Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa
File:                     79f9299b-0362-3137-aef0-5e220b4411a3.roa (raw, json)
Hash identifier:          v+f8Y+aRKGLAvOk3yroxPZB5m/PkqfW4ko0ydkHSFX8=
Subject key identifier:   10:34:ED:7E:F0:90:0C:0C:86:2A:75:5E:81:8B:0C:4A:ED:E5:DF:BA
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584CB121C2964430D216DFE2D580
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     205659
IP address blocks:        172.98.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c2:96:44:30:d2:16:df:e2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=35df7b92-d959-428d-9a63-78935dc3dafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:e4:01:6d:d9:93:6c:61:c1:71:2b:7e:6f:
                    a4:ee:c3:20:41:91:24:47:7f:92:45:2e:ac:67:25:
                    44:82:38:c9:88:88:65:d8:a9:03:8a:6a:e2:3a:48:
                    e7:9d:d2:53:d4:0e:3c:c3:fe:b3:93:a7:5c:ca:0f:
                    39:3e:e3:3e:bb:7e:55:71:9e:43:ca:ea:f9:80:f8:
                    03:6a:fd:da:b1:13:55:1d:a8:7e:19:c2:92:ae:9a:
                    f3:46:20:60:44:f1:d2:ae:d4:a9:1b:f5:cc:aa:35:
                    97:77:18:97:44:63:0d:ce:de:05:59:28:47:6e:14:
                    f6:70:c7:5d:b5:3c:1a:ac:3d:1d:e8:06:70:e7:68:
                    a8:06:d8:b8:b7:85:20:95:65:31:99:74:08:a6:09:
                    09:a4:78:a9:8c:64:a9:cd:af:c9:48:35:3f:e7:6d:
                    af:b6:1d:80:71:c4:76:de:a1:84:05:6d:76:2f:ff:
                    bb:b6:87:1f:02:99:8f:39:50:8f:1e:a6:9a:77:2e:
                    07:d1:54:9d:36:a0:42:fa:d3:40:09:6e:bf:ad:59:
                    ab:d8:8b:5b:43:83:c5:ec:3b:58:30:4f:8b:18:f3:
                    0b:f1:73:f5:ad:5b:0c:1e:45:5f:fe:7f:77:48:03:
                    58:9b:a3:d0:98:07:1b:a2:c9:ed:ab:0a:e3:79:ed:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:34:ED:7E:F0:90:0C:0C:86:2A:75:5E:81:8B:0C:4A:ED:E5:DF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:47:cd:32:24:1e:69:89:11:38:cf:40:a0:a3:27:2b:f8:
         69:49:78:87:fd:ca:ee:e4:51:83:bd:ab:65:8b:ed:f5:14:71:
         6e:32:e4:49:c9:db:18:17:68:20:50:6a:94:0f:30:27:bb:d1:
         b6:4a:81:6e:ff:c2:52:07:00:c1:9f:d1:fe:e4:0e:2b:aa:a2:
         3f:d0:36:a2:a6:79:5c:e2:79:b0:73:13:08:f5:cc:e4:72:42:
         50:e9:8f:35:5c:3e:f9:0f:a9:ce:ae:d7:97:a8:90:5e:c4:03:
         83:bd:3f:72:75:3a:48:82:27:d1:db:fa:29:d3:46:3c:15:eb:
         72:80:47:73:6a:12:2b:53:84:e1:00:20:8a:d7:e3:6d:8e:9c:
         9b:78:9c:a6:08:10:0e:41:5a:8c:35:e3:61:d3:40:02:9f:51:
         ea:b3:41:d6:18:68:0c:92:ff:50:b1:1e:2d:bc:36:da:7e:f8:
         1a:47:95:d8:d9:c5:42:e7:62:4e:f3:d1:86:8f:91:16:9a:5f:
         63:fb:31:9f:c3:b3:e9:50:df:34:1b:68:81:c3:14:e3:4c:ad:
         21:85:b3:6c:64:0c:a8:7a:3f:97:70:43:82:83:7e:a3:86:07:
         f2:de:ee:7f:0f:e7:c5:d3:38:ff:d6:4b:9d:d5:9b:21:19:4e:
         13:d4:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:28 2026 by rpki-client