Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
File:                     d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa (raw, json)
Hash identifier:          wIpqwsHN4TrawwtrU+7fvyGX9raC0l5fiKGl+CDg+rg=
Subject key identifier:   40:00:B3:4D:5B:82:DA:DA:6D:B4:55:6D:4E:6E:71:A3:88:16:92:B9
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584E9A7FB97EFEB447070D585870
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     32636
IP address blocks:        98.124.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b9:7e:fe:b4:47:07:0d:58:58:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=11811f31-8022-42a2-9630-3025b3beb690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:f4:f2:13:46:1a:72:d7:c8:9c:fe:f0:ed:
                    36:34:d8:45:5e:2c:17:c0:7b:96:56:91:39:0d:c6:
                    a6:ad:1e:06:c0:85:71:c9:28:e6:fd:69:b1:3c:9d:
                    b8:96:4e:15:96:3d:6a:04:39:6b:24:c7:0f:d5:7f:
                    ce:ee:5b:7b:a0:4f:66:c4:2c:7c:1b:39:72:5a:7d:
                    8e:d7:e0:7e:a1:9e:2a:27:82:a0:90:3f:4a:41:77:
                    b0:f5:40:ae:36:e2:4b:2d:a3:98:57:41:b7:b5:a2:
                    b9:e8:cb:bf:e1:d7:45:d6:53:92:5c:a8:a0:32:90:
                    ba:ef:ea:28:b9:fe:96:aa:be:29:e4:d2:6f:1b:69:
                    8e:85:47:16:d7:9d:54:74:d1:84:0d:20:f4:db:b9:
                    43:65:be:76:15:84:da:92:ef:15:50:3e:ee:cb:1b:
                    70:fe:6e:fd:97:cf:40:3d:e5:b8:7d:8b:69:03:a0:
                    c7:36:b6:00:c4:9e:97:ec:28:b3:55:31:13:d0:a6:
                    15:2d:ef:fb:ab:46:e9:e3:29:29:55:76:3e:6f:67:
                    df:69:ce:f8:65:d1:4f:ed:91:e9:64:38:db:5c:d1:
                    3d:a2:32:ba:05:f4:ce:30:cc:90:96:1c:2c:66:93:
                    9f:01:2a:b9:0f:d7:0c:96:3d:4d:6a:be:52:2c:5e:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:00:B3:4D:5B:82:DA:DA:6D:B4:55:6D:4E:6E:71:A3:88:16:92:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:20:ba:ab:9e:f6:34:df:8a:30:db:f6:8d:22:31:89:f7:61:
         f3:0f:51:73:da:44:f4:89:b8:9f:47:1c:95:89:0d:2a:f5:d3:
         9a:7c:42:43:df:b7:0b:73:30:ee:48:5a:87:f3:71:3f:8c:58:
         5f:f7:a6:df:1e:69:85:ff:42:ff:33:22:42:d0:26:8a:56:21:
         64:0d:2d:65:5f:0a:68:3b:fe:bb:3d:c4:79:48:49:b4:aa:03:
         fb:71:80:03:44:af:1e:4c:2d:41:f4:2e:75:07:e0:0c:62:49:
         5f:e6:9c:65:05:12:a3:e5:3e:e2:ec:09:11:7c:b8:5e:f4:ce:
         1e:57:d1:af:7d:97:b6:39:86:75:1b:d3:bc:e9:32:92:43:36:
         ca:9b:41:65:fa:c7:ea:e6:40:1b:86:55:57:0c:4e:63:09:1e:
         58:ca:c0:3e:53:d9:62:2b:ca:38:3e:6c:a6:63:ee:06:06:dd:
         24:0f:17:29:b3:c7:9f:d3:c6:52:f1:c8:80:76:b2:5d:5c:93:
         81:d4:50:3f:0f:dd:6d:5e:81:08:5d:5e:f9:de:03:b9:ab:ad:
         59:c7:f3:b8:2a:f7:43:32:dc:c5:0d:e5:b9:89:8f:0c:8c:d9:
         41:38:87:40:5a:f9:53:a9:03:12:81:74:cc:65:eb:ab:b3:7b:
         bb:cf:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:02 2026 by rpki-client