Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
File:                     a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json)
Hash identifier:          fW9qVNG5D1yUX3nGTzZEY3R895njL+PffQ7S7aHQc9I=
Subject key identifier:   1D:04:90:DE:4C:5D:CD:3A:13:80:90:A6:02:A7:6C:45:7C:3B:CA:83
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F4328584D59EA78B5F3A139B3A59D2564
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     6206
IP address blocks:        172.98.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:78:b5:f3:a1:39:b3:a5:9d:25:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=67b735b7-703e-40fd-8029-777ea748ef57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:9a:47:d7:5d:eb:f1:02:17:3c:a6:8a:77:
                    d7:04:91:9e:47:bd:bb:df:e8:62:4f:be:f2:bc:6d:
                    3a:35:14:c2:69:6b:33:47:4b:0c:96:e0:a8:52:4b:
                    7a:d8:f6:1f:de:8f:40:09:58:95:fd:a1:7a:dd:4c:
                    bf:3d:71:75:5b:b9:4c:bc:de:f4:f8:cb:3f:a7:2a:
                    e9:20:4f:d0:f9:d1:54:25:88:62:62:e0:8e:09:fe:
                    eb:19:1d:f9:0f:0f:e3:7a:09:d5:99:3c:53:53:61:
                    bc:5c:59:51:cd:41:b7:ae:24:0a:a5:9a:e6:80:67:
                    7d:2a:36:97:ec:c9:6c:ec:fc:5d:bb:2a:cc:23:13:
                    1f:65:89:43:d1:13:af:db:db:d5:23:5b:72:9a:3c:
                    54:e9:f1:1d:dc:26:4f:0b:fe:1a:89:ae:9a:8a:a7:
                    a9:f0:20:89:16:d8:c9:64:83:50:38:fc:e6:52:98:
                    48:8a:70:3c:86:8b:15:59:2a:59:bb:c8:2c:ad:b0:
                    67:c5:01:56:d4:12:07:ee:e5:64:c2:f0:78:2e:70:
                    18:fb:53:dc:7e:05:3b:84:73:47:bf:74:5c:1a:20:
                    da:51:fa:1b:dd:55:0d:af:73:a7:14:7d:92:7e:d1:
                    12:df:48:98:b0:57:02:62:58:47:0d:18:d1:1c:31:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:04:90:DE:4C:5D:CD:3A:13:80:90:A6:02:A7:6C:45:7C:3B:CA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5b:f2:e3:18:e0:a1:49:b4:85:41:f6:14:37:a6:d6:cd:cb:
         69:25:96:01:e6:02:90:63:b3:dd:85:9a:22:45:71:6e:e3:8e:
         d8:0d:de:da:cc:97:cc:5b:b8:20:02:c0:16:e6:ab:d8:ed:23:
         5a:34:c8:d5:62:3d:99:74:12:6f:17:39:fc:a2:2a:21:f7:cf:
         ec:d3:31:2a:25:01:64:0a:7d:cc:4a:e0:96:51:f8:c0:c0:8c:
         ab:80:32:ab:93:91:8d:b4:78:b0:31:71:40:64:cf:53:52:0c:
         8f:7e:a5:b0:4c:26:dd:5f:e7:5a:bb:08:39:3f:7e:ad:4d:34:
         c3:c0:69:32:be:cc:f0:5f:a8:5d:2a:27:19:b2:4b:d6:f5:b6:
         e8:43:d4:eb:3f:fa:1e:a4:b3:2c:82:93:f1:21:81:6f:1d:83:
         fb:7a:11:55:98:2d:0e:ac:51:14:e1:0f:fe:99:85:6e:a1:54:
         30:db:d5:dd:de:6b:50:08:73:fe:bb:9a:9d:43:5e:a9:c1:36:
         45:c2:6a:e5:a9:3e:5d:62:b8:77:ec:8c:88:c5:96:57:4e:3f:
         16:45:f9:84:59:fa:f1:2a:70:14:c5:8f:4a:ca:a2:63:41:80:
         38:2b:5d:93:64:ec:db:ec:6a:5b:fb:e7:81:fe:9b:85:e9:67:
         cc:cb:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:27 2026 by rpki-client