Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa
File:                     3c598d36-d861-301d-8cfb-9a87e005e102.roa (raw, json)
Hash identifier:          M0hz2OMmbSpKz+Rt9jp/Kpe9G7zC4mMRkAGxiSZMIr4=
Subject key identifier:   C4:09:49:A2:79:ED:A0:50:97:32:D8:F5:C9:35:F8:6E:85:00:28:FF
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F4328584BAD62520585EB5AA9087952C0
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     13462
IP address blocks:        140.98.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:52:05:85:eb:5a:a9:08:79:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=7b440003-aac1-4581-90c4-db2b498dd08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:50:d0:0f:f9:b1:97:c7:ce:e3:7b:f8:b7:
                    6d:90:9a:95:85:2d:3e:0d:cc:3a:54:ba:ee:e1:0c:
                    67:41:84:00:83:04:cb:ea:d1:29:9f:dd:fe:bf:76:
                    16:bc:d5:b0:33:03:62:38:77:98:bc:b7:ce:68:5e:
                    85:cf:19:fd:6d:0a:f2:fb:9a:28:5c:1e:84:c8:34:
                    c7:b1:a8:db:d0:c9:b0:ef:0d:87:61:6b:b5:41:7d:
                    c9:33:91:dd:14:4d:8c:5c:0f:68:83:48:b8:95:f3:
                    db:80:03:3e:76:3b:9b:85:12:dd:bc:40:50:ac:29:
                    38:f1:c2:1b:05:72:2e:1e:05:76:e6:d9:dd:f4:3c:
                    68:2b:e0:88:fb:db:f8:da:f3:60:3e:dd:2b:44:1b:
                    9a:c3:d4:28:0d:de:2b:c2:67:8d:98:08:1d:ff:78:
                    76:bf:ec:a0:1a:41:ee:90:a9:8e:7a:d2:e3:87:af:
                    1a:f8:53:d3:f5:d2:c7:86:52:46:69:b9:8f:40:cf:
                    4d:55:46:1c:34:2a:6a:eb:9f:16:f3:20:d6:49:6d:
                    b6:9f:69:a7:ed:0e:56:7e:f2:37:e3:b8:46:5f:a5:
                    fc:8c:25:0b:62:62:7c:66:a4:d0:34:25:3d:b8:a9:
                    ed:07:e0:3f:0b:4a:36:20:a5:79:1c:a8:93:e5:f4:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:49:A2:79:ED:A0:50:97:32:D8:F5:C9:35:F8:6E:85:00:28:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:eb:05:c3:19:bc:66:ad:1f:6e:71:95:5b:4b:99:69:b3:1d:
         a4:44:c5:1a:8e:cf:6f:28:17:e8:57:8a:5b:f8:1d:81:6c:55:
         13:7d:fd:14:e9:f6:f8:85:02:da:d5:60:12:62:66:cb:53:2d:
         c6:c2:8b:d7:24:09:15:98:13:9e:75:c2:ed:3b:db:87:d4:46:
         ec:ce:f3:20:1d:44:83:5b:0c:29:3d:57:54:f2:a4:c5:e4:28:
         5f:47:f9:ed:47:47:cb:b1:c2:a4:0e:4d:22:e1:d1:39:b3:51:
         06:33:b6:2a:a0:52:bd:3a:22:6c:c0:f8:d2:42:9d:3a:b2:8e:
         eb:49:53:ee:a6:8a:b3:75:42:2e:a3:66:97:07:2c:6e:d8:64:
         e4:ce:cc:2e:ce:90:26:07:27:6c:37:6d:7d:8a:21:eb:03:40:
         dc:ec:46:4a:0a:d9:89:9f:50:a3:36:27:51:6a:d5:60:6d:95:
         6c:f9:f8:ae:46:f2:fe:54:4f:bd:23:bd:0f:6a:e6:c3:e7:97:
         54:8a:b3:10:7b:1e:7e:34:80:c9:fd:7d:44:3c:c8:2c:f1:89:
         61:2c:01:42:ce:39:7b:77:ee:17:9c:5f:be:53:12:ce:f6:41:
         19:e9:f2:3c:68:de:13:1b:63:64:e5:27:d8:68:3e:e2:33:7e:
         6e:14:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:20 2025 by rpki-client