Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5cab2272-aebe-3931-8db9-a256202d44f6.roa
File:                     5cab2272-aebe-3931-8db9-a256202d44f6.roa (raw, json)
Hash identifier:          XkouGJJKGSMi8Z+KdgjD3RqIFb+MtzqdvS7u4Wz6TUw=
Subject key identifier:   50:FB:4B:39:63:35:57:EB:FC:7C:B2:44:BB:67:45:3E:D4:0F:6A:4B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA68FF9F8A364B31AE702C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5cab2272-aebe-3931-8db9-a256202d44f6.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     10899
IP address blocks:        98.187.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:8f:f9:f8:a3:64:b3:1a:e7:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=86380193-0b1b-491b-bf2b-b5eb3833fc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:41:6d:e8:c5:5e:59:1e:b7:a0:02:df:40:
                    14:bb:2b:96:64:28:8f:bb:6e:e2:88:e7:2c:fc:7c:
                    13:2b:df:2b:f5:1c:96:11:98:42:4f:d2:72:64:5f:
                    9d:91:80:ed:f6:ea:af:fc:f6:f1:27:5c:5f:75:98:
                    dc:8c:e8:5d:f2:da:b9:74:22:be:a2:86:fe:51:d9:
                    25:49:5a:92:98:b2:fd:00:33:5f:a6:0e:16:f3:71:
                    91:0b:65:20:99:99:10:dc:6c:18:ca:2c:37:9a:67:
                    27:5d:12:fc:62:bb:48:59:7d:1d:e8:b0:43:ab:86:
                    e1:7d:af:41:14:14:e1:c5:ad:70:48:84:1e:6c:c1:
                    92:f8:c6:e5:1f:6a:cf:e2:b2:44:c9:81:8d:d1:f4:
                    a9:21:63:38:74:17:a8:67:33:df:f2:7c:ba:a9:a1:
                    38:66:46:63:ea:30:5b:b9:87:d1:6b:d5:69:a0:ec:
                    fb:42:3e:f0:ee:40:6a:83:a5:f3:3d:56:1d:7d:02:
                    01:b6:73:2d:ad:6d:b5:b7:14:13:89:4d:4b:43:cc:
                    d1:6c:69:0a:14:46:08:12:a2:c0:b4:ac:75:72:8e:
                    26:5b:0d:09:bd:5f:0d:0d:38:c2:5f:ed:ca:66:7a:
                    2c:9f:41:6f:53:af:5e:9a:72:23:4b:cf:ef:fc:14:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FB:4B:39:63:35:57:EB:FC:7C:B2:44:BB:67:45:3E:D4:0F:6A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5cab2272-aebe-3931-8db9-a256202d44f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.187.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6b:65:35:09:4d:59:62:cf:26:ec:46:85:42:41:35:e2:a4:
         4e:35:fb:68:43:41:e4:14:8b:2e:b2:dd:32:42:b6:b8:79:c1:
         5e:79:23:a1:cf:ed:d5:7d:25:ad:bf:16:a2:e9:05:62:26:18:
         91:9e:35:cb:e5:78:82:36:69:00:0f:de:bd:de:42:ab:3d:6c:
         50:91:3b:77:bd:08:64:22:85:f5:a0:b2:51:af:84:3e:5e:c8:
         e1:4a:a7:f2:63:bc:83:aa:bd:88:7f:4d:55:40:e6:cb:38:4b:
         89:c4:96:63:90:c5:b4:78:3b:95:50:11:b1:87:47:e5:6a:39:
         45:dc:82:bc:80:fc:87:df:e5:c1:d7:05:4b:77:e7:4a:58:01:
         b2:31:ca:1a:02:90:eb:68:9f:b5:20:f0:d5:ce:ee:7b:c3:2e:
         a1:65:a7:cf:20:00:5d:3f:b7:81:6a:16:0d:4a:24:a7:cc:fe:
         09:f7:ed:dd:93:f3:1d:d4:84:f7:af:b1:87:1d:ed:52:a5:62:
         23:12:83:19:5b:76:ca:13:e4:86:bb:31:79:49:d7:a2:2f:f5:
         43:68:2a:02:21:d8:89:b2:e9:32:0c:1f:3c:ec:10:9c:a5:d2:
         b4:b9:aa:f5:94:c9:e8:c1:b7:8e:d8:7e:c9:85:9f:6e:f4:2c:
         2d:41:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:53 2025 by rpki-client