Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e448d-4ea9-365f-ad39-3acdbf43dfd0.roa
File:                     4d6e448d-4ea9-365f-ad39-3acdbf43dfd0.roa (raw, json)
Hash identifier:          6YFQnet8rWlMhkVlItJzM9H2s6JEQjFLiUFUSRjZkdY=
Subject key identifier:   87:38:96:EC:E5:5A:66:C7:E4:2E:02:8C:AA:42:F0:D8:F7:1C:BA:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1F746ACE49C86E9C65960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e448d-4ea9-365f-ad39-3acdbf43dfd0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        76.98.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:f7:46:ac:e4:9c:86:e9:c6:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a5b726a4-16cb-405d-a41b-e299344a5e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:ac:eb:f7:42:bf:8b:91:25:7e:ce:dc:cf:
                    01:66:bb:3c:55:98:85:6a:f4:87:dd:d3:0d:c8:93:
                    34:b8:b5:39:c8:7c:6d:4c:50:e8:db:01:9e:99:a3:
                    5e:99:12:0b:69:05:4b:82:94:68:0f:28:87:a6:79:
                    7b:a9:65:66:fc:82:c5:1a:70:5b:d8:ea:81:79:f0:
                    ba:86:7e:2a:ea:26:c8:c7:c9:cf:21:0a:3d:23:7d:
                    dc:52:ce:e0:65:e0:66:61:58:de:ae:7c:f4:b8:38:
                    26:d2:3c:49:c0:15:5f:35:3d:91:3e:d0:d2:95:b9:
                    58:53:fd:bc:75:66:eb:c0:d5:c7:f2:80:73:00:a7:
                    1a:b3:d7:8b:b9:75:ea:dc:40:4c:93:c9:3c:7f:df:
                    73:98:9a:a3:37:ac:25:00:ed:50:08:49:24:43:36:
                    07:af:df:ba:ec:af:12:61:3a:98:0d:9e:90:b6:ff:
                    6f:60:93:79:7e:95:22:0b:0c:27:3f:89:05:74:e6:
                    8d:b6:a8:18:85:d4:47:35:38:ca:4d:1e:9d:f7:ca:
                    cd:fb:cc:46:1c:d8:30:cb:f5:aa:69:9c:78:28:91:
                    20:72:18:0b:a5:98:26:92:2d:df:49:93:dc:2f:b9:
                    b9:74:9a:cd:1f:85:84:6f:39:f0:7b:e3:8c:a0:af:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:96:EC:E5:5A:66:C7:E4:2E:02:8C:AA:42:F0:D8:F7:1C:BA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e448d-4ea9-365f-ad39-3acdbf43dfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.98.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:de:78:76:90:f6:67:47:ad:b4:33:0f:91:7a:5e:2b:f9:4c:
         c7:c9:fb:b1:8a:4e:78:ba:d0:60:0f:11:6a:6c:e6:d4:f7:c4:
         e8:5d:d0:a0:61:11:5d:07:02:2b:0b:71:63:9b:da:3c:20:3e:
         68:4c:09:ad:10:5c:6f:b0:ad:97:3d:8f:9e:74:ef:4a:62:e6:
         69:8c:ac:7c:82:b3:77:54:dd:61:a9:a6:23:38:f2:e2:93:09:
         dc:7f:94:3c:ca:ae:1a:e3:96:b6:ac:8d:27:9b:74:be:0e:da:
         32:28:b0:2c:47:bb:d1:c3:fa:a6:89:71:57:2b:ac:f5:03:52:
         90:01:59:9f:6c:b7:9d:7d:b8:64:9a:5d:63:fa:64:15:b6:59:
         fd:73:48:27:6b:eb:27:3c:7f:6d:90:a3:e7:f6:10:f3:b0:96:
         c8:16:a0:cc:11:7c:be:8c:3c:cf:1d:43:83:5d:88:65:6f:cb:
         f7:1a:59:3f:7e:50:50:f0:ac:88:db:9d:9c:a8:de:a3:ad:a8:
         e3:7e:cd:33:1a:c4:c8:e0:1d:20:2b:49:bb:1f:e2:d9:4e:ad:
         06:a1:40:12:37:18:fb:06:71:2c:81:66:41:22:ce:2c:c5:e8:
         ca:01:10:87:55:b3:5c:77:10:db:ec:3e:81:e9:f4:ef:4f:f4:
         c0:11:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:53:07 2025 by rpki-client