Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/695d5eb0-1455-3ab9-b1b5-b357f5358e80.roa
File:                     695d5eb0-1455-3ab9-b1b5-b357f5358e80.roa (raw, json)
Hash identifier:          AohygN/jsPOYUZJLG/k4b4Z+S8EwzJ3emba4esYTT24=
Subject key identifier:   13:D9:BC:3B:25:67:67:68:AE:D6:AE:4F:D8:27:06:CF:7B:D0:6C:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F48C0A9A3EBDA1F2F5E6C10C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/695d5eb0-1455-3ab9-b1b5-b357f5358e80.roa
Signing time:             Thu 24 Sep 2026 19:01:51 +0000
ROA not before:           Thu 24 Sep 2026 19:01:51 +0000
ROA not after:            Wed 23 Dec 2026 20:01:51 +0000
asID:                     701
IP address blocks:        98.118.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:c0:a9:a3:eb:da:1f:2f:5e:6c:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 19:01:51 2026 GMT
            Not After : Dec 23 20:01:51 2026 GMT
        Subject: CN=9fe7cd11-213c-4c14-a2ab-13db3ad22ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:c7:d1:8c:15:40:35:36:59:17:36:5a:41:
                    e6:93:91:89:61:1d:de:77:df:e9:5f:fc:fe:b6:38:
                    75:f8:f6:ce:b7:b3:ed:79:e5:30:bd:9d:71:4b:74:
                    35:1b:0b:7a:fd:5a:2d:71:1d:d3:b5:2b:87:d8:ea:
                    60:ec:e1:8b:b2:4a:f2:ed:05:4b:e7:1c:ea:71:44:
                    61:0f:55:85:6b:41:71:5c:73:e1:2a:04:56:e7:97:
                    02:d7:c0:b6:c2:25:a6:59:76:1d:1c:b8:47:47:cb:
                    38:2c:62:42:dd:60:8a:89:fb:5c:ad:18:ae:10:ba:
                    7e:61:e1:84:dc:5f:87:f0:4f:4d:77:a3:8e:75:49:
                    24:2a:4d:de:87:92:4f:37:38:34:54:10:e3:38:f6:
                    27:27:73:1d:d1:8c:08:fe:26:7f:32:da:86:db:1c:
                    ba:51:81:e7:be:b5:a6:92:de:5c:5a:8d:bd:2e:5a:
                    c5:d0:4a:d4:1f:74:9c:fd:62:95:64:5c:6b:29:87:
                    4e:d2:05:20:d6:32:e2:c1:01:8c:d5:63:d0:a4:63:
                    5e:47:b5:f8:05:5d:8e:1a:39:d3:7d:82:27:cd:d4:
                    5d:d8:5b:c1:4c:84:9f:7c:24:e5:d0:e0:8c:70:ef:
                    95:5b:0e:b0:cc:d7:a7:78:24:8f:fc:2f:78:32:0e:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D9:BC:3B:25:67:67:68:AE:D6:AE:4F:D8:27:06:CF:7B:D0:6C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/695d5eb0-1455-3ab9-b1b5-b357f5358e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.118.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:b6:64:7e:fb:9d:01:72:34:28:3e:08:8d:c6:ea:19:3b:
         0e:d2:01:37:f5:ad:70:f2:b4:70:b3:5b:d5:4e:78:47:c9:3f:
         15:17:5c:c8:13:6c:9e:37:c5:b1:73:9a:06:02:75:4f:0e:58:
         d9:7d:6f:6c:df:55:ce:0f:7d:9b:e1:e7:b6:fd:ba:49:6f:17:
         77:a2:bd:9c:be:e1:96:7a:4b:12:b9:95:c4:16:7e:cc:22:d5:
         da:65:17:61:4e:4f:5d:f5:e7:5e:16:0c:67:d0:cd:5b:be:c1:
         8e:62:d3:c5:eb:10:3a:09:b5:7e:4c:13:c6:2b:37:68:7e:5d:
         fa:d1:66:67:dc:7c:82:a1:25:96:fd:0b:1b:b0:b9:0e:eb:6a:
         38:63:f1:c1:02:21:de:73:c9:05:c7:b4:ee:4f:73:af:cb:5c:
         5e:d3:f0:a8:4b:80:b9:a9:93:18:d9:33:36:eb:86:7a:76:27:
         70:a2:53:84:3f:b0:8d:61:4b:c7:bf:bb:3e:70:d1:d4:d4:ea:
         6a:b5:c9:e2:7f:42:fc:c6:6a:3b:90:c5:c4:15:2d:ef:84:cb:
         12:7f:17:75:38:c5:ad:7d:bb:dd:29:e7:69:eb:c1:53:c6:4f:
         d6:bc:dc:07:bd:9f:cc:de:38:d6:17:e7:cf:d1:23:18:25:f3:
         30:bc:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:04:08 2026 by rpki-client