Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa
File:                     98d83296-cbe0-3c48-b055-28ee0ece2329.roa (raw, json)
Hash identifier:          /kcj6vVFP9HVFcG4LMMnEeR5iAUQrc4E+LcPuLdVByQ=
Subject key identifier:   A9:CF:05:4A:62:8D:C0:4B:D2:44:74:89:0C:F9:C3:4B:34:31:D4:EB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E445B686ECEE6678022E440
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        71.44.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:5b:68:6e:ce:e6:67:80:22:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d93250d6-2ff3-4b9f-9477-139720be4933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:3b:d6:f1:f2:df:ed:4b:7a:ea:7b:5c:16:
                    78:24:0e:62:1b:77:b7:0f:6c:61:2b:72:e6:cc:2d:
                    70:87:11:f8:9d:67:69:76:e6:54:8c:e1:f8:d0:a8:
                    6b:eb:dc:29:41:8c:9b:e5:81:d3:2c:00:15:a5:d9:
                    71:4b:5a:37:49:bc:7b:3a:2e:ac:9d:2a:40:99:61:
                    cf:99:d9:51:db:21:28:2e:65:c1:73:45:bc:06:32:
                    42:f1:21:d9:f7:7c:78:b3:9f:08:2d:64:de:54:01:
                    54:8c:9e:db:e4:25:0f:ef:f0:d7:17:13:48:ca:dd:
                    01:cf:92:4f:63:c0:11:0e:c7:9b:74:93:fc:4d:ed:
                    fe:0c:02:4d:a3:3c:39:04:8f:bf:b5:9c:4b:47:f5:
                    bc:fc:6e:9c:8f:45:fa:6d:aa:9b:7f:fd:32:22:cd:
                    8c:55:d7:20:93:87:f8:04:f0:a5:2d:ed:f7:2e:0b:
                    ae:a8:3b:e1:53:fa:09:7c:84:ef:de:c2:5a:e9:5a:
                    35:b0:46:8c:b1:e1:da:55:a6:70:01:1f:23:14:8a:
                    c2:58:67:d2:88:6e:c8:e9:30:93:a7:76:55:2b:db:
                    ab:99:56:f6:cd:62:85:42:19:b5:95:46:f5:db:48:
                    ea:3c:cc:55:48:96:31:f7:2d:72:19:a9:00:8f:a0:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CF:05:4A:62:8D:C0:4B:D2:44:74:89:0C:F9:C3:4B:34:31:D4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:ea:b2:40:46:9b:1b:9d:78:ba:1e:2f:73:79:dc:68:a3:
         ba:e0:97:28:47:aa:51:38:51:b7:f7:e0:94:de:14:98:49:d7:
         80:6b:7b:78:30:a5:19:7d:aa:df:95:4d:09:5f:03:c8:bb:c3:
         58:56:b5:6b:1d:bf:e2:40:ca:14:f6:b2:f4:35:60:e3:77:ee:
         6b:91:bf:c3:a1:2a:90:7e:fd:0f:e6:0f:fd:85:2b:11:91:04:
         06:47:ef:19:c2:36:4e:10:88:07:ce:d1:bb:b0:3b:1e:dc:bd:
         58:f1:61:b3:2f:47:da:ae:97:ac:e8:2c:8c:3d:ec:44:f7:ce:
         b6:64:db:d4:07:3c:05:fe:fa:09:98:83:54:d1:20:03:38:48:
         4a:2d:86:90:85:48:fe:40:63:86:78:1e:19:2f:61:f5:0c:6e:
         6b:ce:f2:ad:b9:ed:36:87:cb:95:07:ea:8e:be:ff:28:11:f1:
         9f:94:17:89:f3:fb:13:a0:e5:80:3f:b8:8b:36:9c:55:ea:3b:
         75:26:2a:63:e0:9b:17:ff:01:fa:94:73:ed:be:10:85:39:d9:
         38:66:e0:be:f0:37:71:cf:af:03:b5:8a:f3:4e:b8:68:e4:19:
         e9:01:36:3b:d6:48:34:b3:9b:c4:d3:a8:4a:67:c4:4a:98:ff:
         96:89:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:28 2026 by rpki-client