Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8fe565ea-70a4-335a-bce1-85c4154744bf.roa
File:                     8fe565ea-70a4-335a-bce1-85c4154744bf.roa (raw, json)
Hash identifier:          frrgXrUKlV467z+sk+jQuVLnZImP2k6BJ1giI4cjYCo=
Subject key identifier:   F5:19:3D:D8:FB:44:02:67:A2:5E:58:FD:DF:0E:28:7D:46:21:5E:6F
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584DC5659904FC305B291FDF1440
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8fe565ea-70a4-335a-bce1-85c4154744bf.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     397031
IP address blocks:        144.172.67.0/24 maxlen: 24
                          144.172.70.0/23 maxlen: 24
                          144.172.75.0/24 maxlen: 24
                          144.172.83.0/24 maxlen: 24
                          144.172.120.0/24 maxlen: 24
                          144.172.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:99:04:fc:30:5b:29:1f:df:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=21a40047-3566-4642-8173-ad29dbebc974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:5d:8a:07:4a:ce:05:5b:51:62:ab:a0:cd:
                    c1:2e:20:1d:29:5c:76:dd:c3:8d:81:f3:d4:21:32:
                    95:35:dd:67:18:64:f3:be:87:84:2b:4f:d1:00:e5:
                    39:4d:67:87:71:c7:c0:e9:f9:00:2d:db:af:44:f5:
                    7f:b7:3a:8b:45:fc:f6:71:75:bc:a0:a3:9f:4b:90:
                    39:33:2b:9e:6d:1a:b6:a1:60:35:e8:24:0a:3d:4e:
                    c4:a1:78:67:b9:ae:e0:79:91:32:ee:7c:ee:76:9c:
                    78:e8:5e:46:ce:53:1f:ff:d6:e4:3d:2e:c9:d7:f6:
                    ce:ed:02:43:dc:99:97:da:29:29:5c:9e:fd:99:44:
                    0f:a7:f6:cd:8e:95:a9:3e:9f:7d:07:f3:e6:ed:c4:
                    77:7b:d2:93:05:19:a4:f9:54:88:7a:29:94:a1:22:
                    52:12:ea:ec:ad:99:88:2b:f7:a7:b4:74:bb:4b:5d:
                    6d:8d:f4:d6:eb:4b:c3:55:7a:94:f2:5c:5d:9a:e5:
                    21:9e:09:14:21:d8:54:4d:0b:e8:86:c0:d4:1c:f2:
                    a1:f2:aa:39:b2:63:b3:3b:42:e8:4d:9a:a7:36:8a:
                    96:fe:d7:99:83:e4:98:82:2f:f5:3c:ea:e2:d5:5c:
                    c9:40:8a:7e:15:c3:4e:19:54:c6:e1:17:44:3b:37:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:3D:D8:FB:44:02:67:A2:5E:58:FD:DF:0E:28:7D:46:21:5E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8fe565ea-70a4-335a-bce1-85c4154744bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.67.0/24
                  144.172.70.0/23
                  144.172.75.0/24
                  144.172.83.0/24
                  144.172.120.0/24
                  144.172.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:61:17:52:ce:3a:0d:e5:3c:9c:3b:c1:51:bd:ac:24:b3:
         52:39:97:98:60:24:13:e8:11:18:f9:8d:7c:32:7b:ed:7e:e9:
         21:98:ee:2d:06:4d:77:e7:d5:15:b0:6d:7d:0b:6d:13:c6:f4:
         71:3c:09:c4:22:21:41:a2:f3:84:5e:0a:37:47:22:53:df:6c:
         df:5f:f2:1e:ae:1f:ea:c0:f1:ad:0a:48:39:61:b5:5b:a7:22:
         44:71:40:ad:b3:5f:50:0f:06:50:15:a1:f2:92:8b:f7:b5:12:
         54:82:06:6d:24:8e:9f:96:90:11:5a:d7:1d:b8:e4:96:26:06:
         cd:f2:dd:f0:41:24:fc:f0:ff:57:bd:17:66:52:ef:75:a3:ca:
         d7:4b:f9:63:d5:33:e8:cd:8b:75:93:1b:b3:55:1b:b1:3f:20:
         9b:50:67:66:1c:87:99:23:f8:0a:71:0f:33:3b:83:f2:06:66:
         2c:02:8b:cb:f0:12:b8:e3:ea:c4:02:a0:83:31:51:ff:09:ec:
         21:d1:d4:67:76:85:01:84:ed:e5:d2:dd:9d:e3:2c:c8:c0:e1:
         18:f3:23:b7:12:a7:d3:0d:f7:f6:ae:d8:a2:61:3f:30:cb:7f:
         62:c8:74:e6:f7:7b:7e:1d:36:62:32:52:61:40:a0:98:bb:c2:
         20:99:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:04 2026 by rpki-client