Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa
File:                     94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa (raw, json)
Hash identifier:          zYMnJkEKqkPMFjXtn0Lp8d4sjQEfio+qaqb/XdiWZIw=
Subject key identifier:   38:3D:50:10:C2:CC:41:39:3C:41:1F:BF:1A:9F:D9:45:43:F2:2E:37
Certificate issuer:       /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
Certificate serial:       010D0C9F4328584E66DA00DD46B8F6F0F0393400
Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        216.153.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:00:dd:46:b8:f6:f0:f0:39:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=3cc3c055-822b-4b37-8e47-7be32a8a1247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:ff:db:28:a4:dd:b5:29:f5:fa:ef:59:d5:
                    22:91:e2:53:a2:4c:98:f4:ad:8b:26:cd:3b:cd:e4:
                    2e:dc:a7:b8:54:45:98:9e:b8:87:84:cd:ef:43:e3:
                    37:8b:4f:cb:57:cd:c6:6d:4b:3f:c0:54:69:cb:0a:
                    15:e4:6f:39:c3:33:6a:d0:b0:03:17:fd:cf:47:4f:
                    91:84:c4:4a:e2:8a:51:b4:42:44:98:f9:b0:38:0c:
                    b1:b4:ac:4b:3a:73:15:e4:47:e0:2f:4d:4a:22:5a:
                    0e:aa:ca:e6:67:b2:45:5a:6f:69:20:d9:58:7d:9e:
                    40:43:95:33:49:c0:10:e0:03:53:c8:4c:23:06:69:
                    c4:bc:1c:08:83:c9:0c:e9:c4:c3:f6:30:7d:28:1f:
                    7c:95:03:91:60:b5:b0:d8:a5:ae:34:b2:c6:89:e8:
                    dc:b2:eb:63:c3:d2:eb:0d:dc:4b:d9:07:19:3e:25:
                    31:b5:e6:8f:cf:b1:ed:48:77:9c:9d:94:12:67:20:
                    41:e5:de:f5:9f:5c:d6:bb:9b:9f:99:59:89:45:20:
                    c1:e4:61:ee:aa:c0:04:16:7f:f3:cb:7d:72:17:e6:
                    3e:6c:6a:8d:58:10:25:6b:9e:78:97:89:38:e0:8f:
                    97:5f:13:b6:c0:59:d2:c6:5f:fc:1c:24:ce:99:86:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:50:10:C2:CC:41:39:3C:41:1F:BF:1A:9F:D9:45:43:F2:2E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl

            X509v3 Authority Key Identifier:
                keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:28:07:f1:25:c0:9c:01:76:01:15:e0:5a:75:74:41:c5:69:
         eb:6d:b1:37:20:f9:53:51:83:42:60:5f:a8:93:c8:61:00:71:
         6a:86:88:e0:08:e2:f2:36:85:d7:61:d7:17:14:83:a7:f9:83:
         a6:84:d5:c6:55:4a:65:3e:6a:3f:b1:6d:7e:25:5f:30:b8:62:
         24:6c:f4:b5:d6:0d:ed:fc:2c:14:c7:88:b7:6c:3b:47:d6:e8:
         61:6e:42:4b:c5:fc:f4:f3:82:1f:ec:9a:51:0c:91:dc:ee:41:
         8a:96:f4:90:c0:fa:82:9f:85:17:05:20:d0:de:2a:67:be:06:
         75:c9:59:97:cd:8c:3b:38:25:87:07:e6:99:fb:2c:de:66:a5:
         72:9a:30:b3:37:47:c5:a0:ac:81:22:1c:0e:88:e9:71:70:a0:
         30:da:59:5a:6b:53:41:e9:e6:77:81:50:22:23:13:fc:17:12:
         94:a9:dc:72:ce:0a:37:af:c5:ea:f8:b2:8f:2d:09:c0:72:77:
         cf:b9:24:39:84:de:09:ce:16:a8:88:8b:c6:6a:8e:16:0b:06:
         3c:b4:e5:f5:e2:5b:97:52:86:21:5e:db:5b:32:a1:cd:f6:26:
         7a:51:e8:43:63:48:1d:a0:fc:5b:7d:92:c7:e2:04:6d:46:6a:
         d5:67:a3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:28 2026 by rpki-client