Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e310665-6fcc-3c96-b8f7-9b2de3108428.roa
File:                     2e310665-6fcc-3c96-b8f7-9b2de3108428.roa (raw, json)
Hash identifier:          5AUieBNCIXg+MoOzLpCQmvkx7cYZNYGajI7yKNgoUQI=
Subject key identifier:   BA:C6:04:C8:CC:BD:2B:8E:B9:21:08:17:4C:89:D3:DE:9A:ED:0F:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F48C0A9847F7C24012573DA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e310665-6fcc-3c96-b8f7-9b2de3108428.roa
Signing time:             Thu 24 Sep 2026 19:01:50 +0000
ROA not before:           Thu 24 Sep 2026 19:01:50 +0000
ROA not after:            Wed 23 Dec 2026 20:01:50 +0000
asID:                     701
IP address blocks:        98.118.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:c0:a9:84:7f:7c:24:01:25:73:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 19:01:50 2026 GMT
            Not After : Dec 23 20:01:50 2026 GMT
        Subject: CN=8352605a-bf87-4136-81bd-0914b5a6b0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:b4:a4:f6:b0:d5:a5:37:54:b3:9c:19:5e:
                    7c:46:15:b7:6b:ab:92:c0:b1:d1:a1:60:5f:a0:94:
                    43:bd:d1:71:bd:3f:4a:b8:76:fa:50:8c:a8:fd:6d:
                    61:7f:d3:f2:32:dc:3e:3f:f9:40:aa:c4:3d:e9:38:
                    64:ad:c8:c3:d6:3c:2c:70:19:2c:ef:fa:e8:18:e9:
                    c4:97:94:c9:cb:9d:0a:a1:16:55:da:68:2a:4b:86:
                    80:9b:8b:b7:47:74:24:44:d2:14:fc:9d:54:a4:51:
                    13:fc:fb:22:38:c6:e4:37:99:62:85:81:31:ad:fb:
                    a5:6e:3c:d8:70:21:9c:39:be:d9:94:e6:8b:24:c5:
                    1e:8c:56:4c:a8:f6:a7:de:e7:aa:ea:2c:d0:fd:02:
                    21:a7:f2:fa:a2:e3:4d:28:1f:63:67:16:7b:de:5d:
                    13:8e:8b:02:ef:44:55:e8:c1:b6:ae:c5:84:7e:4f:
                    ce:d7:79:d7:b9:c6:dd:28:7e:1f:a3:ac:38:5a:41:
                    d3:f5:c1:0c:8c:d4:8a:d5:33:fc:4f:03:62:12:3e:
                    8c:12:34:b2:13:9f:f2:80:03:b2:f4:a3:0c:ab:68:
                    15:0e:5b:69:28:e5:6b:ec:d1:b4:fd:c5:0f:45:6a:
                    9e:5b:4e:6b:c1:21:36:8f:d1:b3:a1:12:bc:12:eb:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:04:C8:CC:BD:2B:8E:B9:21:08:17:4C:89:D3:DE:9A:ED:0F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e310665-6fcc-3c96-b8f7-9b2de3108428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.118.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:76:cf:95:a5:21:15:1b:a6:f0:38:fd:46:16:17:3c:d8:
         ff:d2:c1:27:f5:ce:ef:48:ca:04:2c:61:6b:6c:dc:84:21:27:
         49:fe:ff:20:c3:68:73:40:40:6c:35:3c:18:92:20:40:0d:cf:
         f5:ce:17:92:6d:11:8c:fc:3e:7f:90:8e:c1:af:70:cb:40:14:
         74:c5:ab:6a:60:05:52:5e:dd:d0:d7:2d:e3:3e:fe:34:dc:2b:
         9b:69:fe:2d:76:24:9d:34:58:01:cf:ea:45:31:b3:13:75:d6:
         37:7e:cd:ec:6d:9e:a8:81:8d:db:87:4e:3f:ec:a4:70:c1:4b:
         3a:3b:42:b6:d7:07:a2:15:d3:47:7e:1c:cd:b7:d7:8c:5b:4e:
         2c:27:af:bc:6c:b0:3c:aa:dd:15:7a:56:8b:ef:43:1a:4a:ac:
         26:92:53:14:00:03:16:e3:bb:b4:08:e9:ad:cd:c4:aa:fb:ad:
         6e:f5:7a:6f:26:06:af:1e:ad:1c:47:8e:eb:32:ae:e1:25:0b:
         cf:7f:78:f7:e4:c3:14:98:64:de:85:6a:e4:33:de:1d:b2:63:
         db:85:28:56:bb:0f:7e:e6:b8:cb:24:81:2e:5f:7d:c2:6c:f1:
         1e:61:7a:06:a6:74:9b:ff:82:9d:9d:57:04:26:28:c1:0c:e8:
         71:7e:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:33:36 2026 by rpki-client