Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c1232190-0bd0-36a5-ac1c-65529011a608.roa
File:                     c1232190-0bd0-36a5-ac1c-65529011a608.roa (raw, json)
Hash identifier:          2yWsbi06F8ifSK2GVLd5vfYuMDORAAcG+9tWL2+Onrs=
Subject key identifier:   E9:B6:D5:81:A8:CE:20:84:19:19:42:8D:45:C4:A4:38:50:F0:B2:17
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A549B23C7794A06267A197640
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c1232190-0bd0-36a5-ac1c-65529011a608.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     63386
IP address blocks:        98.142.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:23:c7:79:4a:06:26:7a:19:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=90557b36-e382-42e8-8d9c-d890739b599d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:e0:f2:53:ed:dd:a9:f6:c5:65:16:8c:94:
                    ed:17:fe:66:d6:25:e2:2d:9e:5e:32:1d:a3:73:8d:
                    d0:d7:f8:9a:61:5f:59:1e:82:8a:51:b4:44:34:5e:
                    41:4f:86:33:7c:b3:13:80:53:b5:00:dd:6a:bf:e6:
                    f7:cf:0d:fa:bd:cb:a2:0d:76:48:02:ea:36:9c:66:
                    7d:f4:0f:18:7c:2f:db:5c:ec:7c:5e:82:46:02:bc:
                    c0:40:fe:4b:49:59:af:e6:41:5f:5a:30:42:2d:d8:
                    87:12:fd:c1:7a:f9:85:45:9d:b5:85:38:44:7f:03:
                    c9:e5:42:f2:f8:54:21:90:a6:d0:73:38:02:91:de:
                    87:81:c2:f9:a3:09:14:bf:79:fb:b9:5d:4b:ae:9d:
                    a8:48:92:7e:4a:27:c1:f7:76:f2:8f:56:0a:bb:1d:
                    89:fd:da:77:0c:32:ef:a5:67:bc:22:8f:17:56:5d:
                    a1:ad:25:81:9f:fd:c6:41:9a:64:44:29:4a:fc:de:
                    67:e4:43:a1:17:4b:65:10:f2:2c:f4:81:0d:ce:43:
                    eb:b6:40:b5:00:66:3b:66:46:02:2e:6c:27:14:3f:
                    68:ba:3c:af:bd:1d:a3:7e:19:ee:ac:87:39:d7:b7:
                    f1:2c:0e:a7:87:8c:ba:cb:ec:35:1e:73:1a:60:87:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B6:D5:81:A8:CE:20:84:19:19:42:8D:45:C4:A4:38:50:F0:B2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c1232190-0bd0-36a5-ac1c-65529011a608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:82:ab:e4:60:2f:5d:de:b7:a8:c7:ca:40:d9:c6:6e:25:76:
         14:48:53:c8:43:43:37:4a:38:ee:22:9f:a4:df:72:91:d0:bf:
         a9:12:04:23:52:a9:8c:9f:51:7c:9d:1f:44:c3:5d:40:e1:51:
         19:4f:7f:80:6b:a3:1f:00:05:9e:1f:b5:24:d9:32:f8:68:c6:
         92:30:1f:b5:b3:b2:db:18:8a:e1:ae:58:9d:b8:46:36:35:f9:
         74:69:56:6c:46:e3:fa:a9:a4:ba:a1:f7:88:58:1d:ad:cc:b4:
         29:43:02:3b:8b:3e:23:e0:0c:7f:ae:dc:27:88:0a:e5:5e:60:
         65:8e:ac:d9:68:05:1e:1e:df:cb:c6:48:b2:65:4b:dd:69:9c:
         23:37:49:a0:d8:45:e6:71:79:67:7c:a8:a5:b9:0b:cf:74:f0:
         41:42:7d:4f:2d:3f:8e:9b:89:f9:74:6c:22:ce:86:e7:3a:ae:
         e7:50:5e:ac:3f:7c:f2:08:f1:1f:15:f7:65:dc:5c:42:e0:47:
         9c:05:fa:6d:d9:e5:5d:46:fa:e1:82:d7:fc:5a:14:f3:7a:f7:
         1b:ba:49:03:da:36:66:75:de:ba:10:b5:10:b3:13:45:0c:d1:
         b2:41:c1:94:c2:27:6c:45:08:58:b0:06:e7:c4:08:cd:fe:d7:
         a2:c8:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:50 2025 by rpki-client