Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa
File:                     c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa (raw, json)
Hash identifier:          bU7Ejd3x/RjjKN3UXulR2z9nejsPTUdHTM6Yhvcji94=
Subject key identifier:   5B:34:46:F0:2B:AF:DE:D1:89:42:96:0A:D9:BD:53:D4:84:5B:47:54
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849EBEA5026B775A2BB08469F5C
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     62610
IP address blocks:        98.98.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:50:26:b7:75:a2:bb:08:46:9f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=eb37ad15-dbfd-42ca-b2b7-83eb1961f700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:d6:c5:5b:20:13:54:f9:ed:39:f5:0d:70:
                    a3:12:7a:b7:62:51:57:f4:dd:a9:e9:0f:23:a5:1c:
                    0e:9d:eb:50:89:6c:d0:4f:0c:ca:c1:62:64:1d:6b:
                    8f:ad:5a:2a:5f:96:f3:6f:a8:d3:06:91:ef:88:ce:
                    79:91:73:12:46:e2:ea:ed:c3:4a:05:d6:c2:d6:6f:
                    fb:18:6a:2d:7c:51:9a:e9:16:48:9e:3f:f8:87:cf:
                    e1:90:c9:5c:cd:a8:9a:2c:01:c5:57:27:39:99:03:
                    7b:5e:de:c2:64:c6:36:7c:36:26:d1:fd:12:52:80:
                    c6:d1:5e:0f:99:4a:a3:83:f2:f1:26:fd:ea:f4:ea:
                    e7:1e:22:c6:ec:73:be:b0:5c:6e:97:60:bc:7a:76:
                    4d:2d:2e:26:f6:19:06:95:9b:c1:f7:2a:7b:90:f7:
                    54:97:1e:db:73:01:3f:e6:85:7d:26:a9:ab:3c:b6:
                    f8:f2:b7:71:67:84:87:11:1b:8a:4b:a3:3a:3b:45:
                    9f:e1:7a:68:38:ba:7f:51:da:1b:da:13:1c:06:31:
                    71:dc:39:02:fb:8f:c0:8c:49:d7:37:18:bc:18:e4:
                    d4:a7:4f:23:05:d2:2e:2a:25:f0:6c:02:50:a4:9f:
                    f4:51:e0:fb:1f:fe:13:99:c6:52:0b:6f:df:b4:b1:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:34:46:F0:2B:AF:DE:D1:89:42:96:0A:D9:BD:53:D4:84:5B:47:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c57b5c6b-7258-3b01-a7ac-56bbb2b4ac01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:a1:44:f2:ec:9c:37:3c:f8:44:9a:36:78:bd:92:0f:85:
         e6:5d:11:7f:39:0f:f2:50:b4:3a:fe:85:8e:6f:b8:d4:2c:bf:
         53:09:99:32:34:cf:16:a4:e5:51:a5:e8:77:eb:bb:3e:50:a5:
         91:41:32:99:cb:b2:70:cf:b9:80:eb:05:6c:18:ba:ea:ec:50:
         7b:78:d7:8e:63:60:09:88:f1:83:ba:a9:b0:92:df:02:ab:94:
         de:3e:4e:3e:c7:b4:68:df:c5:03:d9:a0:f2:05:b2:16:39:0c:
         1c:1f:18:10:61:93:ce:63:6b:16:c5:31:b0:38:9b:9e:fe:5b:
         d3:f2:e8:d2:a2:2d:e8:a2:06:b7:9f:c6:e7:c3:ca:39:5a:20:
         80:52:81:ec:bd:0e:4f:28:d0:28:ba:b1:cc:26:0d:0a:b1:10:
         a1:b2:a2:3a:89:b4:ff:c8:8a:43:3c:71:f4:f8:a7:0b:4c:5d:
         d3:f8:fe:f1:b6:fd:d3:95:e5:83:b9:a8:63:3b:9d:7e:d2:07:
         2b:9f:07:ee:5d:7a:9f:27:f0:07:e6:9a:85:99:b4:47:16:f8:
         ae:40:1f:59:a7:93:5a:6d:46:48:8f:f0:56:4e:5a:3b:7a:30:
         90:91:1c:a8:3d:2b:97:58:8d:8d:06:dc:f2:18:a2:b8:33:9e:
         83:fb:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:22:46 2025 by rpki-client