Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f88d4e34-5e04-3d30-b78e-585d3bbd1e5c.roa
File:                     f88d4e34-5e04-3d30-b78e-585d3bbd1e5c.roa (raw, json)
Hash identifier:          ayOpDhIxmSi3F/n32Z/WkwggnooxBioe2AWw8uyvcYU=
Subject key identifier:   6D:05:3F:B4:1E:93:A1:B9:32:2E:03:4F:68:19:40:CC:50:A1:0E:EB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF12C850A50DFC1BC99BE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f88d4e34-5e04-3d30-b78e-585d3bbd1e5c.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36183
IP address blocks:        172.226.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:2c:85:0a:50:df:c1:bc:99:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=f6a2d686-89e9-44e6-b5ad-63339e834126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:ac:ea:a0:50:3f:a0:14:1d:ab:aa:51:fe:
                    f4:61:ca:ea:c0:67:31:bd:15:41:85:1d:2b:a9:99:
                    1f:2b:50:b8:4e:e0:3c:fe:af:80:af:e2:72:a1:26:
                    f0:0f:33:d5:42:e7:d8:0c:38:51:ff:fc:d5:8a:8f:
                    53:c0:8b:0c:04:63:87:4b:d4:6d:fb:5a:64:ac:73:
                    a0:66:5b:23:8f:6f:1b:2a:7b:d9:1a:b2:96:2a:f7:
                    dc:27:97:9c:56:74:ab:53:15:7c:58:54:02:f2:89:
                    46:4a:f5:d3:08:85:be:49:a0:b0:71:f9:cf:72:43:
                    b0:8b:fc:ad:c5:1a:3e:e0:c5:92:fc:9c:ef:e0:1d:
                    ad:f0:8c:b0:12:a2:0d:a8:bd:ee:07:ad:56:60:ea:
                    0f:8c:ad:9b:91:83:0b:d3:93:5d:8f:11:e9:d9:17:
                    f5:84:76:1f:f9:6f:48:f5:e2:df:0a:f4:61:af:7b:
                    24:5d:ee:bb:f1:15:1d:ad:c2:ed:14:41:fd:cd:40:
                    b1:2c:7d:b1:cf:c6:25:01:59:ab:fc:ca:9b:b7:7b:
                    a4:a8:ae:fb:05:97:91:f8:9a:13:e2:5e:96:c8:71:
                    4f:1f:e0:5b:d4:ca:e5:d5:8f:c0:02:7f:f4:84:90:
                    8e:20:2e:ab:6f:89:84:34:6a:bd:13:4b:e5:cb:37:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:3F:B4:1E:93:A1:B9:32:2E:03:4F:68:19:40:CC:50:A1:0E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f88d4e34-5e04-3d30-b78e-585d3bbd1e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:61:3e:de:b6:e7:3c:6b:17:9a:68:6c:ea:02:72:dd:db:a8:
         5f:21:2f:69:89:f1:45:30:a4:22:f5:ff:93:f9:df:39:60:eb:
         dd:04:56:f2:18:68:73:0e:06:47:ef:b6:26:70:a5:6f:3a:ea:
         d9:83:66:ff:f6:a9:59:24:03:8a:f8:ba:83:90:86:b4:de:33:
         13:40:51:51:e8:5d:97:07:5b:82:34:3f:56:51:52:f2:db:c1:
         3f:d6:86:94:6f:11:67:f2:1e:b2:49:b7:17:e0:43:fb:0f:22:
         75:f3:3b:22:56:4d:f6:dd:5e:cb:e3:2e:96:a3:b8:0f:00:95:
         4a:21:a9:b7:46:eb:84:d5:06:51:47:78:5f:00:2b:ad:3a:0f:
         1d:ab:a8:78:ec:d9:1b:61:9b:d1:40:66:da:ab:36:4a:f4:5a:
         b2:22:ee:da:01:32:7e:aa:6a:67:54:79:51:54:83:57:6f:1f:
         de:bf:c9:d0:9f:b8:8a:bf:ca:e3:0a:d7:7a:a5:e7:19:62:9d:
         20:77:18:db:62:15:25:4b:43:c3:ee:52:4b:eb:02:a1:25:ed:
         7c:91:87:ff:0d:18:07:57:3b:91:31:58:69:ac:6c:0c:24:94:
         13:e9:67:59:70:34:55:3b:09:b0:29:02:e8:f8:86:2f:06:5a:
         a5:8d:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:34 2025 by rpki-client