Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa
File:                     19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa (raw, json)
Hash identifier:          Lr59Rb4i291JFVIkA9LWCBD07IZu8P4vBvCy2Uwq/nc=
Subject key identifier:   68:80:36:39:DF:1D:F9:A7:39:FF:3B:BE:8E:3F:B6:F5:AD:53:73:FC
Certificate issuer:       /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
Certificate serial:       010D0C9F4328584CCE720DDD595EEEF3A0BC8448
Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     140951
IP address blocks:        98.158.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:0d:dd:59:5e:ee:f3:a0:bc:84:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=f5e7a147-c933-4be6-bacf-14df5b043a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:d0:99:1d:ea:26:07:d5:cb:f2:44:dd:32:
                    6e:74:2d:eb:c8:d0:e3:bb:22:4f:24:0b:d5:40:47:
                    65:ab:d5:4e:45:da:8c:20:01:e1:bf:4f:cb:89:55:
                    bd:a9:43:a2:5c:0d:65:73:80:db:1e:da:84:38:c1:
                    10:32:c0:21:ba:78:f9:e0:b1:3c:e4:c9:f3:a7:18:
                    fc:b1:d0:1b:4b:5e:97:8b:b1:1e:7b:d3:77:94:db:
                    fe:6e:88:c4:36:1c:75:59:bc:84:25:f7:5e:9b:32:
                    18:26:6c:6c:34:0d:90:df:4f:55:9a:af:02:20:e7:
                    53:0b:fd:06:6e:c0:c6:f1:2a:1d:5f:db:53:18:ee:
                    d8:66:61:d0:76:15:94:0c:cd:9e:cb:ab:b9:a3:00:
                    20:df:c5:45:d6:5d:f8:86:06:d0:3e:c4:cb:e2:1c:
                    58:aa:fd:d3:2d:a7:52:85:48:17:6a:2f:86:e8:cf:
                    08:64:22:9f:ef:1b:d2:2d:f8:05:9a:62:e3:25:07:
                    fa:98:04:bd:97:90:fc:1f:11:5b:29:22:ce:24:3c:
                    48:a3:3c:da:54:4b:93:12:0b:62:1a:7e:84:f8:4e:
                    cb:8e:af:e3:cb:54:53:79:cb:01:ef:38:88:66:b1:
                    d8:88:d6:c8:6c:fb:22:6f:30:d1:2b:4a:db:9b:4c:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:80:36:39:DF:1D:F9:A7:39:FF:3B:BE:8E:3F:B6:F5:AD:53:73:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:31:6f:b1:12:b8:0f:ea:dd:dc:75:a4:0a:d8:8d:7c:b3:99:
         b2:95:6e:d3:8f:e3:88:da:48:ad:a5:1a:af:8b:0d:39:b2:57:
         da:ef:eb:d7:eb:87:b6:fa:e1:bb:5a:99:cd:44:e8:59:79:03:
         16:c8:5a:13:15:0e:b5:e1:ad:0d:ab:8b:82:60:18:7f:ad:5e:
         0b:9d:7f:25:92:7a:89:7f:0b:d3:99:80:cf:e0:2a:b8:55:fb:
         a3:75:5b:78:8d:36:e9:0b:d1:ad:7a:8e:13:60:96:db:21:d0:
         1c:70:a6:cb:04:39:ed:72:47:f6:e6:09:0f:22:84:28:fb:0e:
         6f:de:03:c9:4c:43:eb:66:ae:45:76:49:1f:5d:12:98:2a:c7:
         77:e4:d7:09:e1:7e:c7:c7:57:a7:96:79:35:15:38:be:f1:d7:
         0c:30:e5:c6:41:42:0a:04:f4:53:fc:c0:f5:07:d6:3b:ac:81:
         77:9c:c1:0a:d7:3c:d2:9a:97:35:cf:b4:fe:0c:15:b9:31:cb:
         70:10:49:52:b4:15:55:ea:d3:d9:26:91:36:fd:35:c5:ca:26:
         17:b0:bc:6b:c8:36:93:0d:9f:72:11:32:63:64:23:a9:64:80:
         27:5c:3a:0d:d4:9d:08:b8:23:31:e3:0c:b4:ac:ad:cc:e2:98:
         98:53:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:15 2026 by rpki-client