Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8adb6d60-3791-3c82-914f-a10453f6b4cd.roa
File:                     8adb6d60-3791-3c82-914f-a10453f6b4cd.roa (raw, json)
Hash identifier:          VH/Q6iGak+kVlgfZg5XLuE+/0pm1DzdXqkO5D080Qw4=
Subject key identifier:   C6:00:19:98:B2:57:30:08:E8:98:C5:EF:7E:78:73:B6:4E:85:84:82
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D011C2192B666F01B9A4D3A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8adb6d60-3791-3c82-914f-a10453f6b4cd.roa
Signing time:             Fri 27 Feb 2026 17:34:04 +0000
ROA not before:           Fri 27 Feb 2026 17:34:04 +0000
ROA not after:            Thu 28 May 2026 16:34:04 +0000
asID:                     7029
IP address blocks:        98.18.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:1c:21:92:b6:66:f0:1b:9a:4d:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 27 17:34:04 2026 GMT
            Not After : May 28 16:34:04 2026 GMT
        Subject: CN=d86e4d7f-cb9d-41cc-8a00-aa106363008f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:99:61:56:80:7f:4d:c4:60:d3:aa:f4:9b:
                    72:71:e3:16:62:57:4c:6b:83:9a:82:71:88:c1:ed:
                    94:91:30:a9:36:35:27:90:1c:e5:c0:1b:60:ff:89:
                    68:94:86:f4:1d:85:78:78:9d:00:21:8c:b9:3a:bc:
                    10:42:a4:99:a6:55:95:02:03:20:0c:fd:4f:01:a0:
                    bf:67:64:50:84:87:4a:ea:a3:c3:d6:21:64:7f:b0:
                    43:3e:89:1c:0b:32:90:1d:95:26:07:08:95:01:ac:
                    42:dd:d9:f1:1a:f8:1b:33:1b:3b:e8:00:bf:dc:e4:
                    5d:e0:a7:c2:9c:3b:16:3a:72:a3:77:f1:30:90:78:
                    f8:ef:ce:7c:06:c7:1e:6a:13:32:09:3d:a9:8e:51:
                    03:0a:5a:2c:b2:36:67:19:e8:23:21:a4:55:04:44:
                    6b:33:c2:34:31:95:63:d2:ed:1d:45:61:c6:bf:de:
                    f6:3b:0b:9b:3d:50:f3:34:c2:df:20:0f:58:11:10:
                    14:c8:4f:de:ed:0d:f5:d5:b3:a9:ff:1f:c8:a3:f6:
                    c2:f3:02:32:3e:59:bc:bd:96:9d:a3:c0:5a:58:04:
                    a7:e1:67:67:fb:29:85:d5:04:ee:39:32:1c:3d:59:
                    24:0a:14:1b:2f:2f:de:4e:f7:0d:df:cd:29:7f:02:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:00:19:98:B2:57:30:08:E8:98:C5:EF:7E:78:73:B6:4E:85:84:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8adb6d60-3791-3c82-914f-a10453f6b4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6f:d0:3f:98:2f:12:f0:c8:3c:ad:79:19:fa:cf:4a:23:11:
         5a:2a:e8:f6:06:7d:45:5a:bd:f3:62:0c:3e:1c:28:30:56:77:
         9d:aa:f0:cc:f1:23:0c:c9:d6:88:17:64:70:c6:a6:aa:80:96:
         43:01:85:58:8b:4f:c3:69:26:88:bd:2a:29:ce:93:03:1d:ae:
         1f:cd:d5:cf:71:7c:f5:27:45:2a:53:0f:7f:a2:10:0c:10:20:
         3d:f8:0f:85:76:36:5f:cb:d1:56:f0:f1:70:46:ef:4a:69:d8:
         23:60:33:ba:74:85:65:03:65:6e:c7:2a:37:d9:69:53:08:12:
         44:ba:1e:93:c0:74:31:93:fb:5f:1f:5a:67:ec:37:21:77:49:
         3e:c8:be:2c:41:18:26:b6:ec:01:db:fe:1d:08:10:62:1b:b8:
         f8:77:2f:10:54:91:1b:48:c4:49:ff:f6:1a:3f:ca:ca:ed:c0:
         f3:9d:d9:f3:5e:39:97:67:11:43:88:73:df:23:0e:dc:fa:8c:
         2d:1d:10:a4:c2:90:52:d6:4a:11:89:43:35:d6:e2:99:d7:ab:
         2a:8e:38:a7:a2:62:40:f3:31:1e:92:83:44:2d:38:8a:21:91:
         c7:90:e7:cd:84:41:a1:e0:f8:c9:e5:f4:5f:bd:cc:44:5d:a3:
         aa:da:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:23 2026 by rpki-client