Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
File:                     cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa (raw, json)
Hash identifier:          oCQzYb+yfWQ1fCbKn4nBy56oYZQOm7HyGJU1uxxLnS0=
Subject key identifier:   1B:D6:51:34:82:5E:BD:D3:9F:CA:71:9A:6A:33:44:AF:12:C8:C6:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A15643E5834ADB9F2600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        98.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a1:56:43:e5:83:4a:db:9f:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=94407ecb-2dae-4312-9a87-4ae065666ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:69:7d:56:96:54:be:b2:aa:49:7c:a7:2f:
                    c8:8f:be:70:ed:e5:41:e7:67:5b:64:c4:ba:7f:58:
                    ea:20:b7:a3:47:56:a1:32:6b:90:d2:ba:24:1a:46:
                    0d:37:ff:04:21:fc:e6:cf:15:94:4e:b0:37:3f:43:
                    c6:0f:16:e8:6e:9e:44:78:4c:9a:1c:55:96:85:e2:
                    d5:09:6e:c8:ff:ef:5e:a6:f8:6b:09:f3:9f:04:8c:
                    b8:bf:9e:a7:9c:72:8a:9c:a5:66:f7:3c:8a:10:62:
                    2d:73:94:39:87:e1:f4:6f:c5:45:86:96:4c:0a:bb:
                    0b:3a:5f:68:5c:7c:1f:36:00:75:cd:64:f9:37:5d:
                    ed:ee:aa:78:18:c3:b0:ef:1e:bc:57:4e:38:22:2f:
                    60:87:f3:0a:de:f7:9c:b1:4f:4d:d9:35:48:19:f3:
                    7f:5e:86:4d:b1:32:78:17:e0:87:c3:7b:57:b9:5d:
                    c0:a6:27:ee:33:e2:bb:2b:7a:dd:a4:18:8f:b1:38:
                    af:d8:18:18:7e:65:1c:de:61:d0:18:b5:ab:4c:e5:
                    17:a4:e9:ca:cd:38:31:00:0d:6a:e2:a5:f8:89:ad:
                    b0:8a:b7:a4:be:5d:92:85:de:b4:46:b5:45:d9:ec:
                    af:2c:39:9f:ae:76:fa:68:29:b2:45:2f:d9:9d:63:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D6:51:34:82:5E:BD:D3:9F:CA:71:9A:6A:33:44:AF:12:C8:C6:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f1:dc:f3:7d:70:54:7e:7a:75:5a:b9:21:98:c0:72:27:85:
         a8:93:3d:87:98:54:ee:61:3f:52:73:a5:c2:db:9d:4f:53:0a:
         37:d0:3d:5c:b3:47:aa:0a:f2:4d:18:fd:6c:82:0c:80:f4:66:
         1f:f8:ea:e9:26:fe:8e:2a:03:f9:44:18:5c:4b:a0:f2:06:27:
         e9:15:87:65:80:79:67:99:0d:5e:ee:47:aa:79:f5:ab:4d:3e:
         9e:bf:0d:54:9f:59:a9:66:db:5a:71:ee:dc:3f:37:f3:9b:21:
         8c:26:d1:60:77:36:a5:3a:16:9f:c8:68:17:d0:db:57:0f:7e:
         e6:30:f3:2c:51:22:fd:01:66:ab:3f:60:87:e8:33:e5:d7:b4:
         4d:88:78:3c:18:52:ab:ef:73:d1:ed:ec:a2:4a:42:5e:0a:bc:
         40:ba:8c:a0:54:15:3c:1b:49:0e:30:3d:b1:d1:35:d9:67:d0:
         01:53:19:94:75:a9:00:2d:5b:3d:4f:e0:18:d5:af:ed:bf:14:
         8c:30:72:1f:d9:b0:6d:1c:43:61:9c:18:67:da:dd:aa:55:8b:
         62:d3:8b:23:5e:c0:be:e5:cd:51:d2:6e:bc:4f:01:e1:39:61:
         74:e0:2a:cf:ab:18:7a:90:45:ef:9a:f7:ee:35:19:b9:7b:6a:
         54:fe:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:51:44 2026 by rpki-client