Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/3b80a96f-c58a-391f-8648-bc380720fa7f.roa
File:                     3b80a96f-c58a-391f-8648-bc380720fa7f.roa (raw, json)
Hash identifier:          qmBUBiPupVPTJHlSGAAMk6uVLVV8liiuqsGexpz926Q=
Subject key identifier:   77:19:D3:1D:8A:75:59:96:F2:EA:87:12:20:0A:F1:81:C1:58:B8:ED
Certificate issuer:       /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
Certificate serial:       010D0C9F4328584CA8C1965659301BFA29657840
Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/3b80a96f-c58a-391f-8648-bc380720fa7f.roa
Signing time:             Tue 27 Jan 2026 02:00:29 +0000
ROA not before:           Tue 27 Jan 2026 02:00:29 +0000
ROA not after:            Mon 27 Apr 2026 01:00:29 +0000
asID:                     25816
IP address blocks:        98.142.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a8:c1:96:56:59:30:1b:fa:29:65:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
        Validity
            Not Before: Jan 27 02:00:29 2026 GMT
            Not After : Apr 27 01:00:29 2026 GMT
        Subject: CN=c92fe516-b8ac-4650-8871-9de16521c10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:1a:6a:08:54:92:83:2e:87:97:32:87:6a:
                    2d:5b:82:7d:0b:22:61:48:8e:6d:9e:a0:d4:76:ae:
                    d7:1e:bc:31:a5:af:8d:ab:33:81:cc:7f:e9:ab:2b:
                    8d:d4:14:d5:e2:48:aa:36:7d:78:1c:44:be:f9:dd:
                    7e:ab:05:74:5d:e5:ff:ea:c2:5d:46:fa:9f:90:8c:
                    ed:bb:85:89:ae:10:2a:fe:7b:55:02:3c:b4:53:b2:
                    4e:63:95:09:80:fd:1c:a5:ef:55:21:04:1e:45:fe:
                    70:e1:42:ea:92:09:1a:31:ea:7b:c0:68:12:4c:10:
                    ab:58:8e:9f:7a:d7:ac:db:a5:13:2c:08:b0:dc:dc:
                    8c:a4:17:86:76:61:a5:53:5e:fd:1e:19:f3:78:35:
                    5f:a0:84:b4:5a:9d:12:51:fd:46:39:e7:0b:bd:d2:
                    6d:f6:2d:13:37:ad:87:43:db:db:70:8b:67:1c:eb:
                    5b:52:fa:89:8b:5c:35:fc:29:ca:f1:0a:0f:49:06:
                    94:51:8a:a4:45:c9:eb:f3:48:03:a8:f4:66:5c:61:
                    b3:cc:97:35:7b:6d:6e:93:78:81:52:85:64:ee:75:
                    d2:c5:e3:1a:fd:0c:df:bf:52:7c:c1:74:4f:a4:45:
                    dd:05:be:6f:ef:8d:3d:7b:a9:22:41:8f:bf:f8:83:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:19:D3:1D:8A:75:59:96:F2:EA:87:12:20:0A:F1:81:C1:58:B8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/3b80a96f-c58a-391f-8648-bc380720fa7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl

            X509v3 Authority Key Identifier:
                keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:64:c5:46:db:80:19:e4:84:e2:06:87:e4:6a:45:a1:9f:d8:
         63:55:c3:27:cb:8b:01:8e:8c:bf:5a:f3:41:02:e8:d6:68:7e:
         31:b8:71:62:b7:53:1c:74:aa:86:f8:93:30:b1:89:bf:f2:a5:
         d3:02:29:b7:02:28:ed:18:a1:2c:ac:16:0b:2a:fb:82:64:91:
         af:00:d2:f5:71:ab:fc:59:94:13:03:d7:26:b6:2f:75:7c:db:
         50:3a:6d:ef:f7:90:9e:5a:19:eb:e2:ae:94:1e:07:f5:7b:59:
         3b:9b:61:20:50:38:bd:4e:71:e1:db:90:25:a6:da:2f:ba:11:
         07:6f:88:65:d7:df:4d:90:c6:74:37:0a:20:85:5c:dc:75:10:
         a0:58:5a:7d:eb:cb:03:48:3d:cc:c0:91:ec:10:0c:0d:be:85:
         75:22:42:1e:26:8f:24:13:d0:84:8f:cb:98:b9:ec:cc:b1:a9:
         cd:fe:89:4f:96:3c:78:80:92:94:a9:32:a6:e3:6d:2b:24:76:
         da:81:f1:c4:8a:bf:fc:22:75:30:6d:4f:da:db:da:b7:5f:20:
         1c:97:d2:b0:5e:02:f9:78:b4:54:eb:4a:f2:ee:b8:7d:53:72:
         56:1c:49:55:bd:7d:95:94:61:e1:a0:a6:f8:59:3d:9f:33:37:
         de:51:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:28 2026 by rpki-client