Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fbbabe7e-ad8d-370b-a27b-c92bb36cf9f5.roa
File:                     fbbabe7e-ad8d-370b-a27b-c92bb36cf9f5.roa (raw, json)
Hash identifier:          KKv5p6hklQQFAcwKpFmgv4XTZHeokQgpT/Lr/RVpuqg=
Subject key identifier:   61:9B:FD:4A:18:36:85:DE:52:28:6C:13:0D:DA:0A:F0:BE:AA:90:7C
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D67DFC292412AA36D0FAB7AC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fbbabe7e-ad8d-370b-a27b-c92bb36cf9f5.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        98.98.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c2:92:41:2a:a3:6d:0f:ab:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=11b4a08e-bef5-4a6b-9ef3-1a10d43d578c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:35:1a:df:6b:58:01:ae:2e:10:60:6b:db:
                    3a:74:f7:6d:c8:3b:7d:b9:49:82:28:f4:02:7a:75:
                    f8:fc:01:4f:43:3e:fc:2b:36:d6:c5:6b:2c:13:cf:
                    2f:97:ca:cc:1b:4c:11:18:fe:0c:74:bd:66:31:36:
                    c9:fc:4c:02:d6:20:e1:a2:37:69:ab:47:98:ff:77:
                    b5:c4:38:c1:d4:5f:d3:9f:e0:31:b9:28:cf:7c:d6:
                    08:97:6e:05:cf:e9:e3:59:98:9e:6f:69:92:91:32:
                    79:9a:aa:f4:5a:ac:66:7e:a1:49:6b:85:55:30:41:
                    2b:ba:f0:cd:cf:64:4e:6c:06:35:a7:89:79:bb:26:
                    85:fc:3b:71:1b:d6:28:96:a6:1e:05:6d:5e:5f:f4:
                    45:b8:12:e0:17:ad:4e:6c:6d:8e:bd:27:f7:92:b8:
                    47:bc:a5:69:8f:b5:ad:e3:c0:96:e2:2a:a5:ae:72:
                    26:f3:3e:55:e4:ec:41:6a:24:a0:d3:7a:4f:91:ce:
                    09:b1:54:df:b8:14:19:fd:d5:7d:f7:5e:df:f5:9f:
                    65:80:d7:a6:a4:6c:6f:d7:31:66:33:66:76:6d:2d:
                    6d:5c:5f:8f:4e:c6:01:75:6a:4a:52:72:8b:56:65:
                    f9:02:c1:8c:c6:45:fe:9b:f8:d1:e8:2e:85:d6:98:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9B:FD:4A:18:36:85:DE:52:28:6C:13:0D:DA:0A:F0:BE:AA:90:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fbbabe7e-ad8d-370b-a27b-c92bb36cf9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6d:60:6b:76:ee:df:a4:98:1c:03:a2:41:4b:dc:d3:6d:7c:
         b2:af:2c:8d:65:c5:e2:36:5d:18:52:45:e3:a8:ce:c4:27:be:
         d0:1a:c1:8c:b1:18:ba:83:c0:be:5c:f9:ec:a1:e2:6e:f8:c3:
         9f:c1:4f:bb:10:95:30:1e:2d:f0:c5:b5:b6:32:21:73:37:41:
         0d:d4:59:2e:9f:51:f1:21:65:14:3d:e8:6b:3e:cf:74:5e:ef:
         e1:7b:3f:36:42:aa:ae:47:b3:da:50:37:f3:c8:98:76:0d:54:
         5f:55:9b:73:95:96:a4:34:1a:8e:fd:45:fa:92:4d:9c:4d:d5:
         a9:3f:cc:bf:e1:af:2b:f3:68:d5:fb:ae:17:70:df:e7:66:3c:
         02:26:89:49:85:f1:fd:71:0d:21:66:a4:45:98:83:cf:7e:58:
         0c:d2:76:1d:32:d3:4f:2d:b3:d0:27:86:27:ff:cc:dc:39:f8:
         c4:51:37:ae:3b:bb:aa:f8:42:6b:de:0d:c5:fa:d3:c7:ad:7d:
         9a:53:fa:bd:f4:01:50:05:37:f6:c1:fd:ce:fe:01:d6:f2:2a:
         e0:87:d5:5d:cc:3a:8b:30:78:d0:ba:42:1a:cf:5a:fe:3e:ad:
         2b:be:5b:ea:f3:f6:0f:f4:3e:e3:53:92:20:bf:42:8e:b3:d3:
         21:2d:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:09 2026 by rpki-client