Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa
File:                     da636073-8693-3554-9dac-9a99a0593989.roa (raw, json)
Hash identifier:          4TN8FkyAK8HxM4haDK6iEUkv8Q0iL4HU+rUNCpniT5c=
Subject key identifier:   77:1C:C2:D9:55:38:40:E7:B4:1B:2C:60:8B:B6:0D:26:53:E8:42:6F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A857600E2F525A1301A424280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     25961
IP address blocks:        98.142.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:00:e2:f5:25:a1:30:1a:42:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=f7721d2d-24cd-4ef1-9f98-354561c35871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:6b:90:ee:00:a9:33:ec:b9:a1:4f:57:e8:
                    46:2c:09:6f:e8:52:ee:1b:e9:d5:d5:e3:c4:44:ba:
                    35:9b:b0:79:4f:95:e7:36:01:b2:77:12:0d:02:dd:
                    23:d6:12:8a:6e:69:63:02:ca:7c:12:37:0c:a3:c4:
                    4f:90:2a:71:a9:69:93:51:cc:c0:f2:6c:82:bf:93:
                    a9:ec:ce:88:ef:35:7f:c9:a5:50:16:fd:b8:d6:f7:
                    4e:45:a2:60:30:68:6e:de:55:47:32:59:b4:06:f9:
                    2a:1f:50:56:7a:24:bf:96:5c:f3:2a:c7:70:7b:2c:
                    10:37:39:13:73:bd:b0:7c:c5:61:7e:05:fb:76:27:
                    89:fa:1e:51:e2:c0:0b:fa:55:88:50:e4:c7:89:30:
                    31:b5:d2:df:a2:73:96:78:cd:d3:d0:97:e2:2b:5c:
                    66:56:60:e8:84:30:9c:e1:1f:96:d2:85:c7:9d:28:
                    b4:46:a0:c8:f8:fc:83:9a:a0:df:76:e4:c5:01:62:
                    f6:6e:cb:ae:a0:d9:80:c0:98:47:d0:25:40:f3:2b:
                    69:18:98:f7:64:51:a8:28:e8:1e:94:ee:56:27:d0:
                    5d:86:f3:dc:ad:18:ff:35:95:f8:d0:91:9f:fa:33:
                    5a:ea:0d:ee:a7:60:03:2a:2a:91:1d:12:c7:a9:7e:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1C:C2:D9:55:38:40:E7:B4:1B:2C:60:8B:B6:0D:26:53:E8:42:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:95:d1:6a:46:a9:1e:f3:0d:d0:8c:82:77:68:53:02:b3:
         24:72:64:c4:31:68:55:d3:32:b2:d5:f8:7a:be:8e:67:6b:4d:
         d4:cc:bf:c0:7a:7e:b1:25:96:d8:9b:2a:f7:0c:fc:79:d9:d8:
         72:f2:28:a9:ab:3e:dd:16:c0:bb:9b:0d:d3:e5:53:60:ed:8c:
         2a:d2:92:ba:ea:bf:55:09:51:f8:b4:53:06:c7:a4:6e:52:10:
         9a:07:a6:89:91:dd:d1:c1:db:05:e0:bc:8f:9a:fa:95:ce:30:
         e3:56:df:75:b2:7a:04:ec:fc:22:b4:5b:42:50:00:ed:d0:82:
         5d:ca:c2:f2:88:8c:cb:20:05:a2:49:66:1b:32:ae:12:63:e5:
         21:80:35:d3:4e:d6:10:93:c5:fb:c0:28:8f:5c:b2:f6:cf:bb:
         3d:36:03:74:5a:f7:40:56:bc:fc:79:79:67:d0:d4:36:b5:35:
         51:1b:24:e4:b0:08:4c:f9:d2:2f:ea:c4:2a:1d:21:57:57:e9:
         5b:e1:90:93:70:7e:74:f0:82:03:97:b4:fa:fe:84:d0:bc:12:
         32:e5:ae:83:6d:c5:8f:68:13:44:06:ac:38:7a:55:2c:9b:75:
         c0:88:13:dc:c2:8f:3f:38:5f:40:da:90:87:dd:5b:80:1d:6d:
         4f:ea:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:42 2025 by rpki-client