Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa
File:                     acf10d95-d331-3615-8cb6-ef75756ed4f5.roa (raw, json)
Hash identifier:          Ymt2N4wBFcO838lpcSsnrwGy3qcDqVgN1+O1S1L+Sb4=
Subject key identifier:   2E:9E:C8:C7:63:B7:E7:BE:C2:37:3E:23:B9:A1:0E:0D:57:FB:61:BB
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584DE15086263075F71E6D5F4B80
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     45327
IP address blocks:        162.98.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:86:26:30:75:f7:1e:6d:5f:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=01c7ee1f-aa80-40b5-b6f1-9999948df2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:94:c6:2c:8e:79:af:f1:86:18:1f:4c:ee:
                    51:6a:44:00:45:93:8b:1d:b3:2f:5b:4f:6c:76:4d:
                    a9:17:ec:c6:5b:c4:6b:a9:2a:5b:b0:2c:da:b4:9d:
                    55:e2:fa:45:55:69:9e:e6:37:a8:22:9a:07:3e:ff:
                    32:bc:af:8e:f3:8e:0b:4d:ca:90:60:aa:21:18:6b:
                    ee:6e:4b:fd:a9:a7:63:ca:b8:f1:2f:03:e6:ae:61:
                    40:a6:ad:04:8a:fe:1b:fe:2d:41:c8:a9:f5:0b:4e:
                    4d:a0:88:83:81:8c:25:38:07:2f:e3:c6:a5:9b:76:
                    85:3c:89:7a:37:34:98:a5:90:a5:48:0d:82:6b:2c:
                    dc:69:f2:65:3f:05:a7:22:c7:05:2f:81:92:8f:9c:
                    bc:46:75:0f:92:70:18:77:32:09:29:a0:be:41:87:
                    05:d3:32:b5:87:2c:27:b4:bf:c1:91:88:55:11:1e:
                    b5:dc:ed:57:5f:cf:88:42:b0:6c:4c:5a:f5:a0:ce:
                    2b:0c:5d:c0:7e:43:bd:9d:93:a7:36:04:33:d2:84:
                    69:7f:3e:f0:b2:29:45:aa:65:4b:3c:88:3a:f5:b5:
                    44:0e:a5:a9:f9:73:f9:9f:f7:20:fb:ba:9c:da:94:
                    0e:cb:61:c4:91:ff:ec:c9:c8:58:ee:04:4d:05:24:
                    61:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9E:C8:C7:63:B7:E7:BE:C2:37:3E:23:B9:A1:0E:0D:57:FB:61:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.98.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:c4:ae:4e:e1:45:f9:5e:85:67:38:cb:93:11:c1:0a:0d:
         5f:1d:2d:25:0a:ed:57:f6:61:51:08:f2:78:51:3f:f4:66:94:
         1c:db:2b:24:fa:c5:e1:60:d5:db:64:a5:57:14:68:fb:16:63:
         01:08:ec:d0:3d:28:ac:f4:f0:c6:9f:56:cc:b1:fe:b3:81:00:
         31:0b:5d:ad:a2:aa:8e:55:d4:82:1a:2a:c2:35:b2:85:b7:61:
         3a:c7:f4:c8:b0:dc:cf:69:cf:46:4c:5c:b4:5a:ab:a5:50:be:
         bc:b7:a8:a5:f6:b5:29:fc:e8:dd:74:05:2d:fd:87:18:79:77:
         ac:72:99:b6:7b:a5:23:0e:29:e3:45:d4:08:b9:01:94:29:6b:
         da:4c:a6:4a:46:d2:13:68:21:24:e7:66:de:28:d5:13:cd:c8:
         d9:5b:96:a9:c0:fb:10:42:45:a2:e6:63:a8:2d:f3:49:15:8b:
         77:61:0f:51:47:20:45:07:21:95:d1:02:c2:e3:b9:0f:04:8c:
         53:82:d5:b2:80:82:09:0c:a3:84:04:98:de:8d:ba:fe:96:4a:
         f5:ee:ad:bb:17:8a:5d:11:da:ab:0e:e2:f8:63:9e:7f:87:50:
         58:42:eb:63:23:6f:63:5f:49:2f:69:51:65:63:50:73:5a:ae:
         20:f0:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:20 2026 by rpki-client