Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa
File:                     98e047ca-9195-3a20-aea9-f36970a2a4b4.roa (raw, json)
Hash identifier:          jWItRZaKnYY1NE5UrggYLqPwKTYLpE3KgWyGRhTU5fE=
Subject key identifier:   8D:C6:2A:01:14:32:EE:31:9D:2B:31:DB:92:06:66:F1:A8:CB:48:55
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328584E016B4CB629F9833867E89700
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     10745
IP address blocks:        192.149.252.0/24 maxlen: 24
                          2620:d0:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:4c:b6:29:f9:83:38:67:e8:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=b156f084-261f-4edc-b285-f8f983346359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:a0:87:15:72:08:34:a2:9f:b5:9c:34:d7:
                    d4:9e:76:9f:8d:76:26:b7:fe:09:53:33:cc:4a:13:
                    20:b7:bc:51:35:26:e8:db:5e:0d:67:59:f5:97:83:
                    8b:a0:f7:64:8d:ce:3b:8a:75:9b:c0:1c:a8:8f:eb:
                    33:8b:7d:a0:5f:d6:89:3f:9a:38:eb:94:0b:b6:ed:
                    0b:6f:31:ff:6c:c2:f8:b6:02:95:3c:8b:35:35:42:
                    0a:36:c4:03:04:b5:ee:89:56:65:8a:95:3d:70:03:
                    46:70:1f:cd:d5:22:5b:23:2a:83:65:1b:7c:de:c5:
                    84:58:5f:2e:54:ca:32:3a:ec:ef:b1:1a:fa:b0:db:
                    0f:13:3a:e8:b7:10:2c:d2:79:1a:3e:00:69:d3:13:
                    88:66:99:57:4a:69:c4:f5:c8:b4:71:f2:89:0e:d9:
                    3f:5e:d4:bb:8e:6e:03:f5:cd:7b:50:d3:a4:bc:c1:
                    64:f5:4f:1b:4f:f8:11:81:f2:e5:33:fc:09:a5:ce:
                    7d:1a:5a:17:cb:4d:be:24:ac:d4:6d:bc:bb:2b:08:
                    84:2c:3b:a0:23:70:a7:8f:71:bf:4b:13:3a:77:36:
                    e2:37:8b:05:6f:e3:10:53:ad:bc:c6:db:9f:4a:37:
                    df:07:73:52:58:f6:c4:cb:37:85:f0:af:36:da:20:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:2A:01:14:32:EE:31:9D:2B:31:DB:92:06:66:F1:A8:CB:48:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.252.0/24
                IPv6:
                  2620:d0:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:44:cd:c6:4e:c8:02:77:6f:6b:99:28:f2:15:15:75:94:9a:
         42:ec:73:43:82:9b:ba:2e:38:b8:0e:b6:23:0d:f0:4c:8b:6d:
         e3:cc:c2:d5:a8:f2:ef:b1:38:ab:70:99:f2:d1:7a:17:72:76:
         ad:69:07:6c:ba:b2:0b:24:1f:f9:57:e6:6f:4f:0c:30:7b:5d:
         42:ea:43:f4:6a:d6:f0:71:bd:c0:30:4d:c8:c7:64:73:02:ff:
         d3:4f:64:04:dd:80:37:cd:2e:12:72:2e:a4:a3:b7:cd:5a:67:
         8e:7c:70:6d:11:61:9e:7c:35:a1:88:5a:61:4b:9a:de:dd:b0:
         e4:67:1b:2e:57:2e:70:d5:cd:0a:f6:d4:ab:3a:f6:93:02:0f:
         fa:5c:02:6f:c9:99:e3:e2:1a:17:61:83:58:3e:f6:e8:0f:51:
         38:63:d7:7a:5a:22:03:30:8d:36:67:eb:07:91:8d:e3:8a:9b:
         f7:18:57:05:fe:a1:65:cc:4b:f5:80:3d:1e:90:22:52:01:19:
         c9:0f:7f:c9:e8:57:fe:48:f1:db:c4:15:04:cc:50:55:2b:23:
         7c:71:1f:96:c0:14:61:ce:4a:d4:d8:9b:bb:95:04:fe:18:e2:
         95:34:e1:66:20:5a:8f:f1:ef:3d:67:b4:c8:d6:68:61:9d:27:
         74:59:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:33:29 2026 by rpki-client