Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d18234f7-b887-3f18-92c6-7083c20abfe7.roa
File:                     d18234f7-b887-3f18-92c6-7083c20abfe7.roa (raw, json)
Hash identifier:          cI7k/cUvs1TKVgVe4UdcdwjaIek/2S/ANC+v34fOfFk=
Subject key identifier:   BE:DE:A8:18:C8:04:A9:1F:53:D2:05:62:E7:C3:46:B4:84:94:72:87
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E0998D933D46CAB41A3E55700
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d18234f7-b887-3f18-92c6-7083c20abfe7.roa
Signing time:             Tue 02 Jun 2026 11:18:45 +0000
ROA not before:           Tue 02 Jun 2026 11:18:45 +0000
ROA not after:            Mon 31 Aug 2026 11:18:45 +0000
asID:                     62240
IP address blocks:        98.159.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:98:d9:33:d4:6c:ab:41:a3:e5:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun  2 11:18:45 2026 GMT
            Not After : Aug 31 11:18:45 2026 GMT
        Subject: CN=144c747a-0109-4b60-b174-3b0abcb4b118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:76:7d:08:50:bf:22:29:2f:b7:8a:71:65:
                    71:0c:33:82:f4:18:d1:30:30:e8:73:c3:23:14:ad:
                    61:ed:94:1d:4f:44:6b:d0:7f:82:ce:99:a4:ce:43:
                    a9:7e:fe:13:d4:33:98:84:79:f7:f4:11:bc:89:8f:
                    4b:43:32:d0:90:7d:34:2f:96:77:39:66:d4:3d:7d:
                    50:ad:c8:47:45:ce:11:ff:77:92:16:66:f7:26:1d:
                    58:ab:9c:71:2d:1c:41:a8:f6:17:ad:21:1c:ca:32:
                    82:34:dd:01:46:78:9c:d1:44:be:49:15:50:ee:47:
                    d9:17:a1:0d:5a:ea:07:4a:40:94:fc:c6:11:d2:8c:
                    52:49:c2:80:cb:13:f1:40:76:64:cf:c5:17:5e:64:
                    35:03:49:3e:30:0a:8d:f3:38:96:1d:22:bd:b3:f1:
                    13:26:be:9e:ef:08:9f:28:21:60:95:f2:7f:8b:df:
                    4d:28:9d:ee:95:2a:44:72:0c:7c:61:29:7e:43:9e:
                    76:3a:99:00:8c:a7:59:ab:8c:f6:7f:c2:f6:0f:6b:
                    3e:56:45:8a:39:7a:5f:0b:33:22:82:8e:3e:33:e3:
                    4d:9f:84:3a:94:04:56:5f:8c:38:ec:54:55:f9:26:
                    c8:59:b4:7f:da:51:c1:18:7e:38:ac:ea:41:42:49:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:A8:18:C8:04:A9:1F:53:D2:05:62:E7:C3:46:B4:84:94:72:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d18234f7-b887-3f18-92c6-7083c20abfe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:dc:26:0d:19:b3:56:d1:02:e8:56:f9:61:ad:1f:f7:1a:
         e5:de:fc:8d:c2:b8:e0:be:40:95:6a:e2:aa:e4:dd:0f:2a:e5:
         6c:25:21:b4:19:5f:42:b5:af:38:62:18:f1:8f:82:06:f2:de:
         8b:a1:8e:9a:bb:54:98:69:ee:b6:22:82:3d:eb:e3:4b:7e:1f:
         c9:26:f0:e7:60:a5:40:fb:64:dd:b9:bc:c5:2f:0b:58:25:fc:
         5a:b8:dc:46:32:f7:34:12:24:8c:fb:d8:f1:11:d5:f4:8b:63:
         e1:52:c2:b1:7e:3f:d2:42:c0:b4:02:de:4d:ce:9d:4d:e9:b2:
         40:7b:5f:b8:3b:43:f2:28:c0:29:d6:b5:83:df:a1:95:b1:a8:
         e1:bb:e1:8d:e5:72:1c:8f:30:cd:9b:13:04:59:81:e3:ba:63:
         47:62:aa:d4:31:2a:9c:a0:62:f1:1d:10:7c:8e:e9:f5:c9:e7:
         d4:25:55:f2:b5:8d:7f:22:ae:20:0a:b5:b4:18:c8:75:11:7f:
         55:c4:cb:65:42:e1:2a:3f:35:ba:6c:64:58:ca:1b:1d:3a:16:
         8f:69:28:77:70:e1:20:21:b6:e2:ad:4e:50:2e:02:06:f4:66:
         7e:f1:53:39:b0:74:52:dc:57:dd:83:27:4e:e7:7e:cd:8d:c3:
         20:31:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:26:18 2026 by rpki-client