Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d89b671-43ac-3a45-a2bb-8b83bb0d1d11.roa
File:                     5d89b671-43ac-3a45-a2bb-8b83bb0d1d11.roa (raw, json)
Hash identifier:          NjJ6N9BgWVNJJmn0PdfJe+mUm6BMu0TxTU5gOjdtXL8=
Subject key identifier:   F2:FE:BB:2B:CE:5A:28:CF:46:C7:00:2F:AB:FA:76:F4:0A:F5:DF:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F48C09E0AD0C5593230CE00E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d89b671-43ac-3a45-a2bb-8b83bb0d1d11.roa
Signing time:             Thu 24 Sep 2026 19:01:45 +0000
ROA not before:           Thu 24 Sep 2026 19:01:45 +0000
ROA not after:            Wed 23 Dec 2026 20:01:45 +0000
asID:                     701
IP address blocks:        98.109.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:c0:9e:0a:d0:c5:59:32:30:ce:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 19:01:45 2026 GMT
            Not After : Dec 23 20:01:45 2026 GMT
        Subject: CN=5dfd6747-4e15-495e-8577-a35783ed8255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:66:07:8d:ab:f6:55:16:0c:d9:ab:5c:2b:
                    a9:36:73:7f:b9:15:7f:46:b4:33:c0:0f:f4:5d:b2:
                    04:84:99:4a:63:b3:c3:2e:6d:96:40:a9:b1:8f:cb:
                    42:ac:7c:fc:eb:67:b7:fc:3a:62:3f:35:92:05:2a:
                    6f:18:db:45:4e:53:27:75:66:78:03:50:2d:b7:58:
                    1a:1d:cd:98:bc:d8:7d:34:8d:8a:a2:63:7a:06:be:
                    84:95:68:1b:5a:f2:35:36:cb:39:1d:90:03:01:a8:
                    07:5d:74:54:d8:00:42:78:d8:91:95:9c:e7:3c:2f:
                    2d:83:6e:d0:ec:30:11:1b:f7:5e:bd:1f:41:f7:9a:
                    4f:ff:0f:da:17:d6:e9:52:5b:f5:d6:4a:02:13:e3:
                    9a:8c:41:89:d8:a4:23:ab:7f:0c:d1:ad:05:4d:fd:
                    9f:fa:fd:41:28:2f:4a:d9:86:06:7c:c2:40:ca:2c:
                    09:dc:3b:e4:b3:d2:b1:21:09:6d:20:b2:6e:5c:3e:
                    e4:a8:85:4d:72:fd:05:91:07:ae:fa:cd:d5:57:6e:
                    65:63:3c:dc:66:65:2a:d8:35:34:4c:c7:ca:02:48:
                    f8:5e:a4:82:db:07:df:52:71:28:95:0f:0d:8c:41:
                    e2:94:2e:a4:8e:23:cd:fb:de:fc:2e:74:3d:90:81:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:BB:2B:CE:5A:28:CF:46:C7:00:2F:AB:FA:76:F4:0A:F5:DF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d89b671-43ac-3a45-a2bb-8b83bb0d1d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:75:a1:f0:d3:81:c0:78:3e:b1:4a:b5:f0:fc:36:9d:4f:
         9a:da:73:d1:1b:34:45:f2:eb:a6:de:12:a0:31:29:37:29:58:
         d1:04:9b:0e:cb:02:c5:34:6c:11:83:62:8b:b8:bb:45:ac:6f:
         0e:66:c5:d2:d4:7d:a9:24:f8:e9:6c:d0:26:f4:a6:c9:dc:11:
         c4:f7:ae:3c:42:a7:a6:e3:f1:3e:d3:57:1a:b1:c3:11:7f:6f:
         95:c7:7e:b7:f4:50:64:41:4f:38:c4:33:35:cd:0c:a0:92:91:
         89:25:bd:ce:57:8e:a5:cb:06:b8:91:49:c2:46:d9:17:ee:9e:
         55:47:ca:f3:b5:79:30:0d:a6:4f:d2:bb:3c:6b:44:1a:9e:54:
         dd:d1:78:73:a9:97:3a:60:44:af:1f:91:81:d0:63:16:25:c8:
         b6:7b:f7:cd:2e:e9:b6:d8:51:d2:79:33:85:93:24:a8:50:74:
         37:55:77:ce:63:e0:51:86:a0:47:cd:fa:3d:fa:e7:5a:b2:93:
         c4:04:61:21:72:b4:5a:42:f0:6a:ac:fa:07:31:85:9c:61:fe:
         32:36:be:e5:e5:9a:5d:2e:86:29:3e:47:d8:05:67:11:9c:25:
         a1:0f:c8:92:d8:13:e2:b0:a7:13:30:90:06:31:a5:d1:00:4f:
         87:e5:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:20 2026 by rpki-client