Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c67e81ff-83c1-32d6-a23f-538cb9136f00.roa
File:                     c67e81ff-83c1-32d6-a23f-538cb9136f00.roa (raw, json)
Hash identifier:          5F8+8uH+D4rJGoZqSGp7DeFN4MQkU6N40J1APfIvaFA=
Subject key identifier:   2B:90:5D:B9:D5:CE:E7:F1:41:7D:0A:B4:A3:56:52:10:DC:72:84:E3
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CDC6771847AC222B7575EBE80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c67e81ff-83c1-32d6-a23f-538cb9136f00.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     139341
IP address blocks:        98.98.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:71:84:7a:c2:22:b7:57:5e:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=efd9fe1f-d5f0-4ff3-915a-77ab69d55c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:d6:0c:e7:48:bf:7c:1d:19:fa:7a:b8:6b:
                    7c:dd:b0:c5:09:c3:44:71:0d:0a:2c:ab:36:00:9d:
                    bb:d0:69:88:39:0f:b3:69:c7:20:c9:ac:ca:02:a8:
                    36:9f:08:4e:a6:bd:e2:32:77:d0:aa:a8:25:b0:8b:
                    6e:2c:d5:fe:3e:b3:17:cb:10:d2:fc:c2:81:ab:63:
                    f4:01:4f:5d:9e:5b:3d:85:c2:4a:6f:80:f0:2c:a8:
                    e3:3c:89:b7:67:e9:99:f6:29:96:27:dc:be:3c:6f:
                    e4:ac:8d:60:63:f8:a3:3e:1e:db:c3:c0:ec:e8:9e:
                    30:69:9b:3d:16:dc:e4:6d:02:b6:44:0a:16:81:e9:
                    2c:04:69:a2:f0:57:ff:db:95:fe:f9:44:62:83:4b:
                    ea:28:ee:62:cf:24:09:2e:32:56:8e:48:4a:5d:d5:
                    0a:ec:ec:7e:bf:3e:7c:1b:53:01:33:16:ab:5c:b8:
                    cd:bc:61:e1:1d:2b:ab:70:a7:ee:47:0d:10:f8:e1:
                    71:56:a8:05:7a:ba:41:5e:63:6a:19:ad:a9:05:1f:
                    35:bd:ef:bf:06:d2:18:32:2d:eb:9a:6f:0a:3e:e3:
                    36:14:cd:49:7f:76:0e:90:29:dc:67:1e:f2:15:e0:
                    9f:96:45:17:f2:ec:7e:1d:2d:3c:24:d5:f1:d2:44:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:5D:B9:D5:CE:E7:F1:41:7D:0A:B4:A3:56:52:10:DC:72:84:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c67e81ff-83c1-32d6-a23f-538cb9136f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:d9:08:99:96:6f:cd:6f:3a:12:56:82:fa:d1:01:51:f6:
         1b:34:6f:76:8a:e0:bf:7b:bf:b2:10:95:a8:26:66:81:ec:4a:
         82:da:9d:b3:ad:32:3d:5d:a3:67:eb:b8:97:89:62:f2:4c:2f:
         42:d4:1c:d3:1a:ea:e4:68:f7:b9:64:34:cd:de:7a:09:ae:aa:
         52:78:9b:ea:78:a1:2d:8c:02:ec:89:58:70:3c:d0:e1:f0:3c:
         4f:5d:40:4a:51:00:05:71:e6:b6:22:bc:66:02:8a:12:79:60:
         ec:c3:d4:26:d2:1a:a4:70:a4:b3:b6:a3:7c:4a:a2:41:99:be:
         24:51:ed:51:34:bc:f9:57:0b:b9:ed:74:22:4f:1c:e0:76:a2:
         b1:e3:4c:ec:38:ac:c3:2f:7f:2b:d0:31:00:58:13:c3:77:91:
         3a:e4:01:d2:46:75:50:a2:a4:ac:96:a7:7c:58:b5:33:37:40:
         17:78:e6:8a:ad:70:72:db:c5:b3:f3:a5:34:f2:13:54:12:0d:
         b4:83:b2:8c:ef:2f:3d:80:12:6a:ba:5e:3a:1b:f3:4c:b4:4e:
         53:82:64:d6:79:05:ed:ad:09:4c:6b:d4:d4:c0:a2:68:64:65:
         35:31:4f:d2:f0:40:da:b4:ea:ec:d9:c9:70:09:6b:7f:8c:f1:
         c8:12:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:21 2026 by rpki-client