Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa
File:                     6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa (raw, json)
Hash identifier:          XszYcq/GkcuLQeInEUIleq/McIfapHgSouW3K0EEO9o=
Subject key identifier:   9D:FF:EB:2F:4E:80:4B:59:32:54:7C:8F:94:39:03:69:7A:C8:D7:C1
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584BB2F7A55FE202AFADF5A32690
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     399629
IP address blocks:        45.61.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a5:5f:e2:02:af:ad:f5:a3:26:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=24269844-ce77-457e-8e2b-cf6fbead9297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:8e:41:b8:be:57:92:fd:04:c1:81:96:14:
                    59:9b:43:57:80:7f:c3:bb:96:97:db:23:42:7e:1f:
                    46:94:44:16:84:48:3b:87:be:b8:c6:2f:1a:cb:0d:
                    ce:a9:fc:0f:ad:30:4b:0e:57:00:bb:e9:3f:22:2f:
                    89:ce:55:6e:73:e3:7c:c4:2c:09:24:3e:94:65:87:
                    0c:31:82:70:75:8a:5b:c3:09:fb:58:26:e2:2e:25:
                    d8:86:b2:69:e3:75:f9:4c:8d:ff:af:44:77:b8:eb:
                    6d:7a:2e:ba:e6:c9:bb:d1:1a:e2:88:48:3e:b3:be:
                    27:48:c3:2c:08:d3:75:3d:4d:a3:fa:30:59:87:03:
                    7e:c8:cc:0e:63:d6:50:7b:75:49:d9:8d:84:dd:64:
                    68:ac:fe:98:a9:32:5d:88:c0:51:fc:7a:f3:d8:ce:
                    1b:9c:dc:be:9a:b6:80:8d:70:6a:4b:e7:cb:e1:24:
                    1c:c2:ec:a0:fc:10:c0:0b:b2:3e:e2:69:ba:fb:b8:
                    0e:be:a1:ad:c2:3b:13:86:9c:32:2e:c1:b6:bd:5a:
                    68:39:60:ba:24:d1:62:71:ef:18:8f:7e:0d:d4:ac:
                    cb:73:2e:78:a1:c6:44:8a:54:0b:e8:04:02:90:1c:
                    c2:68:7a:7d:4b:81:c4:7a:16:45:14:f1:bb:e5:46:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FF:EB:2F:4E:80:4B:59:32:54:7C:8F:94:39:03:69:7A:C8:D7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:29:8c:ba:39:36:81:b3:fe:09:ae:5d:85:08:a5:9c:5e:
         4a:c6:af:a4:0e:a9:70:f7:8c:c3:47:27:e2:24:bb:81:ce:a9:
         b0:08:23:cf:e1:98:f7:c7:c1:70:4a:1a:d3:43:23:99:03:c0:
         ad:87:dc:37:14:4b:96:9d:fc:83:8b:25:b1:c8:75:b6:45:bd:
         7a:1b:fe:5b:5b:22:90:ec:41:f3:e8:6a:8c:29:83:09:3d:f9:
         9c:de:4c:4d:68:71:17:9c:26:65:20:be:3e:e6:83:db:b5:16:
         36:4e:da:70:97:bf:1d:f1:f4:ba:1d:d4:55:f3:95:a5:11:c8:
         05:74:8f:4d:ea:bc:6f:db:24:df:d2:24:59:08:9a:ff:09:cb:
         a7:89:93:49:77:6e:c1:0a:c0:d0:0a:05:4e:b6:42:ba:78:1a:
         94:06:df:54:3a:de:f3:c7:c6:21:99:5e:be:3d:ea:c1:33:6d:
         ae:5c:0c:ac:4d:b8:9b:60:2e:cd:80:96:34:fa:8d:f0:d7:71:
         59:f5:00:4e:8f:7c:c7:c2:b6:0e:82:ed:a9:d2:d4:84:f7:64:
         33:02:8d:a2:f6:08:4c:1b:0f:43:b0:3a:19:80:f1:e8:26:dc:
         05:91:9e:ea:a7:51:59:de:0e:35:6c:70:c5:14:d9:b7:48:1d:
         81:bc:fe:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96Vf4gKvrfWjJpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MjQyNjk4NDQtY2U3Ny00NTdlLThlMmItY2Y2ZmJlYWQ5Mjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZGOQbi+V5L9BMGBlhRZm0NXgH/Du5aX2yNC
fh9GlEQWhEg7h764xi8ayw3OqfwPrTBLDlcAu+k/Ii+JzlVuc+N8xCwJJD6UZYcM
MYJwdYpbwwn7WCbiLiXYhrJp43X5TI3/r0R3uOttei665sm70RriiEg+s74nSMMs
CNN1PU2j+jBZhwN+yMwOY9ZQe3VJ2Y2E3WRorP6YqTJdiMBR/Hrz2M4bnNy+mraA
jXBqS+fL4SQcwuyg/BDAC7I+4mm6+7gOvqGtwjsThpwyLsG2vVpoOWC6JNFice8Y
j34N1KzLcy54ocZEilQL6AQCkBzCaHp9S4HEehZFFPG75UZJgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3/6y9OgEtZMlR8j5Q5A2l6yNfBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvNmJiMTU0MjItMWU5Ny0z
MmQ5LWE3NGItYWMyNTA5YzJiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLT2IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADe5KYy6OTaBs/4Jrl2FCKWcXkrGr6QOqXD3jMNHJ+Iku4HOqbAII8/h
mPfHwXBKGtNDI5kDwK2H3DcUS5ad/IOLJbHIdbZFvXob/ltbIpDsQfPoaowpgwk9
+ZzeTE1ocRecJmUgvj7mg9u1FjZO2nCXvx3x9Lod1FXzlaURyAV0j03qvG/bJN/S
JFkImv8Jy6eJk0l3bsEKwNAKBU62Qrp4GpQG31Q63vPHxiGZXr496sEzba5cDKxN
uJtgLs2AljT6jfDXcVn1AE6PfMfCtg6C7anS1IT3ZDMCjaL2CEwbD0OwOhmA8egm
3AWRnuqnUVneDjVscMUU2bdIHYG8/h8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:54:41 2025 by rpki-client