Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa
File:                     bf629dc2-f852-3d47-a607-0e222991c7a9.roa (raw, json)
Hash identifier:          jvcJk+MxXAUAT3lyBziWuHzTQJSFI4cdLE+p7CBXKOM=
Subject key identifier:   A3:46:8B:2A:5A:8F:47:0A:3D:AF:39:36:46:D8:59:AA:8B:7D:6A:A9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AB22172796A1A714B94CFA800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7029
IP address blocks:        98.17.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:72:79:6a:1a:71:4b:94:cf:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=b246dda9-2b2d-465c-abd3-72a14b2c9114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:d0:aa:79:74:24:fe:8a:f6:bb:7f:c2:a5:
                    4e:7c:8f:d8:6a:c4:59:32:c7:ef:22:d6:f7:13:02:
                    c2:bc:18:ca:10:42:82:ad:18:59:ca:26:56:aa:9d:
                    dd:cc:27:e3:fb:24:33:87:9e:61:fb:3a:1a:c6:27:
                    78:09:c7:c2:e9:b8:ce:a7:63:6d:bf:ea:fc:d3:26:
                    89:61:34:6c:80:2b:fa:76:93:b0:06:72:55:03:bb:
                    53:c1:c3:71:38:03:63:43:a4:8f:8e:a6:76:ab:6a:
                    16:07:f2:64:2d:bc:7e:31:e9:93:39:ac:e2:d8:fb:
                    8e:5b:b8:c4:bf:3a:96:9c:58:e6:9c:ae:bc:1a:cc:
                    5e:e2:0f:7a:d7:3b:df:7c:91:c2:75:ab:e1:47:d2:
                    f6:d3:af:e6:ac:4c:77:c6:d2:c2:12:55:9f:7f:eb:
                    34:ea:27:1a:ca:54:ec:b8:d7:c7:4c:bd:82:a3:f3:
                    0b:74:5f:e6:6e:73:ec:87:2d:cf:aa:89:e2:2d:28:
                    79:a5:6c:ac:d2:f0:cc:2f:d8:2d:8c:53:9d:57:63:
                    15:3c:4f:93:59:8e:39:d3:88:f7:a0:58:0e:3e:99:
                    94:66:52:ed:18:19:25:0c:93:b3:b9:92:b7:9b:4f:
                    15:9e:4c:b2:ed:08:74:db:82:8d:f5:ec:c2:55:65:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:8B:2A:5A:8F:47:0A:3D:AF:39:36:46:D8:59:AA:8B:7D:6A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ae:f2:50:a9:02:85:9f:87:46:ae:b0:37:c9:08:5b:b1:6d:
         83:34:40:9d:c8:bc:cd:e4:05:e2:51:f2:ac:cb:ec:1b:0d:a9:
         b0:99:24:ba:58:0d:4d:be:69:3c:8f:26:cb:54:4d:bc:4f:8b:
         93:ed:ee:82:c7:fe:18:2d:02:df:11:a3:5c:f3:ec:aa:99:60:
         0e:b7:f7:b3:a8:42:42:75:5b:0c:3d:08:4f:3d:37:d3:85:09:
         01:bf:10:fb:37:f8:a9:90:43:42:fd:d2:b7:f5:ac:2a:73:73:
         cf:c9:52:bf:e0:cd:78:62:78:1c:21:3c:93:3e:67:bd:54:30:
         f1:92:74:23:7a:ae:7d:68:20:71:a4:a7:d7:7a:82:cc:35:70:
         61:40:ee:03:7d:a9:b3:2b:4f:fc:92:2c:ac:64:70:fc:ad:70:
         f3:a7:d3:c8:0c:09:93:f2:c9:35:eb:2b:0a:f1:34:9a:4c:8b:
         cc:7b:0c:f9:de:b2:51:e3:3d:1b:56:a8:ff:2f:ec:eb:7d:29:
         5a:cd:61:41:21:c3:f3:28:95:58:3b:46:33:47:94:95:31:2f:
         54:1f:01:65:9d:6f:8e:cd:67:67:cb:03:8a:a7:cd:f6:79:75:
         0a:26:24:a7:44:79:b6:5e:3e:a7:b7:55:d9:a7:d8:55:63:14:
         ec:1c:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:55 2025 by rpki-client