Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa
File:                     cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa (raw, json)
Hash identifier:          9o3/GJKA+u8O6Ky56FJKD7but8eJu7Ok/fnAWFwuJJ4=
Subject key identifier:   E7:EF:BF:63:D1:7A:CD:E1:CE:4A:C6:4C:8B:47:FC:A6:F8:28:A8:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3730B1CBCC814E6F8FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        98.202.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:73:0b:1c:bc:c8:14:e6:f8:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=826a668d-1943-4bce-b637-696eb461140d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:4a:15:5d:92:9a:a6:a5:a7:46:37:d6:e7:
                    7e:31:8e:a4:8f:e8:8e:99:ad:7c:f4:4d:51:3c:f1:
                    e1:02:46:77:58:0d:e6:ad:33:39:8a:c6:6c:28:98:
                    4c:f8:97:67:e2:cd:41:33:8f:67:52:d0:a8:71:eb:
                    fa:52:da:51:7f:dd:6d:29:00:21:05:ca:c7:8d:21:
                    2a:11:63:19:05:48:5b:e6:46:7e:ea:43:55:43:a4:
                    51:0e:cf:33:30:4d:e7:32:fe:c7:13:94:00:61:6a:
                    31:56:7c:9b:be:4e:fb:3d:24:4d:ae:99:2c:c1:a7:
                    ef:ea:00:5c:e3:00:23:6b:05:f8:6b:5d:3f:c5:43:
                    ea:73:27:b8:bd:38:94:48:b4:24:b3:db:f5:2c:8a:
                    6f:39:f6:10:1f:c6:d1:13:fd:4d:2c:88:bd:16:8a:
                    53:b0:2e:a0:f1:05:07:ab:20:6a:db:fe:97:87:ab:
                    c8:7c:27:09:3a:09:75:0e:6d:9b:e9:c9:78:b7:f6:
                    56:b5:d7:33:c3:9d:fa:9f:57:32:b2:63:f7:50:fb:
                    53:a8:59:0a:bb:aa:60:d5:f8:c5:38:9f:a0:3f:a1:
                    b9:68:17:ff:80:50:d6:fb:fb:be:46:71:a6:6b:9c:
                    c7:59:8f:73:aa:5d:75:b1:61:cb:e3:47:2d:7b:6a:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EF:BF:63:D1:7A:CD:E1:CE:4A:C6:4C:8B:47:FC:A6:F8:28:A8:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:1f:49:64:d1:0e:91:3c:e0:48:93:c6:fd:59:a4:5c:ad:74:
         a6:9e:aa:a4:3a:86:eb:21:28:b7:2e:ff:32:07:8c:56:ff:66:
         dc:83:f4:ff:3b:23:cf:1c:4a:c6:ef:a3:79:38:4a:bb:88:85:
         63:a2:78:76:ce:15:8b:06:54:09:e9:d7:1a:12:16:4b:ec:09:
         15:e4:cc:44:8f:3b:a7:b0:c7:b6:48:34:31:99:f6:d2:b6:aa:
         ee:d9:c4:83:a1:9f:1d:5e:ca:40:03:6e:7e:36:ff:68:80:97:
         46:35:7b:a4:ac:ea:6c:c7:1b:72:2a:b2:e5:fd:b9:6f:cc:f5:
         96:b0:b8:5e:e1:89:26:59:93:c4:e5:ee:41:80:a4:92:c0:7b:
         bb:23:32:cb:83:d2:fa:f2:f1:ec:4b:ed:f9:bc:35:77:52:8a:
         70:96:91:dd:74:da:13:bd:f5:c7:73:17:28:38:b2:8d:bf:f5:
         32:51:63:1a:8f:42:cd:96:b3:19:e7:6a:f6:0a:f5:9d:ec:b4:
         2f:ba:32:b9:5b:ec:0b:70:4f:8c:05:ce:10:af:81:be:90:11:
         04:86:6a:a2:da:10:ad:a4:95:c7:15:37:44:b2:b7:29:09:27:
         69:63:23:96:fa:20:31:bb:7f:29:bb:84:85:e6:6b:8d:2e:89:
         b3:54:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:55 2025 by rpki-client