Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a581ecd-1731-3635-b238-85ec8eb9134c.roa
File:                     1a581ecd-1731-3635-b238-85ec8eb9134c.roa (raw, json)
Hash identifier:          HnBRwqMYFPCk2p9l5s86hllP76RBQmFcIlVaM5Bx+90=
Subject key identifier:   12:79:36:4E:F7:AE:28:7B:09:B2:68:A9:7B:1A:89:EB:B0:39:F7:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031859A7B3CA5ADF1F84D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a581ecd-1731-3635-b238-85ec8eb9134c.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        98.62.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:85:9a:7b:3c:a5:ad:f1:f8:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=90ebfce1-7725-4ca1-81c0-85c3b4770822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c3:96:b1:93:3e:65:2a:47:1d:8f:59:a8:c9:
                    77:61:df:65:83:28:55:83:a3:06:91:21:64:f4:cf:
                    45:e8:dc:e5:f6:67:bd:63:7a:84:d8:05:80:1e:aa:
                    e0:24:40:16:0e:8d:e4:0c:d5:44:ec:5d:be:16:c0:
                    c5:1b:14:74:3a:78:c6:fb:9d:a4:02:4e:f7:a7:96:
                    30:63:2c:8d:4b:72:08:17:6d:d5:81:61:97:5a:a9:
                    5d:f3:b1:98:ce:12:86:32:28:4c:90:b9:b8:2b:68:
                    4d:7f:6a:58:0d:b4:55:dd:c2:9b:b4:cc:35:3a:64:
                    5b:46:10:11:5d:e6:30:b5:1e:de:9d:b4:f1:6e:59:
                    15:1b:ce:c1:fb:b7:4f:49:00:18:44:82:a7:ee:9d:
                    87:0b:58:d0:80:88:dd:cd:fb:a3:47:c7:86:32:c6:
                    72:69:b2:93:72:31:98:18:22:76:a1:1b:9b:e4:ee:
                    6d:fc:f4:59:7c:74:fb:eb:a9:bc:2a:97:c9:c4:70:
                    e4:e0:ff:5b:d3:82:03:df:0b:ed:86:b0:a5:1c:c9:
                    50:cc:6c:a0:00:82:5e:fc:01:e3:6c:28:7e:0a:6a:
                    f4:2c:69:eb:1f:de:c8:75:c3:d3:d0:99:8d:e3:cc:
                    26:de:cc:11:15:0a:78:f3:5f:28:30:2f:d1:48:d7:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:79:36:4E:F7:AE:28:7B:09:B2:68:A9:7B:1A:89:EB:B0:39:F7:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a581ecd-1731-3635-b238-85ec8eb9134c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:54:bc:ba:f9:f9:fc:e6:d1:ed:31:78:bc:ec:5e:10:4e:dc:
         d6:68:36:a0:07:4a:11:ef:4d:a9:db:15:7b:9e:6a:0a:8f:21:
         bf:3d:20:eb:8a:47:c6:d7:ca:60:ca:a0:ae:ad:bf:cd:05:47:
         41:46:51:20:ff:c5:88:b6:e3:08:d8:85:98:eb:d9:a1:c6:34:
         50:88:7e:07:6d:1e:0c:7b:00:13:a6:a3:5a:ee:0a:b6:4d:30:
         eb:6c:40:a3:ee:90:83:f5:35:6b:36:ab:ee:18:66:0b:17:a9:
         cf:20:71:61:e3:47:d6:9a:64:ca:a9:5f:3f:ac:a0:cb:f4:70:
         76:98:53:1a:bc:6f:6b:e5:89:68:31:36:1f:a0:95:19:fa:34:
         2b:71:83:11:b9:16:b4:8a:0b:a5:4b:98:81:f2:1a:64:72:56:
         9f:b6:34:f9:85:4c:a5:59:25:72:12:b5:2d:a0:0b:93:39:a1:
         0a:8b:c9:cf:8f:94:8e:2d:7f:36:22:3c:cc:5d:9e:5d:4c:7f:
         ad:61:ba:7c:c1:33:b5:ba:29:82:24:26:d5:82:8d:6b:f5:ad:
         34:58:6b:e7:18:25:fe:d7:80:67:a4:89:81:9b:f6:6e:42:6a:
         db:c0:18:69:32:21:e9:41:0e:15:e6:92:e0:51:2e:f3:6d:50:
         66:87:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:59 2025 by rpki-client