Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5e70899e-5194-3371-8599-2d2d33e82500.roa
File:                     5e70899e-5194-3371-8599-2d2d33e82500.roa (raw, json)
Hash identifier:          T+y5WuTtzdyHiGep8zb9IofUZHb6UuS0Wmzg1L74VGI=
Subject key identifier:   FC:9C:ED:42:37:02:B9:53:7C:DD:AE:3A:86:5A:B9:8F:D0:29:55:A8
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD153E7EDB7FEBB222E40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5e70899e-5194-3371-8599-2d2d33e82500.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     6939
IP address blocks:        172.252.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d1:53:e7:ed:b7:fe:bb:22:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=e731564a-77dc-45ba-ae44-bd6435815000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:a3:8c:fc:ee:f8:a1:11:f4:af:c1:c8:70:
                    2d:27:1e:22:f8:c9:85:dc:79:1e:9f:dc:9b:55:c3:
                    9d:96:96:be:e3:a7:43:39:61:e9:5c:d8:e9:7f:fc:
                    6d:1d:06:18:34:ff:97:e9:96:1c:20:44:5b:20:c5:
                    75:52:50:7d:09:33:80:42:78:a1:cf:db:8b:03:26:
                    a9:d3:88:67:1a:0a:ba:db:6c:f7:86:87:03:fc:0a:
                    79:89:4d:99:f9:ea:ee:30:59:4b:68:41:3c:fc:ca:
                    f3:a4:fa:ac:9b:ed:10:8f:49:01:f6:ec:e6:0e:f6:
                    4a:eb:56:d9:08:73:e7:44:a1:fc:f0:22:fd:77:6b:
                    77:13:be:68:b1:a8:3d:6a:63:91:55:39:a7:94:a1:
                    2a:27:ce:10:d9:28:6e:54:4b:e2:91:f5:02:b1:7f:
                    8c:7e:c2:92:23:72:69:c7:12:d9:39:14:f7:78:72:
                    a2:f9:aa:f8:1a:c3:10:7c:4c:92:59:89:3a:30:40:
                    d0:66:75:36:02:06:36:5d:a6:32:1e:16:75:4d:97:
                    75:b6:f9:5e:39:47:b3:3d:5a:40:a6:e7:fe:91:67:
                    f2:37:4d:df:43:ac:43:97:92:3c:74:48:4c:53:47:
                    af:b0:6e:e5:81:b6:be:36:01:ef:55:52:c4:e3:c3:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9C:ED:42:37:02:B9:53:7C:DD:AE:3A:86:5A:B9:8F:D0:29:55:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5e70899e-5194-3371-8599-2d2d33e82500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:98:b5:6b:0b:ea:a7:d2:95:fb:e0:9a:66:1d:3f:0f:3a:
         6c:2d:bb:82:d4:c0:0e:4a:0b:b9:d0:08:bc:7f:fe:50:76:c8:
         21:6d:1e:04:f9:d2:d7:3a:a1:6b:03:b6:cb:bf:db:50:11:b8:
         7f:95:44:66:5f:c7:37:1b:8a:1a:0c:cc:0d:fc:29:0d:db:cb:
         1d:92:c1:0d:b7:b1:0f:03:dc:81:aa:c6:23:51:11:ee:1e:e6:
         3e:ba:ea:1d:77:2c:bd:3e:64:da:d1:74:00:6b:76:d6:81:52:
         6c:a6:01:57:c6:f3:bf:0a:69:c0:8a:1e:50:bb:ae:2d:ce:4d:
         c7:66:0d:38:ba:e9:27:bf:3e:7f:eb:5c:00:b2:8f:a9:4c:b6:
         58:82:4c:df:9a:e7:1b:aa:4b:7e:b5:e4:e2:84:2c:a5:d6:3a:
         7d:c1:99:06:a3:a3:b7:4e:65:68:27:95:66:26:15:3d:a6:ce:
         6f:13:d4:6c:4c:0b:ee:c8:1a:ed:ef:35:bd:58:af:4d:75:88:
         ee:fb:f8:21:6c:b9:3a:33:43:df:ef:e9:38:74:90:25:44:5f:
         ad:e7:93:19:df:6f:cd:ac:c9:cd:70:d9:21:a7:64:16:9f:0a:
         81:f7:d6:50:9e:df:ae:37:d0:53:68:9b:72:29:9a:5a:91:7f:
         aa:7b:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:20:16 2026 by rpki-client