Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d587cfab-85f6-3b49-ab86-f6a131b97b91.roa
File:                     d587cfab-85f6-3b49-ab86-f6a131b97b91.roa (raw, json)
Hash identifier:          WeH+iy4MHYY8hefeU2Bn5bcqmWW5HqiBQvsv2JILbys=
Subject key identifier:   CD:82:BD:72:3A:E0:52:0B:0F:7B:24:E7:73:11:02:54:E0:AE:E4:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE1C3142492250871F7A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d587cfab-85f6-3b49-ab86-f6a131b97b91.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        98.113.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e1:c3:14:24:92:25:08:71:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=420b9dd7-1728-4ffc-8f35-6f36df6ac45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:55:5d:47:8d:ec:41:c6:81:65:9d:d2:b1:
                    db:db:7d:96:24:f8:b5:26:f0:b0:13:1c:89:12:64:
                    85:5a:55:bd:b6:c0:ba:48:0d:55:26:90:01:74:f7:
                    3c:db:34:fc:8d:2e:23:60:ab:05:47:5d:3f:80:60:
                    f1:9c:57:9b:9f:a1:61:91:4b:9d:97:b7:cf:fd:63:
                    c0:ec:fd:af:1b:88:4a:af:a2:11:3d:b8:f6:e4:cd:
                    bb:99:9f:f1:94:ac:dd:e5:bf:eb:91:db:83:81:5f:
                    e4:e6:db:92:14:55:07:31:f3:16:4b:1c:95:7d:27:
                    09:b6:b9:89:a5:8a:72:99:28:b3:b5:e8:e8:c7:b6:
                    30:50:8d:bf:d7:6b:d3:2b:e5:83:59:9d:a2:7c:60:
                    6e:38:9b:fa:21:5d:8a:7c:44:af:81:62:f6:df:22:
                    0f:ef:91:2f:66:21:00:7a:6a:6f:4a:7f:6f:8d:aa:
                    0e:39:a9:83:a6:1a:e6:8a:1f:09:6c:96:4b:42:ca:
                    b1:c6:15:d8:ff:77:74:44:53:63:34:73:f8:f1:37:
                    27:49:bd:1b:ad:da:61:8c:f0:4a:71:88:3e:20:29:
                    75:46:da:fb:b5:40:a1:e2:f5:b4:87:65:5f:eb:2f:
                    79:70:c4:d9:f0:64:94:48:b5:e2:7e:84:a9:36:2e:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:BD:72:3A:E0:52:0B:0F:7B:24:E7:73:11:02:54:E0:AE:E4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d587cfab-85f6-3b49-ab86-f6a131b97b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e3:13:29:e6:ff:ee:e2:c3:07:94:07:ba:af:e8:ed:1f:b9:
         f6:9b:4b:c9:98:08:b4:26:c4:20:4c:c2:49:00:fd:a3:7c:ab:
         28:24:63:57:c6:49:53:a8:bb:ea:8f:01:47:32:73:b8:b2:38:
         c4:b3:a0:c2:16:29:20:b8:88:d3:f7:00:65:99:7e:f8:96:81:
         89:5e:aa:e4:25:e7:5c:db:f9:ad:28:12:a7:5c:f8:99:5e:8c:
         b5:19:0e:cd:cb:25:84:7f:ab:dd:9a:ee:d6:3f:4b:c8:b0:b8:
         07:98:4d:87:ee:43:ce:00:db:be:1e:06:8f:72:d6:6e:0b:3c:
         21:cd:9f:c8:86:50:b2:5d:65:c6:fc:ca:65:d8:4e:96:d1:f3:
         f0:f3:7a:81:94:72:19:b8:91:8f:74:79:80:f9:83:c7:b9:aa:
         00:a5:92:9b:7c:e5:a0:66:5d:4f:69:d6:27:b8:31:31:4b:e8:
         ac:a6:e1:e5:dd:6c:37:4a:2b:5e:62:01:7c:d6:d0:da:26:73:
         ff:5f:ad:12:bb:e4:3a:92:6a:f5:1d:86:c4:c5:6e:e0:3b:a9:
         c5:00:0a:2f:cf:df:31:a3:c6:22:4f:9f:a1:36:c5:aa:95:27:
         25:6e:98:9e:42:b1:3e:30:c6:9a:82:2c:ef:75:45:2a:95:f2:
         11:1c:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:27 2026 by rpki-client