Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa
File:                     1c2caecd-5d24-3447-b3c5-116394c1a96e.roa (raw, json)
Hash identifier:          zBorOp5ivK2meHbzqYxd+r3lGrOFEcpVgEPldoAKnyg=
Subject key identifier:   89:F3:25:EB:A2:B3:D9:43:A7:58:F2:D4:E0:39:AA:EC:8F:6A:17:86
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584E0005E0B64FFF69B2E4F749A0
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     14618
IP address blocks:        166.98.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e0:b6:4f:ff:69:b2:e4:f7:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a4b3a375-46f5-472d-a26f-23c69d102df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:dd:e3:bc:9d:a8:39:e3:4c:4d:93:80:a0:
                    28:d3:e7:18:83:1d:97:c8:59:40:84:cd:d9:b3:5c:
                    18:06:35:bf:eb:53:1a:5b:45:a0:7d:50:d4:6a:4d:
                    99:cf:6f:b3:cb:e4:b6:e4:3d:99:58:64:a0:37:d9:
                    d2:b4:1c:9b:f2:cb:bd:6d:c8:fe:e8:29:d4:67:0f:
                    46:b5:c7:81:89:ca:e4:1d:89:23:56:d3:62:89:25:
                    b7:4f:d3:48:63:89:69:81:4b:03:d2:3c:66:64:83:
                    f8:5b:47:af:6e:1a:a5:6a:0f:5a:af:59:33:e8:c9:
                    7b:40:74:9f:46:1a:1e:e7:65:dc:63:58:a2:60:28:
                    cc:0a:74:3c:ec:1b:95:fc:49:85:ec:ce:89:e1:ea:
                    be:3b:34:c8:50:87:25:c0:e7:d3:75:fd:0f:85:3f:
                    a4:a2:28:a3:62:04:c1:4c:fc:d4:0b:ed:f9:48:ad:
                    59:32:60:9e:f3:3b:c0:e0:6a:41:46:e7:78:36:61:
                    5c:d9:04:0d:47:64:0e:f6:36:cf:2f:f1:d0:6b:0f:
                    58:13:3e:9a:39:24:bb:97:dd:26:f7:53:86:93:9f:
                    19:06:98:6b:92:8e:95:73:c9:39:64:35:ed:8b:52:
                    59:48:70:c9:62:85:cf:ae:20:e2:c3:71:44:52:e6:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F3:25:EB:A2:B3:D9:43:A7:58:F2:D4:E0:39:AA:EC:8F:6A:17:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:51:d2:81:96:2f:a5:da:7e:3f:90:70:a5:61:cb:be:09:
         8b:b2:37:bf:96:6f:fa:c6:a6:d9:f2:ce:88:d3:10:13:c1:25:
         2a:88:37:42:8e:e1:13:76:67:9c:fb:b1:19:e8:ed:2d:88:3b:
         69:e3:91:ec:88:c0:82:bb:1a:e2:89:87:d2:1f:1d:e1:84:ca:
         0b:27:44:b4:1d:e8:a8:0a:34:bc:49:8f:06:67:15:4c:90:fa:
         cc:4e:df:ef:56:7d:73:61:41:4f:f5:23:36:3e:e6:12:b2:30:
         ac:ca:5d:26:43:1e:90:59:10:8b:97:49:cb:f2:af:69:97:f4:
         c6:17:1a:ce:04:4a:6d:6f:38:c4:93:ee:7a:45:b1:c5:0a:58:
         8c:1d:83:e9:32:30:f8:10:58:93:7e:03:b1:fc:44:51:3b:9a:
         3d:b1:7e:44:1f:56:6c:3d:3f:fd:ba:cb:72:50:ee:ca:fa:b3:
         09:e1:c8:33:06:47:66:c5:6f:e7:74:99:fe:01:39:6b:6e:4d:
         0f:26:bb:dc:e3:c9:be:10:2e:81:7e:5d:a9:93:df:27:d8:a3:
         7d:69:61:07:c9:cf:af:ca:ce:6a:70:c8:86:dc:5e:7e:1c:59:
         4b:90:fa:50:e8:cd:ba:2a:43:9c:dc:78:61:fe:8b:fd:c7:04:
         84:54:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:36 2026 by rpki-client