Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8b0e9b03-7aca-3252-af7a-afbe9b29dd57.roa
File:                     8b0e9b03-7aca-3252-af7a-afbe9b29dd57.roa (raw, json)
Hash identifier:          SzZkUWO5rcj24YV6iTU3uRoMgossV9SIAnJeoq5HH7Y=
Subject key identifier:   D9:16:27:1B:C6:CC:9C:FA:5C:FF:6C:C2:C2:00:33:2E:1C:48:5D:22
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584CED278358B1377461A8EE97E0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8b0e9b03-7aca-3252-af7a-afbe9b29dd57.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     206216
IP address blocks:        45.61.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:83:58:b1:37:74:61:a8:ee:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=496605b1-78f4-46d3-bd66-66c28faec7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:63:65:58:0e:ff:46:07:c6:7d:8b:24:cb:
                    9d:ae:10:4f:8c:85:3f:b6:95:d5:d4:4b:d1:5f:f8:
                    4e:a7:99:f4:07:eb:d4:34:1d:fa:d7:4f:73:18:21:
                    75:f6:e4:0f:da:c6:ee:be:ad:c4:f5:99:58:42:a3:
                    42:1d:b1:20:f8:e8:c9:f8:df:81:e5:24:73:2f:84:
                    a8:fe:1f:1e:b0:63:b5:14:34:42:5e:7d:a9:14:9e:
                    03:83:1c:cd:d0:8d:2d:31:36:af:c4:8b:ef:d8:a9:
                    41:8d:35:7d:48:0c:0a:f9:39:c7:b1:56:c9:dd:12:
                    a1:49:84:73:12:a0:43:0c:c2:00:a4:12:18:6e:24:
                    cb:a6:56:9c:43:32:79:d2:21:e2:12:94:c3:22:7b:
                    89:00:10:e0:59:3c:5b:80:31:43:d9:0f:3a:45:17:
                    20:ea:bf:69:eb:11:12:37:f7:c4:0f:6b:da:00:97:
                    65:b3:ac:e8:26:2b:5d:a8:59:5b:a7:c7:1f:fb:ee:
                    c9:4e:d5:d2:af:e4:a0:a0:68:f3:6f:b2:aa:72:0c:
                    e5:d3:f4:40:ef:53:ab:b4:a8:11:e5:b1:63:41:3a:
                    fc:83:84:ea:08:51:c3:b3:f8:e9:91:d9:81:de:a8:
                    f8:f8:a6:6f:33:8b:83:77:b7:a9:0b:9c:ba:44:ea:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:16:27:1B:C6:CC:9C:FA:5C:FF:6C:C2:C2:00:33:2E:1C:48:5D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8b0e9b03-7aca-3252-af7a-afbe9b29dd57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:77:df:7d:81:1a:06:4d:b0:db:ec:fb:85:e4:bd:8c:f8:fa:
         40:27:94:b4:5d:b1:f4:80:6d:f4:cc:39:52:ee:51:57:24:f3:
         06:c6:dd:91:ab:e6:cc:c5:6f:57:9b:db:c1:9c:84:96:d3:3f:
         4a:9d:0e:71:b5:1c:07:c4:82:af:36:82:ab:7e:f3:eb:9a:df:
         2d:8a:f0:77:90:5c:a5:bc:be:8b:39:75:7a:4e:21:64:0d:89:
         82:21:7c:93:0f:7f:04:a2:34:e3:1d:d6:2b:2f:e5:41:db:36:
         b2:63:3d:69:c8:e9:5c:8e:80:93:2f:54:fc:d9:51:27:c8:f6:
         61:19:cb:8d:0f:69:06:cf:4d:4c:46:ee:83:c3:04:bb:dc:dd:
         cc:1d:c5:a1:2e:26:21:b6:fc:ab:4e:a0:81:9f:41:ba:65:a9:
         35:59:42:fd:b9:b9:60:5e:be:2c:09:c4:08:fb:ed:ae:92:35:
         89:75:cb:2a:aa:64:80:5d:55:4b:64:24:01:90:14:4a:21:14:
         cc:61:17:b2:52:df:e1:4d:5a:0d:02:a7:0c:51:70:50:19:56:
         22:2b:4e:0b:17:95:3d:78:a1:f7:e1:16:36:da:a3:88:bd:ad:
         64:fe:c6:bd:e0:5d:ff:23:84:fb:98:c9:27:c2:e6:05:51:b7:
         41:49:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:13 2026 by rpki-client