Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb3d31f0-cdaf-35a2-aeab-7eb5abba04e1.roa
File:                     cb3d31f0-cdaf-35a2-aeab-7eb5abba04e1.roa (raw, json)
Hash identifier:          ZPkp0ru/U34GNdIWae651U7B4bP+GzeW5OygDoXX6to=
Subject key identifier:   8B:03:FC:65:05:98:9C:73:45:F5:02:73:56:99:9E:A5:72:6F:5A:D5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16176381067F772CB929410
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb3d31f0-cdaf-35a2-aeab-7eb5abba04e1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        16.98.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:76:38:10:67:f7:72:cb:92:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=b83ec94d-be83-4319-a7f5-32c1fe5c400a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:56:28:fb:81:ad:a9:36:0d:37:a7:7d:98:
                    c0:29:b9:69:73:bb:27:98:77:95:d3:c0:66:32:55:
                    60:dc:41:00:3e:f7:03:32:9e:66:55:17:f3:d9:f7:
                    59:46:08:4f:7a:63:e7:f8:14:20:53:e3:c1:1c:04:
                    26:2b:90:19:2c:7d:c0:51:16:46:8d:94:74:c2:4d:
                    c2:d9:d2:b1:d9:ab:5d:f5:40:d6:f4:c4:fc:7a:44:
                    8b:f3:7b:9a:69:4c:4d:b2:ec:b4:2f:e7:50:8f:e5:
                    3c:2d:e6:04:35:01:8f:e1:36:c9:45:32:1f:1e:aa:
                    27:48:a3:d2:5d:cb:33:15:04:8c:b2:4f:72:03:31:
                    bd:9d:8c:f6:8f:37:d9:3d:d9:48:52:0e:bd:2c:a9:
                    5a:f7:f2:54:0e:55:2d:af:56:8b:81:a5:eb:e0:54:
                    82:f7:20:b1:6d:cf:14:f7:7c:45:c1:12:98:23:71:
                    22:bd:d4:74:4e:b9:1b:aa:9b:fb:9a:75:44:e8:5a:
                    8c:c0:97:57:ec:99:f4:bb:16:b7:ae:3a:bb:33:35:
                    20:10:82:38:75:e4:35:e7:9f:99:b8:a4:fd:0f:d4:
                    92:eb:67:e5:e7:4b:7d:13:3f:34:ac:92:ba:43:4b:
                    35:c8:7b:56:23:1a:c4:b4:12:5f:cf:59:57:cc:58:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:03:FC:65:05:98:9C:73:45:F5:02:73:56:99:9E:A5:72:6F:5A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb3d31f0-cdaf-35a2-aeab-7eb5abba04e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.98.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:0d:2a:55:6b:76:3a:5c:b2:fc:22:f2:4a:5d:b9:c6:2f:f9:
         31:f4:9b:2a:d9:93:78:ff:fb:f6:c0:3d:8e:fd:54:2a:77:c2:
         a4:b5:c3:db:ba:58:e6:ec:eb:ec:2c:2d:06:a5:61:e5:0f:0f:
         a3:d7:3e:f8:4e:cd:65:6e:6f:50:a7:49:60:d7:2b:3e:e1:c0:
         29:87:70:6d:db:64:a7:d3:53:36:40:49:06:08:f1:6a:6c:a8:
         72:d5:3f:cc:e7:21:b1:1d:e4:b9:9c:43:99:31:0c:06:bb:ee:
         54:ef:00:d0:3c:c5:d1:ab:9f:b1:6e:93:32:6e:1b:ee:62:28:
         e6:8d:fd:fe:6d:e6:e7:5e:ac:83:f1:9a:54:b2:50:79:f7:e5:
         02:9d:75:59:40:33:7f:2a:69:b6:59:6f:bf:d1:0b:32:5f:f5:
         bf:5e:a2:db:42:de:17:ff:fb:e3:9f:f1:3a:23:78:e0:6b:05:
         8c:dd:25:ad:77:54:5f:31:3b:b1:a7:c6:79:c9:34:1e:da:ab:
         b0:fa:e1:46:6c:24:2c:27:c1:17:34:d6:d9:17:36:65:88:3e:
         29:6c:fe:c7:f4:1f:e1:ce:18:78:03:3e:de:62:96:0b:02:9e:
         8f:68:f3:01:a3:0e:ba:e3:e7:71:67:61:6f:01:95:62:07:54:
         1c:a3:c1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:15 2025 by rpki-client