Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
File:                     aa1f874e-095d-34c7-82c1-8c864143547d.roa (raw, json)
Hash identifier:          FBEmZ0ohbzZxxeSEosGZcgH+5jzDqKYuLkT/NP9IFi0=
Subject key identifier:   1F:59:73:44:01:BE:10:B9:09:00:DC:E1:CE:34:D3:95:FB:64:2F:4A
Certificate issuer:       /CN=80a5a637-2442-4c3f-b791-5a2e260822af
Certificate serial:       010D0C9F4328584CB28729A66ABC85F36150A780
Authority key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     394688
IP address blocks:        98.142.188.0/22 maxlen: 22
                          98.142.188.0/24 maxlen: 24
                          98.142.189.0/24 maxlen: 24
                          98.142.190.0/24 maxlen: 24
                          98.142.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:29:a6:6a:bc:85:f3:61:50:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a5a637-2442-4c3f-b791-5a2e260822af
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=5fa50251-3f0a-4c69-9611-b5aab1b6ab6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:25:e3:28:47:51:37:fc:ef:97:8c:06:3b:
                    6b:05:de:99:a0:b7:e2:de:4d:0f:66:7b:51:54:e1:
                    50:bb:a4:9b:30:f8:6e:2a:2e:85:ef:d5:a7:0d:b7:
                    a4:77:ad:91:ff:20:fe:7f:3c:3d:01:ec:ae:ba:9d:
                    8c:af:5c:6e:8a:b7:00:b7:f2:76:13:38:1e:6f:ad:
                    0f:57:31:d6:b4:96:18:fd:c0:f8:96:b1:19:fb:99:
                    df:fa:bc:69:39:1c:5e:47:42:dc:59:92:ea:f4:c3:
                    62:d4:38:77:14:04:e6:19:28:9c:69:b2:ef:85:c2:
                    9f:21:bb:bd:d8:e8:e2:1d:69:c7:5a:50:51:dd:ce:
                    40:69:3c:f9:f1:14:72:8b:f7:dd:d5:0e:b2:ee:cb:
                    18:ee:d1:e2:e4:5b:ad:a0:cd:d9:19:73:e5:88:cd:
                    3e:6e:b2:9a:2a:0d:bf:f6:b5:f2:e3:8c:1c:4b:07:
                    6f:9a:01:5f:fe:61:07:c8:37:a3:0e:ce:9f:ed:e2:
                    12:d7:70:1a:2e:51:18:6f:b2:5b:bf:19:3e:6a:3d:
                    82:6b:5d:b7:7c:ea:21:5c:7b:fb:b6:b0:a9:36:56:
                    f2:4d:19:c9:47:9b:d8:d9:d4:aa:b1:24:a5:68:9b:
                    ff:be:31:f3:db:b3:87:03:6e:87:a6:0a:2d:45:43:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:59:73:44:01:BE:10:B9:09:00:DC:E1:CE:34:D3:95:FB:64:2F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl

            X509v3 Authority Key Identifier:
                keyid:8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:03:a9:8b:66:ca:3b:0b:a1:42:da:86:90:58:d1:11:b0:
         c6:7d:5c:6e:17:3a:d4:59:9e:e7:32:52:98:bc:53:66:a0:3c:
         b0:38:29:a2:32:02:ae:79:b6:8d:5c:b0:50:13:d9:3b:3d:59:
         27:3a:47:33:0f:30:04:60:d3:17:86:bc:3f:25:71:63:2e:80:
         4b:5d:d6:4a:81:6a:9b:c5:ab:84:1c:98:76:90:d2:75:fb:c1:
         d4:3e:f2:89:94:e7:f7:95:a0:6a:7d:77:77:f2:ee:7c:9b:17:
         1b:8c:6f:25:ce:5b:ff:24:fd:bd:a3:04:d3:6e:71:69:63:56:
         2a:8a:2f:ee:ae:27:33:95:8f:0c:8d:97:99:8b:49:ae:b3:4b:
         c9:cb:13:dc:45:31:6a:5e:81:7a:d1:53:d9:da:e2:11:a7:cf:
         5c:67:a7:85:cc:ee:4e:34:5b:07:4f:f0:43:81:bb:0d:d8:ed:
         9a:f7:0f:b9:60:f2:25:34:4c:a4:38:64:0f:10:88:2a:15:31:
         db:4e:52:83:0c:0e:2e:c0:b6:d9:2d:eb:bd:e7:6a:88:df:c1:
         1f:e5:8a:3d:f6:72:40:d5:0c:91:1e:e6:8f:31:10:5f:ef:d0:
         73:80:7e:01:d3:09:ac:69:43:db:42:b2:b9:c1:44:eb:88:80:
         eb:55:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:55 2026 by rpki-client