Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533cac13-684c-3a0c-b189-586ea4728447.roa
File:                     533cac13-684c-3a0c-b189-586ea4728447.roa (raw, json)
Hash identifier:          qkdaQr/XxKK/bugvunjJskm62Iy16SMjOmWZB8nDXOA=
Subject key identifier:   72:35:D0:54:89:DC:1B:90:5A:F2:06:FB:39:FD:54:43:AD:A6:BC:EE
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CFB1CEB4872693DD3F5B4F7D0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533cac13-684c-3a0c-b189-586ea4728447.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     21859
IP address blocks:        98.98.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:eb:48:72:69:3d:d3:f5:b4:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=be986fdb-d28a-4e8f-a9db-d3656a1f299a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:5a:9f:6c:8c:80:17:86:60:53:0c:e5:d0:
                    ba:3b:be:e7:64:ee:67:e5:73:75:04:f7:5d:a5:4a:
                    5d:63:c1:bb:b8:ca:96:2a:71:22:12:e1:60:64:05:
                    2a:ff:fb:26:8d:3f:f4:e5:29:70:e4:a7:56:a4:fb:
                    b9:07:23:be:75:2c:f6:13:16:f6:f4:32:8e:9f:f4:
                    f7:79:83:11:1b:81:0f:c6:ba:1c:b7:0d:b5:07:a3:
                    b3:06:d9:71:ad:05:43:7e:0c:5d:fe:12:75:0f:4f:
                    c5:37:90:a2:21:84:3e:e1:62:b4:d0:72:d3:7b:bd:
                    82:a6:9f:8a:cb:40:d8:69:a3:72:9f:de:c7:b5:98:
                    f3:ae:74:3f:35:0d:68:06:fb:b1:31:7c:ef:8b:47:
                    0f:db:fc:12:51:0a:16:cc:3c:6f:cb:27:1e:ee:08:
                    a3:1c:c6:d1:bb:59:b3:c9:80:c3:12:9e:ec:1d:3d:
                    8d:6a:86:11:7c:e8:62:0d:55:9a:85:6b:ea:b5:d2:
                    ee:58:0e:30:f3:62:0f:4a:6b:10:6b:c7:50:2c:fb:
                    5e:90:b6:62:ed:f8:f9:79:b4:3c:70:0f:35:a0:77:
                    f9:ab:c8:93:23:21:4f:37:7e:60:fd:3a:82:24:84:
                    16:6a:81:bb:12:2b:25:05:d6:59:a6:73:d6:24:0b:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:D0:54:89:DC:1B:90:5A:F2:06:FB:39:FD:54:43:AD:A6:BC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533cac13-684c-3a0c-b189-586ea4728447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:b3:c5:d9:14:87:7c:7c:8a:1c:70:a2:24:35:15:cb:ac:
         ed:af:a1:e8:11:79:d4:2a:62:12:9c:e4:22:da:3f:37:b6:85:
         b6:b9:0e:b7:5e:f1:91:0e:6f:24:84:f4:7e:ec:09:0c:dd:f7:
         5d:d6:60:e9:f8:3e:95:f7:a3:b2:61:da:5b:75:0a:6f:72:0b:
         c7:f2:5b:d8:56:79:92:ac:f6:70:97:d8:cb:1e:85:43:81:7a:
         41:e3:78:03:e1:ed:af:d2:49:36:94:36:3a:09:1e:a6:a1:07:
         22:8f:87:2f:92:73:aa:0f:0c:1d:23:bd:2d:80:84:39:e1:f3:
         6c:6d:b1:22:d0:7a:c9:43:33:54:ad:47:2d:27:90:51:c2:b2:
         67:6f:84:4a:c2:b5:1a:e1:5d:29:35:f9:12:91:8f:12:c3:2d:
         31:ed:34:3a:36:b5:2e:17:05:78:bc:b7:68:38:dd:bb:a6:65:
         d3:b3:7d:0e:41:ce:8a:c4:b9:5a:23:76:8c:c9:9b:69:df:9a:
         c5:ba:41:c8:15:31:b1:a0:76:d7:88:08:98:15:dd:85:90:58:
         26:7b:97:47:43:8e:5a:8d:4d:ad:fb:fc:89:c2:8a:12:9e:df:
         8c:ea:14:f7:20:03:97:3d:62:a9:1f:c1:fd:9d:62:3e:75:86:
         97:d2:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:13 2026 by rpki-client