Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac234f29-90ba-309e-a925-c7c81b516a44.roa
File:                     ac234f29-90ba-309e-a925-c7c81b516a44.roa (raw, json)
Hash identifier:          0vaPePepAWNEAszKZSe0kUicSEYlOg+Mvkco5C0OLuQ=
Subject key identifier:   7A:49:5A:57:7F:08:06:3B:B3:3C:28:85:9F:5D:7A:BF:AA:39:0D:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC34B0E0DE0A289CB3DFD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac234f29-90ba-309e-a925-c7c81b516a44.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.37.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:4b:0e:0d:e0:a2:89:cb:3d:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7defe041-1ef6-482d-bfa3-f8ff04a4023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:7f:30:4e:8c:05:c3:7c:d7:a6:01:d0:ec:
                    27:36:cd:0c:85:c2:a4:4c:f5:75:7a:a5:f3:96:0e:
                    01:9d:d2:08:27:19:58:a9:a8:8e:03:36:1b:41:71:
                    e7:4c:1c:7c:42:38:7c:f5:0d:37:41:e7:10:bb:36:
                    21:25:eb:ea:ec:6c:3f:93:99:b2:8b:1c:df:12:2f:
                    96:17:78:b2:26:a5:a8:a3:e6:27:e7:f6:04:a9:8b:
                    27:c7:7d:42:6d:89:6a:81:e5:39:ce:d5:8c:fb:0c:
                    05:55:8d:5f:79:7e:f5:1d:ea:53:06:58:40:a6:af:
                    a6:89:7f:ea:c6:35:00:35:5f:16:e1:25:b7:37:99:
                    75:1f:8d:4b:8f:6c:61:5d:22:87:b0:59:93:cc:ef:
                    e6:ff:ef:65:e9:8c:13:9b:b7:e9:35:b9:f7:f5:34:
                    8c:62:98:91:38:67:2c:3b:3e:6f:16:ad:b9:c0:64:
                    14:64:27:8b:ca:09:72:8f:7b:02:63:44:21:b4:a2:
                    e8:07:2e:aa:cd:b8:df:9d:20:89:96:fc:95:e0:56:
                    6b:ab:62:1d:f9:c5:62:f1:a2:14:24:35:48:62:55:
                    81:f1:e2:e4:33:a3:58:84:51:34:39:d8:93:f4:91:
                    85:92:68:6d:53:e0:80:73:c0:28:1c:25:92:8d:48:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:49:5A:57:7F:08:06:3B:B3:3C:28:85:9F:5D:7A:BF:AA:39:0D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac234f29-90ba-309e-a925-c7c81b516a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:30:a5:ca:f0:ca:31:93:eb:22:c9:03:39:78:26:df:ee:08:
         38:f4:20:7f:2f:3d:5d:30:9d:13:e5:b7:3b:d3:01:62:3e:ad:
         aa:cc:6c:5b:7e:b5:36:d3:7c:bf:db:2e:e2:03:80:8a:46:d8:
         02:92:d8:9b:35:05:25:c4:33:ba:6d:6a:12:6b:6e:40:0d:88:
         b6:9a:22:29:ff:96:d7:44:db:f3:f6:57:ae:a4:92:e9:69:e3:
         a6:0f:19:ba:3f:98:07:96:a1:4b:aa:49:a8:af:93:87:c3:7c:
         83:0d:d9:6e:4b:fa:eb:d7:ba:59:a6:ba:b2:6c:4e:b4:7e:48:
         98:f3:37:2c:65:f1:57:7f:83:0f:6b:5e:57:b7:ef:db:b6:c3:
         79:e5:c0:ae:53:22:51:16:03:25:08:3b:37:76:06:1a:f7:b9:
         ac:e4:71:54:95:c1:bd:bb:7e:07:79:14:ba:1c:05:af:c3:04:
         70:25:28:cb:5d:26:11:54:81:d1:10:cc:87:5f:2c:80:2e:79:
         d4:54:46:55:4a:37:08:29:55:7e:a5:b6:4c:09:06:92:aa:6c:
         fd:21:47:9a:10:3a:c6:d6:f1:2f:ca:2e:8e:b8:d3:12:f3:99:
         15:ff:55:07:29:8d:1e:4f:ff:1b:f7:3a:7a:5c:bd:11:76:5e:
         2e:66:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:02:19 2025 by rpki-client