Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6205dc65-6038-3a5f-b096-8f8fbde0b092.roa
File:                     6205dc65-6038-3a5f-b096-8f8fbde0b092.roa (raw, json)
Hash identifier:          z4BBMeNvsZ1L9V++DKQmSp+33fP1qyzjlOmG6lNHwn8=
Subject key identifier:   8A:6B:AD:69:D1:2F:B0:2D:2D:90:51:39:E4:CC:58:72:51:30:EC:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED332DA484422426F39980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6205dc65-6038-3a5f-b096-8f8fbde0b092.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.199.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:33:2d:a4:84:42:24:26:f3:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=3cef4fb5-ca13-4ad2-878e-185ee1e37dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:70:13:e1:0b:94:3c:ea:30:9e:e0:96:dd:
                    83:8b:ec:25:34:d7:6e:65:c8:23:92:42:04:ad:83:
                    ad:f0:5e:bf:52:d3:49:a8:28:3f:71:be:8a:53:85:
                    ee:f9:0b:33:5b:e9:4a:d1:4c:e8:21:38:b8:b3:1d:
                    5b:2e:93:e7:1a:da:bf:aa:c0:ff:15:13:8f:0b:43:
                    dc:0f:f7:8f:70:74:c0:97:aa:07:a1:c9:d5:bc:75:
                    72:3e:8a:df:ea:a0:81:b5:85:b0:bf:12:5b:dd:94:
                    6b:e4:08:21:57:27:a2:5c:88:a3:64:96:4f:61:82:
                    a1:3b:01:60:dc:c8:04:4f:e3:3c:c2:40:21:be:52:
                    a4:6e:48:3b:a3:e0:d4:3f:3b:46:34:3f:ba:03:3b:
                    79:8d:7a:76:86:9c:21:50:c1:8b:a7:69:30:33:34:
                    89:99:71:27:75:05:0a:07:9f:8b:05:5f:43:a6:33:
                    ad:8a:bd:63:8a:8e:96:95:c0:ef:06:a4:1d:b7:27:
                    3b:a7:15:7e:87:02:0f:fc:80:ba:aa:77:6f:1a:52:
                    9c:3c:6a:c6:9c:46:12:f1:99:15:b4:08:a0:b3:b2:
                    b5:c9:d4:d6:87:5a:f9:44:56:b6:27:bc:d4:ba:d8:
                    8d:2f:23:86:e1:4f:d8:36:f4:63:fd:42:2f:94:61:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:AD:69:D1:2F:B0:2D:2D:90:51:39:E4:CC:58:72:51:30:EC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6205dc65-6038-3a5f-b096-8f8fbde0b092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:7e:18:8a:39:46:35:46:3d:4f:aa:71:8f:6b:cc:31:e8:
         f9:78:99:65:b6:f3:fc:87:c1:9c:93:3b:8b:c9:a6:f0:df:ec:
         58:35:b3:c7:d2:6b:0b:4b:1f:53:b9:33:84:34:5e:f3:37:35:
         60:14:12:84:83:81:94:11:05:66:3a:31:10:cc:37:f3:31:2f:
         25:14:5d:c7:34:9e:9e:b9:6d:a2:35:e4:fb:b9:ad:86:64:21:
         ce:56:ca:24:97:00:8b:bb:b3:4c:be:09:82:63:c1:77:fc:d4:
         4f:60:93:0d:bf:30:45:87:e8:13:93:89:a6:e8:17:1e:23:95:
         37:78:83:da:6f:31:49:40:30:fc:55:9d:bb:24:82:73:03:c9:
         5f:ec:a1:1e:9d:09:ec:d3:3f:a2:b9:c0:f9:8d:51:68:16:c3:
         fa:74:ed:2b:70:f0:c0:cd:a6:40:a6:4b:4e:56:f2:5a:4d:4e:
         ad:b2:a8:49:c1:7f:fa:e2:7c:4c:e1:9d:21:c3:58:fe:81:0f:
         7a:39:f8:4c:94:14:2f:ed:96:d4:6e:96:62:75:24:b1:85:4e:
         60:81:ba:9b:82:a2:97:2b:23:c9:ef:d8:98:a6:dc:a2:91:41:
         3a:ab:82:59:88:54:1d:61:e7:90:2a:2b:cf:05:f9:83:76:37:
         fc:2c:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:23:13 2025 by rpki-client