Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d579dfab-5689-3883-a4d7-934306ef40a7.roa
File:                     d579dfab-5689-3883-a4d7-934306ef40a7.roa (raw, json)
Hash identifier:          jrcelrJCIqx6piQBy4dgoQGwrgjLSR723GesJyok2EA=
Subject key identifier:   F1:04:62:59:80:C6:99:CA:1D:B9:2F:04:DF:9D:75:52:2A:59:85:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEE28576E485D63B402F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d579dfab-5689-3883-a4d7-934306ef40a7.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.197.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:e2:85:76:e4:85:d6:3b:40:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=937c9700-e644-4091-9d58-56119ed7d24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:21:42:39:63:34:34:9e:17:bc:de:13:17:ec:
                    0f:28:f3:76:75:69:59:43:4e:36:7b:95:b7:33:5b:
                    14:39:6a:9d:b5:eb:08:07:6a:65:8b:b9:7f:63:4d:
                    df:8a:2e:e4:71:fe:ea:4e:ec:07:29:76:32:06:18:
                    82:35:a6:a3:75:5b:a0:13:ca:ae:8a:ed:30:08:80:
                    93:17:72:7b:fb:95:d5:76:8b:2a:07:3a:9d:c6:87:
                    87:bb:0e:1c:8b:f0:da:0f:c6:72:34:aa:db:13:0a:
                    05:d3:d3:4a:a9:6b:48:fc:a8:a2:51:ff:5d:46:79:
                    e4:c0:4d:cd:81:b2:f9:d4:4d:d1:2b:a8:a3:3d:d4:
                    84:81:6d:54:ac:44:17:15:f6:fb:f2:b6:f2:5d:21:
                    da:1d:e9:6e:f8:28:6e:06:ee:0e:b2:ea:b7:fe:64:
                    84:81:df:b3:7e:3f:7c:a6:5c:c7:0c:6b:b8:61:b7:
                    a4:22:b1:74:2b:f8:b7:25:34:e9:21:b1:94:f5:80:
                    86:22:92:17:a8:d5:ab:0e:4d:a6:e1:ae:ee:9e:f9:
                    05:3b:db:66:1b:90:9c:42:e5:ca:ae:29:cf:ad:53:
                    4e:33:1d:62:40:09:18:08:4f:66:b8:a0:18:2c:86:
                    7f:a1:09:61:01:15:d6:f7:a5:6c:fb:9e:4e:b5:61:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:62:59:80:C6:99:CA:1D:B9:2F:04:DF:9D:75:52:2A:59:85:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d579dfab-5689-3883-a4d7-934306ef40a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:6c:29:a9:bb:a3:9e:63:6b:f9:38:33:11:2f:43:01:2d:90:
         70:a0:67:51:91:17:e3:d8:0a:2a:0a:76:41:b4:c5:80:66:18:
         44:3f:e9:68:81:79:a3:4c:0c:9d:eb:b3:3c:07:90:2d:d5:09:
         e4:45:be:66:39:e3:a1:0c:d4:99:61:54:34:f0:3e:19:10:15:
         d2:9a:8f:80:2d:4b:8d:8f:29:26:4f:09:02:60:ca:98:5a:39:
         cc:6c:82:f3:c8:59:d2:70:dc:63:e3:a1:94:69:a8:9b:ed:cf:
         88:e1:4a:f5:e2:96:7e:a2:93:5a:0f:32:08:06:82:d9:88:bf:
         27:b5:ff:76:78:76:51:44:64:5d:3f:72:36:a0:2b:70:97:7d:
         3a:25:f1:2d:75:2e:4f:45:d2:20:bc:77:52:8d:c4:47:9c:0b:
         74:d5:5f:30:55:6d:5e:b3:dd:25:ce:d2:49:20:77:78:bf:2a:
         89:ea:e0:0f:33:ff:a4:a4:92:77:da:2b:eb:b0:61:c7:e2:8d:
         7a:89:38:a5:43:20:69:73:6f:db:b5:f3:70:c4:b5:e7:0e:ca:
         39:a3:2d:aa:96:f8:1f:1f:29:79:98:6d:20:30:83:e4:37:0b:
         e6:ea:df:ac:21:60:6b:d6:a8:9b:dc:0d:40:4d:8f:bb:19:2a:
         16:4c:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:39 2025 by rpki-client