Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa
File:                     c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa (raw, json)
Hash identifier:          w8PE/2FcGBBzTZhk7gbp3O7dHePnh83qGDR1rrXcNDc=
Subject key identifier:   FB:16:70:E3:4B:A1:36:53:40:CD:82:F3:28:86:C7:17:BC:4C:1B:AB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D6EDA62A1E157C3815C21A600
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     62610
IP address blocks:        98.98.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:62:a1:e1:57:c3:81:5c:21:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=fb3f7c65-9aa1-400f-bc65-a7860b85078d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ed:d3:c9:29:06:a0:8a:d8:d3:da:06:81:77:
                    05:c3:75:e4:0e:57:a4:6b:c9:32:87:bf:b7:8c:fd:
                    aa:25:23:76:91:c0:3c:ca:8d:14:b7:b3:dc:7d:a7:
                    30:88:f9:bb:aa:af:23:d5:b6:84:e8:4c:2b:87:24:
                    13:e5:c9:6d:9f:e5:b0:ef:05:18:c0:42:c3:53:5b:
                    dd:43:37:ea:21:98:e1:82:3a:11:94:82:8e:70:2e:
                    ce:81:f1:60:7c:47:9f:17:39:33:6a:c6:1e:a3:be:
                    6e:fa:f2:53:12:65:0b:7f:fd:ce:19:2a:07:46:81:
                    b7:c5:dd:e9:85:31:85:18:8e:65:5f:1b:53:f2:10:
                    f5:15:f5:ce:86:11:a7:97:94:a3:9d:27:3a:fb:6b:
                    07:3f:24:b1:5e:c5:df:0a:b9:80:b5:d0:6c:22:ef:
                    1e:8a:a2:13:54:57:bd:94:d2:c1:d7:0e:3b:e4:36:
                    f1:0a:a1:7a:ab:da:c3:3f:c2:c9:db:03:ec:3b:d7:
                    fa:63:e4:36:e9:74:d0:a8:95:0e:db:bc:55:b4:67:
                    ef:13:d7:00:86:0f:d0:ce:0e:5d:76:ec:73:ad:01:
                    6e:ce:34:6c:52:d6:2b:a1:9e:8b:91:1b:4b:3d:50:
                    c2:a7:f8:3f:b6:02:1d:be:90:38:48:34:9d:47:d6:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:70:E3:4B:A1:36:53:40:CD:82:F3:28:86:C7:17:BC:4C:1B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:27:13:92:81:f2:d6:fd:c3:93:b3:c8:b4:0e:56:f4:02:
         3d:85:9e:44:9b:70:6c:87:79:0b:36:54:32:d4:2b:99:79:02:
         69:a8:3d:61:28:8c:da:46:9d:e8:a1:18:ac:22:94:26:2f:c8:
         67:03:26:c7:99:c9:42:2b:3a:11:e8:41:de:3f:fd:09:cf:df:
         a8:74:bc:0e:42:ad:16:c3:bc:e3:55:a6:99:26:f4:85:23:65:
         58:91:25:a1:e0:0f:01:1f:69:10:9c:b0:fa:3d:48:49:0e:ea:
         cd:1d:a5:d6:cb:1f:26:31:e3:e1:83:0a:6d:e0:e9:d7:30:ef:
         73:33:82:51:e5:55:5b:ad:e3:7f:9d:6f:ed:e8:55:32:bc:b3:
         f4:cb:b9:52:b8:6d:ae:0e:33:cd:ea:a7:34:21:78:ab:a6:b1:
         ff:07:ac:6d:91:b8:99:99:ae:32:4c:db:77:28:84:d4:89:4f:
         6b:ab:a0:2e:d4:25:39:b8:2f:e9:83:91:bb:1e:61:c2:f3:38:
         0a:19:81:5c:ef:1e:75:80:d6:1e:50:ba:5a:b8:2a:10:64:af:
         b1:09:8f:06:fa:f1:89:f8:f3:64:11:c3:0c:df:fa:89:f0:26:
         a0:06:60:10:73:e1:fe:1f:ef:a5:a2:bc:95:68:e8:1e:c6:62:
         5d:c7:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:03 2026 by rpki-client