Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/97c3feef-d62c-391d-847e-2ed5d9853c98.roa
File:                     97c3feef-d62c-391d-847e-2ed5d9853c98.roa (raw, json)
Hash identifier:          qjAG3qwHOtYKni18+bEAgZyI8CNzANx+mydBf4W1cVE=
Subject key identifier:   06:CA:D0:29:7C:DB:B9:83:F5:C1:73:29:C7:60:22:79:85:B5:E8:DB
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F4328584A9D30E3C7938A3A7678E9E600
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/97c3feef-d62c-391d-847e-2ed5d9853c98.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     46441
IP address blocks:        198.217.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e3:c7:93:8a:3a:76:78:e9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=76f8c039-ce22-4056-bc09-3fd3957cda49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fc:4f:23:5b:8d:0e:f9:65:68:c7:67:72:5b:
                    29:a9:1c:ba:36:65:f0:a2:76:df:d0:78:4a:7a:56:
                    83:da:5c:b4:20:87:3b:86:42:45:98:91:ec:54:a3:
                    36:67:6e:c6:97:61:2b:66:a7:5a:ff:a6:c0:9b:48:
                    25:b0:dd:4d:c8:4b:1a:4c:7a:32:12:04:9d:89:47:
                    f5:13:80:25:6f:82:ae:ee:01:6d:0c:76:55:04:89:
                    ae:12:a3:fb:7e:db:ab:8c:99:34:00:5a:02:c7:c3:
                    1d:9f:a9:51:c0:7e:59:7c:2b:1a:49:5e:71:e1:43:
                    ab:e8:79:87:b1:96:5c:9d:29:a9:a6:77:d2:50:a0:
                    55:13:af:96:b5:c8:10:e7:f5:2f:08:14:ff:59:01:
                    26:a4:46:3f:0d:64:7c:81:6c:71:72:51:e7:44:03:
                    1b:7b:4a:97:cd:41:84:44:3c:2c:67:3e:ba:69:92:
                    9d:08:d1:af:b0:84:63:29:16:fa:8b:30:e6:4e:86:
                    c6:89:1a:31:48:09:e6:ac:c3:cf:3b:08:f3:05:54:
                    f7:42:3a:9a:77:23:41:7e:82:47:b4:1b:9b:a6:eb:
                    89:d7:de:96:d3:76:c7:fe:a1:99:d4:f1:50:ad:15:
                    12:bc:4b:4f:0c:5e:45:cd:e8:af:ca:3c:a4:86:1f:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:D0:29:7C:DB:B9:83:F5:C1:73:29:C7:60:22:79:85:B5:E8:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/97c3feef-d62c-391d-847e-2ed5d9853c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:70:0a:43:cf:18:9f:f2:d5:49:c3:c9:57:cf:e6:40:26:
         52:6e:09:bc:d2:a1:9e:2d:e4:61:ac:8b:28:37:c9:93:7c:41:
         a8:81:7b:f2:31:2d:13:af:94:26:29:02:8a:9e:8a:b4:a5:be:
         16:af:5e:d8:d5:db:5d:75:1d:0a:7c:6c:a8:2f:42:a7:d1:11:
         b2:0b:14:f3:ad:89:53:2e:a7:a6:f8:f9:2d:09:e3:52:1c:d7:
         81:42:9a:ae:2f:62:cd:f2:b0:d3:4c:e6:42:19:bb:f9:9c:d6:
         8c:22:33:48:fb:c1:b4:53:8e:96:c2:45:28:78:94:a2:53:ce:
         d2:f0:a3:95:1f:c2:12:66:11:e3:ed:eb:fd:4d:fc:b7:d1:74:
         23:0f:92:7e:8e:e2:19:4c:ae:a0:46:a1:29:56:4d:70:45:00:
         82:50:28:b3:08:b2:38:51:c8:70:a3:59:54:43:68:2d:60:1d:
         ff:35:6f:eb:ea:e7:60:99:cb:d7:a6:41:47:6c:3c:94:e9:9f:
         7a:70:91:38:99:52:ff:43:48:47:5c:31:2c:29:c8:9e:e4:08:
         57:63:9f:ff:78:53:6a:d1:58:e6:d8:f6:21:25:30:5f:5d:46:
         3b:09:1b:4e:94:88:5a:1a:3f:79:45:40:26:16:8f:49:b3:d7:
         74:63:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:56 2025 by rpki-client