6:DF:70:80:B6:40:35:AF:2F:70:F3:E0:84:C6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl

            X509v3 Authority Key Identifier:
                keyid:01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:29:46:b8:17:94:c3:55:4a:f3:79:73:0b:cc:4b:3c:ea:5f:
         5f:d7:b3:b9:ef:4d:eb:c2:08:4e:51:e3:c4:e6:d2:65:1f:52:
         fc:79:b5:8c:48:6a:1f:ed:b3:ad:ce:db:ae:17:56:e8:b7:1e:
         92:96:f8:ce:77:32:f1:8e:e4:99:80:01:88:3c:82:1a:d4:97:
         79:5c:41:3e:c5:38:69:63:07:9c:28:a1:0c:f2:c7:9c:b7:9a:
         16:9b:1e:1a:8d:7a:09:5f:c4:8f:37:d8:4d:00:8b:33:91:4f:
         c8:fc:0e:5b:6c:e8:92:9c:09:b6:6f:c3:56:2f:78:ea:d5:47:
         ba:31:5e:0f:72:e0:7c:56:8b:69:9c:a8:66:72:cd:68:db:6c:
         93:53:f7:dc:78:47:13:ef:61:72:38:9c:63:0e:85:a4:32:08:
         4d:a8:88:78:fe:57:c7:e4:b5:0e:96:15:ba:3c:0f:44:c2:e9:
         9f:1f:a4:7b:b6:f4:0e:e2:e4:ba:f0:67:3e:81:ef:94:3d:01:
         a6:11:9c:cf:9b:10:89:a6:01:79:e2:14:a9:da:bb:e5:bf:47:
         db:1f:23:e3:46:2c:8c:93:c7:3a:fa:51:39:86:51:88:64:ec:
         7b:4d:c3:c8:8b:f0:ae:78:28:8c:57:b4:53:68:e0:3f:48:80:
         12:cd:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:04 2026 by rpki-client