Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35adf3d6-757f-3b78-ba58-b82f18c240b4.roa
File:                     35adf3d6-757f-3b78-ba58-b82f18c240b4.roa (raw, json)
Hash identifier:          NfnMbj5Bt+ldBJo1cez3ym6xz3TTrOkxVQ7ooFBHOPY=
Subject key identifier:   F2:B0:AB:00:64:85:C2:FB:83:92:3D:EF:1D:54:3A:C2:66:FD:AC:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F48C09E4930C0D12C2EE05180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35adf3d6-757f-3b78-ba58-b82f18c240b4.roa
Signing time:             Thu 24 Sep 2026 19:01:45 +0000
ROA not before:           Thu 24 Sep 2026 19:01:45 +0000
ROA not after:            Wed 23 Dec 2026 20:01:45 +0000
asID:                     701
IP address blocks:        98.110.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:c0:9e:49:30:c0:d1:2c:2e:e0:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 19:01:45 2026 GMT
            Not After : Dec 23 20:01:45 2026 GMT
        Subject: CN=6e13146e-7305-4bae-b142-e4fad43597da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:ec:51:56:21:64:36:7a:41:c9:5b:04:89:
                    c7:12:57:a4:33:fd:a9:f7:23:dc:2f:03:ae:59:90:
                    53:c5:61:90:bd:b2:6c:ef:00:dc:e2:4e:a6:86:e0:
                    5c:9b:fd:72:7f:e3:36:20:7a:fb:9a:af:5b:12:20:
                    ec:49:2a:81:6e:1c:a1:68:28:f9:01:0a:02:a3:10:
                    58:7e:a4:cc:0d:fe:28:46:61:f7:b9:7c:a7:ac:a3:
                    50:35:27:8b:ed:e0:b9:21:51:d8:45:58:80:82:34:
                    d9:b3:e1:9c:5f:a7:70:f5:fc:df:14:8a:44:e8:ae:
                    04:16:c2:ae:01:d0:89:50:5c:63:bf:e0:c6:48:9a:
                    16:e3:94:35:05:fd:53:76:de:bb:08:ef:76:a4:ee:
                    58:7b:a5:15:46:24:e8:dd:ee:3c:19:ed:c4:89:bf:
                    96:45:a0:22:a1:25:15:4f:55:4a:0c:7c:64:65:c3:
                    b9:1d:54:e3:be:cb:bf:7c:07:5e:d4:fc:e1:3e:93:
                    b4:6a:c4:df:66:bb:26:95:71:99:55:f1:88:cc:ed:
                    87:8e:e5:a1:4d:4b:ca:22:fb:80:aa:8c:82:42:34:
                    c9:91:0d:2d:f4:65:a9:22:ec:77:ee:d5:30:7c:94:
                    7d:87:b5:c9:4a:70:ef:d0:4e:eb:98:a9:5a:85:b7:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B0:AB:00:64:85:C2:FB:83:92:3D:EF:1D:54:3A:C2:66:FD:AC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35adf3d6-757f-3b78-ba58-b82f18c240b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.110.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:bd:b2:6c:41:35:5f:05:12:dc:3d:b5:dc:86:c2:7f:14:
         03:19:60:5e:18:b8:72:89:a8:7c:7c:6a:6f:24:d5:d3:d8:d0:
         d3:76:cc:37:72:a1:fb:c9:f9:77:85:2f:04:7a:8f:6f:cc:16:
         e4:78:74:0b:ed:02:73:57:9f:1c:e1:b8:55:d6:1d:21:04:b2:
         74:8c:03:e6:f0:61:78:1c:2b:73:6b:42:64:78:9a:be:0c:9f:
         ec:6c:fb:27:22:80:e1:83:68:9a:1c:d6:a7:d6:79:77:f1:b9:
         b9:bc:e2:c9:d6:47:0b:c6:eb:b8:7c:d4:be:54:6a:b3:b6:b9:
         9b:b3:b0:10:25:4d:5a:d8:9b:d5:f8:3c:51:d7:88:c3:75:ed:
         46:54:e0:aa:99:d0:f0:7b:7a:e4:16:24:a2:e2:17:aa:a8:9e:
         fb:b8:1c:dd:a0:07:27:a2:48:cd:d7:11:f6:22:91:ac:d5:fe:
         23:03:83:a9:3b:dc:55:a4:fa:d5:11:19:9a:0b:49:29:88:16:
         27:96:a3:ea:e6:1e:85:1f:b5:41:4c:2d:70:e6:86:8d:c9:65:
         a1:3a:2d:df:7d:d6:9f:d9:cb:ad:aa:1e:42:72:f7:0a:60:d6:
         fd:3a:f5:ee:5b:29:05:47:69:c2:2e:a5:78:ed:45:4d:a0:49:
         6a:33:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:26:13 2026 by rpki-client