Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa
File:                     ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa (raw, json)
Hash identifier:          LbCQy7Dho3jK6O48RW0DaySu9KdkHJaIKO0pfK9V4sY=
Subject key identifier:   FF:D9:84:1F:28:14:CC:44:8C:E7:78:E3:40:B2:72:92:16:B0:98:A5
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F4328584EAE8198284FFB5855A2F63600
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        98.142.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:98:28:4f:fb:58:55:a2:f6:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=9e1f8020-78fb-4dd5-889a-4c662143b585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:7a:60:d0:d4:00:d0:e7:c7:82:22:05:f2:
                    c9:d2:62:f7:04:58:a6:80:cb:02:81:0b:bf:da:0b:
                    00:21:ed:7e:29:95:28:3b:14:df:2e:68:41:2e:09:
                    91:44:61:05:13:6f:34:d2:29:03:b9:5a:7a:e9:bb:
                    e2:c6:d8:46:d5:50:08:85:0d:8b:17:c9:40:9c:e4:
                    66:c7:ec:6b:a9:0e:9e:3a:0e:10:b2:2a:99:28:17:
                    75:4b:2e:cc:b6:f9:ee:06:42:58:75:d3:3c:e4:87:
                    39:7c:9f:8f:35:48:13:7c:91:da:8b:66:42:d7:0d:
                    41:61:8d:37:87:c5:6d:e2:de:7e:5c:a6:de:ee:76:
                    e1:a5:d7:02:17:94:9c:c2:e9:6c:fb:20:a2:80:a4:
                    3e:e5:d9:9e:7f:03:c0:6f:d3:c8:d0:20:08:0d:6f:
                    94:cd:b6:71:82:01:02:3c:2b:b6:73:6f:9e:f7:63:
                    52:37:04:13:a0:3b:57:a6:ff:c1:20:9c:c5:7a:3d:
                    ba:b3:4d:8e:f0:cf:aa:40:a7:ff:85:83:c8:2f:f1:
                    28:f1:8c:13:08:e8:97:ba:38:65:c7:15:e5:a2:3e:
                    53:a3:5c:e4:86:ef:24:44:3a:7e:97:7e:de:25:6d:
                    59:9e:f8:3d:bf:ca:5e:56:37:03:a3:f1:2c:3e:ce:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:84:1F:28:14:CC:44:8C:E7:78:E3:40:B2:72:92:16:B0:98:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:1c:5f:59:e0:01:62:da:da:5a:99:b6:91:56:e7:c9:2d:
         2a:17:47:ef:52:d8:55:a6:80:23:a4:70:fe:f2:eb:fa:d2:28:
         a6:eb:6b:6f:cb:f3:be:90:7f:e0:88:6c:e6:4f:a2:6c:2d:5e:
         14:d1:aa:eb:fa:00:a6:0f:e8:cb:6b:a9:9d:f5:c7:dd:ef:9c:
         82:f9:0e:be:95:0f:1d:63:a5:7c:01:e7:9f:e7:31:d3:a3:5f:
         19:11:1c:43:69:6d:4a:45:de:9b:fa:af:24:50:72:1c:5b:6a:
         2f:67:be:74:20:26:d0:dc:80:a4:e1:be:9d:4a:eb:79:e5:71:
         17:5c:19:52:ad:28:09:60:b9:63:c2:72:af:53:d0:88:2c:e6:
         e0:d1:e9:83:4f:79:8e:74:d3:08:07:79:dd:64:ea:c3:11:20:
         ef:b1:a8:89:64:51:f2:4c:c1:30:8f:10:fb:0e:d4:d9:27:09:
         33:0b:91:5f:b7:97:7a:2e:20:26:61:e7:db:9c:cb:e7:1b:37:
         09:e2:58:fd:46:dd:14:d5:2e:f2:e7:dc:7b:c4:e5:bf:82:35:
         d3:42:53:28:a6:29:11:d2:42:94:fd:75:ee:ea:7d:d9:c0:2f:
         7c:82:cf:48:52:a0:b8:9f:9c:4f:6a:c4:0c:95:2a:21:cc:b8:
         c0:ab:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:25 2026 by rpki-client