Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f830109-7638-3c90-ac53-e42fbf9e1beb.roa
File:                     9f830109-7638-3c90-ac53-e42fbf9e1beb.roa (raw, json)
Hash identifier:          5UZTK4+u7nrU84iw2PFL0/9wZECMmwq6b2LzPzPHDXk=
Subject key identifier:   87:77:40:E5:A4:38:BD:22:66:04:2C:6F:CE:1A:ED:8E:28:AF:B4:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031B11572F9F322B63D0D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f830109-7638-3c90-ac53-e42fbf9e1beb.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        24.98.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:b1:15:72:f9:f3:22:b6:3d:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=0ce1e123-bf3e-4ed0-86c3-a014abc21f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:69:6e:bd:4c:e8:0d:87:6e:6a:21:6f:99:
                    29:3c:16:08:3d:5d:a5:d5:4c:e2:db:09:5c:ca:e1:
                    ca:9d:4a:4e:62:d2:0b:83:35:d8:f9:9d:e3:4a:01:
                    ad:8a:88:60:fc:72:87:7e:fd:b9:97:46:91:45:d9:
                    40:3d:3d:a3:52:41:b3:5e:7e:85:15:78:3c:90:27:
                    5a:bb:58:b4:12:4b:98:ec:0e:c0:9f:36:8b:d5:a5:
                    b5:dc:40:62:16:20:fb:83:fb:18:76:e3:dd:75:7a:
                    4a:3f:b8:51:9e:1a:13:f3:48:eb:5e:46:e0:88:2f:
                    70:0f:28:25:f6:8d:f2:0b:05:9d:a5:6b:40:52:f6:
                    20:b9:47:fb:3e:6d:ed:60:77:d0:60:98:ea:6c:ff:
                    ae:19:a6:d0:65:a0:11:60:f2:6d:73:71:49:a3:5b:
                    d5:9e:45:b5:6a:f4:3a:5d:67:2f:62:30:59:c3:0f:
                    c7:56:eb:d6:2e:ca:2f:5c:f4:57:7e:ad:ee:17:73:
                    a6:f3:44:a4:46:0f:af:64:c1:51:07:b6:ad:e2:0e:
                    61:10:3b:7d:ba:08:ec:4e:12:ee:e6:d6:1c:76:3e:
                    5f:08:82:1e:ae:7a:4c:02:39:5a:8e:80:f5:09:2c:
                    ec:e7:31:76:aa:27:9b:40:00:d9:53:97:48:1d:ec:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:40:E5:A4:38:BD:22:66:04:2C:6F:CE:1A:ED:8E:28:AF:B4:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f830109-7638-3c90-ac53-e42fbf9e1beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:17:01:bc:ce:a4:b7:cf:10:a2:ab:4c:89:92:a4:5e:4c:71:
         43:03:b0:00:4b:3b:5c:02:09:0b:a7:f6:a2:70:46:e5:f4:b8:
         53:88:a2:e4:f4:4c:8a:bc:ee:af:c1:82:6f:23:ef:c9:29:24:
         f9:65:ae:08:09:1e:bb:14:93:77:f4:16:9c:a9:92:41:50:9a:
         92:f2:70:06:0f:73:eb:cf:5b:ac:19:89:80:a2:4d:2d:56:ce:
         e2:71:63:57:68:25:58:80:21:1f:35:f6:db:ac:c4:47:7a:96:
         11:6c:a6:f2:ca:da:8c:06:41:cb:17:eb:fe:b6:3a:8a:6c:23:
         9e:0a:86:fb:74:f4:b9:b2:79:4b:2d:63:30:29:85:3d:ea:4e:
         a0:c7:53:69:7d:fd:2d:df:06:c2:14:cf:57:e7:af:13:08:8d:
         98:93:6b:24:4c:bf:32:a7:31:a9:b2:c8:75:29:5c:1e:89:0d:
         cb:f9:38:27:82:ed:7b:1e:96:e6:b4:04:a8:04:5f:43:3b:81:
         26:83:ac:39:33:10:f7:08:71:7f:40:01:7a:e8:df:80:58:de:
         62:8f:1d:05:d4:65:d2:ba:2f:aa:55:ee:39:4d:7c:e6:13:7e:
         a3:14:e3:56:9e:6a:a2:91:2f:15:63:37:aa:4d:97:88:0f:e2:
         b7:f7:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:37:42 2025 by rpki-client