Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73f8ef89-6b9e-3091-9764-bd45fd019120.roa
File:                     73f8ef89-6b9e-3091-9764-bd45fd019120.roa (raw, json)
Hash identifier:          GV80cT5uUB9zZx4KKElblHnZyeM+A71Wm0gmUt9XlPI=
Subject key identifier:   82:16:38:B8:31:B9:EA:29:81:3B:86:0B:28:37:CE:4F:E0:B6:25:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC37462CD15D12C32787D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73f8ef89-6b9e-3091-9764-bd45fd019120.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        98.202.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:74:62:cd:15:d1:2c:32:78:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=287bc300-e9e2-4702-9c4d-329020ec0604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:29:9e:99:63:c1:61:67:77:de:93:c4:5c:cd:
                    83:c6:d7:8d:92:54:79:2a:38:fb:86:af:47:c5:d0:
                    3a:14:4a:d2:38:44:6c:5b:ab:f9:9c:80:95:22:ce:
                    40:77:1c:98:e9:da:60:43:ae:82:fb:89:b5:0e:42:
                    c6:97:7f:93:6d:3f:85:b6:13:60:ac:e6:4c:dc:a1:
                    e7:37:e0:61:3a:bb:e6:74:07:e6:51:90:fe:25:7d:
                    54:94:2b:d0:52:2e:55:6c:65:11:41:4e:f1:c9:c0:
                    1b:18:3d:72:af:b7:5d:77:b3:26:56:e4:19:ae:96:
                    7b:a0:53:12:6a:75:c7:d8:91:54:eb:cb:eb:ab:b4:
                    14:17:a2:1e:2a:3c:bd:a4:f7:a5:5d:b2:75:ea:0e:
                    6a:11:e3:ff:2f:84:99:3a:fb:c0:86:f9:41:69:69:
                    fb:ad:3a:ba:93:60:0a:1c:98:8c:25:3d:88:ad:3d:
                    e5:c4:48:25:bf:fb:8f:ec:a5:84:a4:9e:9b:d9:cb:
                    e6:f8:f1:e9:f0:f2:3c:22:24:7a:f7:ba:8f:67:6d:
                    d0:74:01:ce:b5:61:68:df:05:77:d9:1c:86:5a:dc:
                    4a:43:00:71:c4:32:76:6b:81:49:dc:0c:7d:45:c1:
                    26:72:6e:3b:ab:01:25:04:f2:6d:df:40:06:80:3f:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:38:B8:31:B9:EA:29:81:3B:86:0B:28:37:CE:4F:E0:B6:25:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73f8ef89-6b9e-3091-9764-bd45fd019120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:f2:d9:51:94:70:ca:18:3b:87:ac:64:79:49:75:14:fb:
         dc:6e:25:78:f8:79:56:ee:18:9c:40:d6:61:0a:07:ba:56:93:
         2e:28:77:16:e7:cb:34:81:17:0c:45:f5:eb:4a:5f:27:68:b7:
         10:22:55:32:74:ae:36:3e:e3:19:a1:e2:98:bb:af:8d:5d:81:
         18:78:53:6a:0b:9c:f1:7a:a7:66:d6:38:23:22:72:54:83:73:
         99:b4:7b:c2:1b:46:2a:77:e1:ce:8c:01:d4:e7:0f:78:6b:20:
         04:49:16:29:8d:8e:28:1b:f8:ef:32:c6:32:23:78:1e:e7:0d:
         93:56:0a:6c:06:37:c0:8b:30:ba:a1:6c:7b:50:4c:a5:b7:79:
         80:ab:5a:54:78:4b:cc:6f:c2:ec:23:b3:a8:32:f0:5c:dc:ee:
         fb:99:00:34:90:5e:fb:90:28:14:91:2a:e3:a8:d1:e3:c1:5d:
         8c:63:88:93:77:02:80:ee:56:ba:08:b6:65:af:2d:e9:ae:f7:
         73:cd:a2:7f:f5:75:a7:f5:1a:f2:10:dd:3b:7e:45:60:fb:23:
         30:20:6b:02:ab:d4:89:3e:e9:f1:65:02:4d:73:4b:30:1d:a1:
         22:01:75:63:42:45:cc:57:dc:a7:48:79:79:9c:c0:9b:e0:14:
         bb:fe:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:32:02 2025 by rpki-client