Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa
File:                     c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa (raw, json)
Hash identifier:          NC7BOiKSvJxtSNBNf+5vN3aWdOB35mayjfyTGnGZ9H4=
Subject key identifier:   82:16:7E:0C:36:04:2B:29:50:2B:19:A6:E1:B8:23:8E:F6:0A:FE:D6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A9FFBBA498CFE0E4002563B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     7029
IP address blocks:        98.23.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ba:49:8c:fe:0e:40:02:56:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=c1710687-35ce-445d-a5c7-f1419fb6e4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:f9:fb:4d:0b:4d:58:67:f7:54:1a:0c:d9:
                    c3:43:c8:77:f7:bf:2a:96:4f:c9:bd:a4:24:40:f0:
                    b8:89:44:b0:a8:4d:7a:0e:c7:82:bb:41:2c:25:a8:
                    83:ea:7a:df:7b:b3:5f:29:da:25:62:57:3f:9c:b1:
                    a6:93:4a:0c:9b:8b:87:d1:05:ec:31:f7:1d:b5:a5:
                    7c:ba:4b:c4:07:1c:37:7c:fb:b5:8f:f4:f2:d5:65:
                    2e:34:8b:9a:8a:2e:7e:b2:33:75:7c:c2:62:f0:5d:
                    d9:b6:d8:f0:9a:bc:35:56:b3:df:0c:9a:26:d9:93:
                    77:cb:97:67:1e:9b:4d:0e:ec:c5:2f:6c:40:a3:93:
                    b2:4b:f2:b2:ad:20:d9:13:f3:b7:40:e0:75:b4:d6:
                    c1:80:3e:af:75:90:a0:1e:c6:04:2d:8d:4a:99:52:
                    0d:f4:18:e3:ce:e0:90:12:0e:33:10:ad:6a:78:cf:
                    c8:9e:80:db:78:50:a2:1b:f1:48:59:81:b7:ec:97:
                    dd:6e:fb:ce:2c:be:26:7b:16:2e:6c:9d:da:ac:7f:
                    7b:5e:89:7f:92:9b:3a:6d:dc:f1:e7:7b:68:de:7a:
                    59:f9:54:f4:33:3c:b2:27:38:a3:08:61:4d:a2:a2:
                    c2:84:87:95:0e:11:e5:c2:db:17:94:7f:b6:c1:28:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:7E:0C:36:04:2B:29:50:2B:19:A6:E1:B8:23:8E:F6:0A:FE:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.23.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:18:85:46:8f:79:52:7d:e8:1f:19:5d:8e:7d:6a:8f:ac:f0:
         70:32:08:59:b7:cf:a2:81:68:94:65:a2:59:11:eb:b3:cd:0a:
         b7:27:21:a3:c6:40:42:fa:cd:ec:fe:24:5a:92:56:92:43:4c:
         3a:85:e4:e3:08:b8:94:67:02:13:0b:e0:2d:df:f4:f4:7d:1f:
         bf:30:7a:e5:9a:c5:96:f7:29:95:7b:af:4c:b4:87:9d:62:8e:
         f6:b3:d6:07:70:79:c9:1f:0b:19:9a:21:24:0e:d6:20:b1:8a:
         0d:62:38:4f:36:53:a6:40:1a:d0:5a:e9:e3:e8:36:4f:d9:ad:
         0b:13:58:07:30:29:92:50:ed:86:ec:f7:c9:71:59:85:c9:2e:
         84:25:85:7d:9e:b1:39:bc:14:0b:94:f0:1c:92:08:f2:c1:d8:
         8b:33:af:de:bd:fb:68:42:43:82:63:c0:67:c1:4b:1e:a6:15:
         fd:74:1b:29:7a:c8:7c:86:63:f0:00:5a:77:31:f5:64:bf:1e:
         75:68:5d:00:63:54:fb:5c:c5:89:e7:6b:af:f5:2b:dd:1a:86:
         43:6f:0e:4e:88:ea:83:f1:e2:31:5e:7d:54:c9:f1:cc:d9:6b:
         7a:b9:73:99:9c:4b:c4:83:da:2f:15:ba:0e:82:c7:4c:47:93:
         ee:ba:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:40 2025 by rpki-client