Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa
File:                     07a034e1-70a3-34d7-8647-141d82220d07.roa (raw, json)
Hash identifier:          s/iDyvKNyAkuTrr6qWDEX+T65HJ6e5YvE6sCeVwlKzc=
Subject key identifier:   8F:96:0E:1C:55:54:21:3B:91:11:FC:BB:1E:AE:16:45:77:72:F8:B8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9FFBB0445CE6B918100DD880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     19905
IP address blocks:        98.173.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b0:44:5c:e6:b9:18:10:0d:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=63e9fda1-eef5-4712-965b-6f95623f12bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:73:13:84:c8:d2:81:c3:94:43:f5:ba:a6:
                    34:05:10:6a:40:4e:6a:02:45:83:73:4f:6b:3f:50:
                    b1:f0:73:1d:18:6d:9a:c8:97:66:a4:dc:bd:25:30:
                    3e:19:58:d9:49:85:81:f4:d2:fc:3f:a3:38:fb:61:
                    4e:17:5b:e1:a8:41:04:9c:77:51:c8:00:e1:d2:00:
                    5a:e8:e8:79:12:63:29:55:02:cd:fe:57:05:9f:e9:
                    d4:f8:81:10:de:a0:fd:c9:b1:e1:ef:be:94:73:3d:
                    4b:58:37:b8:2a:c9:4a:2b:aa:bd:22:1d:4b:2e:07:
                    6c:9c:5c:6f:9c:82:bd:99:e7:92:56:36:9e:4d:a3:
                    ab:71:0f:9f:a5:6e:a7:aa:26:64:fa:e7:ed:04:f7:
                    56:d4:c9:f2:39:74:2f:14:3f:91:b0:33:c1:2c:ce:
                    0e:4e:96:60:00:f4:71:b4:bc:28:21:94:c2:9b:3f:
                    43:54:b3:30:6c:02:37:6f:54:47:40:ad:48:e5:fe:
                    09:1b:05:cc:d9:51:e4:65:4f:6a:c8:18:59:02:5d:
                    ed:04:5b:30:2b:58:92:a4:7c:f5:9b:fe:58:f7:f7:
                    77:ba:10:47:08:e4:2b:0f:5b:46:92:04:fe:10:ba:
                    12:87:1c:21:f3:fb:db:f5:fd:93:a5:3d:f1:7d:da:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:96:0E:1C:55:54:21:3B:91:11:FC:BB:1E:AE:16:45:77:72:F8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.173.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:5f:9a:ad:5e:8a:06:5e:27:62:8b:b5:31:10:46:1b:1e:
         91:39:6d:7e:df:61:06:0a:0c:51:bf:2b:45:31:eb:4c:b3:df:
         fa:1c:dc:30:7c:b9:41:7d:64:80:c9:02:bb:19:d2:8d:ee:b2:
         3e:93:50:70:11:af:76:4c:54:fa:f8:3f:ac:40:a1:7e:27:da:
         83:62:65:58:23:96:73:52:8b:ea:21:88:f9:37:02:d2:5c:21:
         d6:b9:1a:6b:9a:aa:95:da:aa:bf:9a:23:2c:70:84:71:46:59:
         78:f3:40:60:f2:0f:4f:12:64:38:57:53:3c:9e:f7:b8:f5:65:
         2b:c7:85:58:15:95:3a:6f:e2:64:24:39:87:a3:aa:91:97:9a:
         12:18:51:1f:af:c3:43:66:16:50:6e:5c:ce:71:bb:a8:20:74:
         9c:59:80:e1:5d:e3:be:ac:31:15:fd:92:6c:bd:38:e5:b0:eb:
         03:6f:22:85:cc:d2:f3:86:d1:6c:a7:76:05:7c:65:e7:06:44:
         8d:aa:06:de:3a:21:37:a3:c8:df:0e:22:8d:da:46:ab:ea:b3:
         bd:fc:b3:8a:33:55:67:b7:69:40:82:18:cf:a1:c4:45:8f:e9:
         7a:bf:3d:4b:89:30:5e:f2:e2:ca:fb:1a:e7:f9:48:36:d4:ef:
         2e:b3:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:19 2025 by rpki-client