Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/bf721460-a097-3a2a-8ae2-9676f2443383.roa
File:                     bf721460-a097-3a2a-8ae2-9676f2443383.roa (raw, json)
Hash identifier:          Unm7dIKqgao4GX1ouTGpnxN1kengrvP8jKcPkINIlb8=
Subject key identifier:   FB:1E:3D:4C:F0:3E:B0:4E:09:C6:84:5C:8E:09:04:42:78:C8:10:D4
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584BBFA5AA768F17FE748935FE80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/bf721460-a097-3a2a-8ae2-9676f2443383.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     212238
IP address blocks:        98.159.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:aa:76:8f:17:fe:74:89:35:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=9cd79f9e-1691-405a-89be-8de1473b947c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:c5:0b:25:50:ac:f3:64:69:0a:0c:48:9e:
                    1e:e6:62:80:0f:93:c8:62:ae:d8:eb:3e:f4:3f:5f:
                    af:a9:70:94:9a:ed:61:12:36:c7:42:51:db:68:49:
                    45:8f:4d:99:a2:eb:f8:c4:d9:12:11:8b:cf:74:f7:
                    d3:27:2a:6e:53:09:e5:38:6d:68:17:23:93:d3:ef:
                    16:e6:e7:61:a4:d4:e7:23:ea:f0:d1:e9:86:e6:93:
                    cd:24:90:81:5f:2e:f3:b6:58:cb:91:5d:46:13:a2:
                    60:fc:07:de:61:95:b4:b9:be:2f:03:d0:24:69:83:
                    54:88:74:86:c5:c9:2a:c7:33:d3:94:42:44:d0:1f:
                    08:a0:35:84:cd:80:ce:07:b6:d5:5d:35:e6:a9:3c:
                    32:39:d4:dc:d3:31:a7:4d:df:7a:df:9d:41:28:de:
                    9f:7b:60:0d:e7:64:77:d2:ad:40:7d:01:f7:9e:9d:
                    a5:ec:9d:fa:60:fb:55:28:11:83:29:1c:58:c1:cf:
                    af:70:05:a0:51:5e:50:4d:c9:b2:db:0e:37:70:b7:
                    e7:69:c8:b8:8d:c6:19:50:c8:ab:72:0a:d8:11:06:
                    f0:1c:5b:9a:2a:20:93:b9:aa:05:ea:28:20:30:bf:
                    83:a5:bc:b4:fc:89:84:bc:c0:0b:ca:4b:e8:18:7c:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1E:3D:4C:F0:3E:B0:4E:09:C6:84:5C:8E:09:04:42:78:C8:10:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/bf721460-a097-3a2a-8ae2-9676f2443383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:78:d2:27:79:ad:72:f8:83:cd:18:74:c9:fb:a6:7c:06:81:
         7e:66:0e:17:ba:9e:f2:e6:44:75:d4:c8:3a:6b:95:b3:8b:b7:
         5c:14:a8:db:39:72:26:be:d6:05:78:fc:59:a7:e4:56:fb:1a:
         3b:f2:16:1a:bd:b0:e1:9a:2c:60:90:7d:32:a4:7a:20:f9:a7:
         f8:e5:9f:e4:38:54:5b:6d:45:dd:9f:8b:9f:31:4d:8c:8d:35:
         c3:7a:7c:d9:46:ba:e0:07:47:dd:b0:fc:13:1e:2c:ba:4c:2c:
         19:aa:ee:2c:42:5b:27:71:17:8b:f5:61:2f:67:b3:00:50:1d:
         a2:2f:0c:4d:08:26:45:ec:7a:db:63:24:d3:5e:2c:72:7c:d8:
         68:bb:7a:62:28:23:68:f9:44:aa:a7:fc:db:9b:d6:7e:5e:68:
         5b:74:05:e5:cb:ae:d8:f8:03:90:2f:c8:e5:7f:c4:d9:4a:34:
         f9:a0:34:c8:2c:8d:3d:b5:86:12:a5:a5:6f:e2:31:6e:a8:38:
         41:c4:2f:98:a5:ae:ef:cc:41:8c:2e:f3:cd:c5:f3:5e:b3:5e:
         45:1b:5d:e6:00:d6:aa:b7:bd:df:97:53:40:f5:e0:7b:1c:fe:
         7e:08:47:9d:1e:66:cf:ad:9c:e7:74:cd:74:43:d0:5a:fd:c7:
         7f:da:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:59:44 2025 by rpki-client