Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa
File:                     45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa (raw, json)
Hash identifier:          uS7r/G64x/0pPCtfG9t/2/MWXzoQIzQag6oIrGDwdfs=
Subject key identifier:   2D:5B:F8:E8:E9:76:67:22:E9:36:81:63:97:BF:E9:B4:06:54:F4:6B
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584BB2F7AB0A8B4D06110F90B3B0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     399629
IP address blocks:        172.86.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ab:0a:8b:4d:06:11:0f:90:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=4103c656-3e62-4025-8aec-f1a0b4684bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:a3:a0:c8:ac:f1:00:65:2d:76:74:f4:47:
                    bf:c5:78:cc:1b:e8:c9:cd:d4:62:5d:f0:69:4f:2b:
                    a7:96:f4:c3:b8:1a:25:76:1f:e9:fd:21:66:ff:5e:
                    1f:c5:34:04:14:07:5b:9a:72:f6:6b:63:84:f2:88:
                    11:9b:1f:ef:4f:70:7b:bb:33:97:fc:3c:6d:ba:cb:
                    66:0e:1d:6c:a4:d2:8d:49:c6:a0:f1:62:b1:16:d1:
                    95:06:c0:f3:fb:12:30:8d:8a:20:3a:56:78:a6:8a:
                    c6:54:9e:0e:ca:ee:94:6a:93:05:1d:26:70:09:cf:
                    20:9e:fc:a9:63:56:0f:36:be:cc:2a:df:a1:12:21:
                    39:0d:c6:91:54:1d:da:d9:56:a7:6c:55:ea:64:ed:
                    38:4e:db:7f:e7:8b:33:eb:34:2b:5e:cf:c6:ee:d4:
                    04:6f:23:af:06:c1:e9:21:00:c6:b6:ce:81:f0:cd:
                    cc:f2:78:22:fc:9e:29:f1:ac:f5:99:40:23:b9:ba:
                    30:43:de:28:ef:ad:d9:df:67:a2:f7:93:7b:79:ac:
                    33:9b:27:08:e8:85:a1:3b:5a:c0:d0:fd:ff:41:b6:
                    3b:8b:a7:ea:2f:43:e2:53:50:0c:72:b4:fd:5d:3b:
                    3c:ef:7d:3c:63:49:3f:49:23:7f:b7:05:42:ad:32:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5B:F8:E8:E9:76:67:22:E9:36:81:63:97:BF:E9:B4:06:54:F4:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:92:5a:86:f5:07:eb:ba:27:48:6d:73:61:f7:40:f6:1d:
         d0:50:b1:a5:f8:8b:16:8d:b9:53:b2:79:c1:99:03:ba:17:1b:
         b6:d5:54:be:9c:20:1c:5b:5f:8c:19:5b:56:a3:7c:76:f3:3a:
         67:e8:6c:52:b7:75:77:23:34:5b:b0:08:d3:ac:e6:0c:ff:f5:
         a4:c7:bb:15:7c:a3:2e:bf:59:87:1d:42:eb:53:3d:09:83:eb:
         bd:55:1e:cd:c1:91:c9:56:40:fd:8c:20:a9:cb:06:e7:8d:ef:
         dc:f9:04:e5:bd:22:38:d7:29:28:86:f9:ef:f2:69:66:06:c2:
         bc:2d:23:18:6e:aa:bb:43:e0:0e:aa:af:68:3b:1f:db:17:a3:
         fc:e3:e3:f4:a5:12:23:6d:5f:84:01:3c:9c:08:e6:9d:bc:82:
         ef:30:ad:29:dd:a8:fd:d3:e7:fb:0c:74:6b:62:e6:f2:84:a0:
         77:cf:87:6c:20:62:7b:dd:00:ca:33:05:ff:ce:ab:f9:74:29:
         85:09:b7:bd:ed:96:df:cc:76:d8:e1:f4:19:52:6c:4f:74:12:
         89:d3:cf:41:75:3e:8e:93:d1:20:0e:4b:da:b1:61:85:00:90:
         ce:2a:f8:53:62:6b:35:e4:75:b3:4a:12:5c:4d:13:1d:37:b6:
         0d:14:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:12 2025 by rpki-client