Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
File:                     3708b2e2-b1f4-3516-a6cc-623967a05732.roa (raw, json)
Hash identifier:          Y6l20lW0+SKJV1CMewJBkTATCUbjOmojVBh0LfCYnMg=
Subject key identifier:   C5:FB:AE:BC:33:72:C7:91:1B:28:A6:52:00:72:56:12:66:EA:F7:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FFECE8EEC59EC31907A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        98.117.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:fe:ce:8e:ec:59:ec:31:90:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=f53dd1cc-aa53-45e4-83c2-f2005a2a72b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:73:ad:30:8d:5a:41:21:1d:d5:fb:31:08:
                    0f:75:90:12:50:c3:0e:98:3d:48:50:56:7b:04:7c:
                    a2:3c:5d:ef:26:7c:c4:21:82:6d:37:4b:fe:37:5b:
                    b9:6c:49:2d:be:8e:0a:dd:27:1b:8f:8c:f9:90:59:
                    68:ee:ec:3d:f2:78:a8:00:d0:7b:f8:b0:ad:5e:63:
                    b0:34:50:f5:df:dd:06:58:22:73:ca:25:68:98:1c:
                    41:09:22:74:0b:80:94:6a:29:f0:05:76:7b:67:ea:
                    be:8f:2b:9a:a5:04:c8:c1:f6:51:c3:51:7f:67:08:
                    fa:37:0d:dc:41:1c:53:c4:07:6a:54:5b:30:c5:a0:
                    81:1a:9b:dc:3d:f0:7d:3d:4e:eb:b2:78:2a:cf:9e:
                    1c:a2:be:26:72:32:f0:5f:30:e4:b5:60:86:8c:51:
                    a7:ac:7b:5a:da:e4:82:ed:d9:09:6b:ae:b9:5f:92:
                    0d:59:55:0d:36:93:bb:0b:6c:55:9a:5d:31:d0:82:
                    76:4d:3b:f1:2e:09:30:ff:cb:9d:f5:fa:6e:51:62:
                    62:3f:b3:99:d1:f8:1a:ee:a7:c6:a6:7e:4e:77:91:
                    1a:00:6c:ed:37:0b:93:f1:be:33:76:c2:58:ee:81:
                    fe:9f:70:47:71:3b:40:63:79:b9:9e:c9:95:ef:97:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FB:AE:BC:33:72:C7:91:1B:28:A6:52:00:72:56:12:66:EA:F7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.117.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:57:15:ab:30:f5:c6:46:b7:a0:68:6b:79:63:19:22:5b:
         1a:19:c2:0d:b4:30:d5:29:bd:91:8b:1a:71:b9:6d:33:57:1b:
         36:d8:36:60:f9:bf:b0:d1:ee:40:6b:d2:fd:e1:7c:96:14:10:
         9f:61:95:d1:43:5f:ad:55:6d:fe:88:70:40:d0:3e:33:62:c0:
         84:dd:f8:b0:6a:77:f8:56:09:f3:a9:67:69:a1:2c:13:c6:54:
         d4:b0:fe:84:87:12:b9:dd:ed:6e:7c:97:9f:52:ee:ce:3d:48:
         f1:7f:00:0c:52:43:ab:7c:e1:73:8f:a3:ef:02:68:12:68:a1:
         57:7d:0b:7d:4c:0d:a4:15:0d:bc:d3:a8:58:b7:4a:91:f8:b5:
         ae:ab:70:93:6b:e2:da:e0:12:01:16:fb:c5:d6:98:ce:bf:65:
         93:90:bd:4f:b7:8e:57:be:e2:1b:da:a0:31:b1:0e:02:a1:ae:
         8b:b3:8c:fe:6c:1d:69:53:6a:4d:7d:a4:18:43:90:b2:24:eb:
         12:4e:5c:d7:3a:42:7b:31:b7:87:75:f3:c6:71:e9:27:c6:e2:
         12:00:5e:68:e4:3e:aa:62:df:55:d1:b4:ed:b6:50:15:04:0c:
         56:61:b3:34:45:59:24:e8:e0:df:91:f1:8c:57:ce:55:da:ce:
         da:04:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:01 2026 by rpki-client