Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/22742b0c-5828-306a-9051-6b3fe5efb583.roa
File:                     22742b0c-5828-306a-9051-6b3fe5efb583.roa (raw, json)
Hash identifier:          08OFiP27DkYoksK4C6j4Gcbvk8ZbQVusY7PR4Hkx8CI=
Subject key identifier:   DB:B2:FC:50:41:6B:47:EC:04:80:E7:EF:D6:92:BE:7F:D4:C0:85:4E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A3E4599F3CD367590384C4F80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/22742b0c-5828-306a-9051-6b3fe5efb583.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     21859
IP address blocks:        98.98.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:99:f3:cd:36:75:90:38:4c:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=d0849440-4a64-4a47-a493-5accc63eeb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:2c:67:fa:2a:d2:5f:e0:48:84:21:37:b7:
                    86:4e:9f:e8:eb:da:48:4f:f1:b0:8e:92:57:10:04:
                    76:f7:a3:a9:f1:f2:d6:47:d2:29:cf:32:1a:41:a7:
                    a5:50:87:21:f1:2d:28:ca:d7:d8:f1:25:76:18:2f:
                    a3:00:d8:91:a4:27:98:0a:30:33:dc:f4:7a:1d:97:
                    d3:51:a4:6e:59:6e:61:f6:c7:40:9f:85:e1:cd:22:
                    65:64:58:3a:f5:78:3c:2a:62:9d:cd:c1:0a:43:de:
                    b8:67:07:13:15:75:09:8b:60:ec:70:e7:2d:b4:d8:
                    18:9c:71:21:b9:88:dc:ba:c4:5f:47:40:79:02:61:
                    3b:ca:46:17:30:16:ca:35:05:c2:c8:2b:e1:59:fa:
                    a5:ac:b8:d8:6f:6f:02:ab:f3:bf:38:e4:a8:fc:9a:
                    12:0e:a7:49:75:3e:e8:e2:f6:f4:b6:30:c2:de:80:
                    7d:cd:f1:18:18:0c:89:4f:e1:59:d9:f3:2f:5c:ef:
                    91:e7:66:51:ed:cf:d3:ff:2d:dc:50:8d:23:f9:9e:
                    f9:2e:28:37:ed:f5:01:6e:f1:e2:60:92:fa:00:c7:
                    23:fb:1f:e9:b0:90:00:0e:e8:15:83:71:5b:7e:b0:
                    d8:2e:91:3c:a7:b2:02:4a:69:eb:d1:b9:9f:46:ea:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B2:FC:50:41:6B:47:EC:04:80:E7:EF:D6:92:BE:7F:D4:C0:85:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/22742b0c-5828-306a-9051-6b3fe5efb583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:d2:09:2e:87:62:97:7c:dc:86:2b:97:5d:20:37:8c:a7:
         d6:be:3a:4c:30:d7:fe:27:e8:40:d7:11:10:c1:f1:90:32:55:
         6b:64:62:b0:33:05:85:09:09:af:81:d5:5d:50:1b:69:c2:71:
         85:e1:82:5b:5c:a9:45:de:7b:65:f6:88:b6:21:43:de:fd:f7:
         c6:32:7f:0a:dd:e7:08:23:9c:6c:2d:43:6d:b3:2e:eb:bb:71:
         08:b5:ca:35:42:79:dd:07:2f:9e:71:6d:12:5e:ef:b0:d2:5e:
         cf:ac:79:c7:0a:4f:a2:bd:7d:da:48:1f:69:4d:40:d5:5d:c7:
         42:b7:c6:3e:a7:d6:12:16:53:a1:f4:d1:6c:97:56:7d:1f:af:
         7b:ef:79:18:8d:74:4b:71:4e:e9:1e:a7:f0:10:7c:2a:eb:5e:
         11:0c:69:c7:29:e4:d1:73:34:f0:95:d2:27:2a:0f:32:8d:68:
         07:42:a5:b9:4d:29:d0:31:af:a3:8f:af:e2:7f:11:1f:9a:74:
         c0:dd:e3:de:16:10:cd:c0:f9:9e:ab:7d:88:49:62:b7:e9:98:
         dd:3b:56:3b:79:f3:42:a0:52:ec:fd:52:b3:76:18:4e:e2:07:
         c2:8d:f9:14:5b:44:c6:52:d7:04:87:70:74:1d:b7:51:71:11:
         e9:7d:f3:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZnzzTZ1kDhMT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
ZDA4NDk0NDAtNGE2NC00YTQ3LWE0OTMtNWFjY2M2M2VlYjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4wsZ/oq0l/gSIQhN7eGTp/o69pIT/GwjpJX
EAR296Op8fLWR9IpzzIaQaelUIch8S0oytfY8SV2GC+jANiRpCeYCjAz3PR6HZfT
UaRuWW5h9sdAn4XhzSJlZFg69Xg8KmKdzcEKQ964ZwcTFXUJi2DscOcttNgYnHEh
uYjcusRfR0B5AmE7ykYXMBbKNQXCyCvhWfqlrLjYb28Cq/O/OOSo/JoSDqdJdT7o
4vb0tjDC3oB9zfEYGAyJT+FZ2fMvXO+R52ZR7c/T/y3cUI0j+Z75Lig37fUBbvHi
YJL6AMcj+x/psJAADugVg3FbfrDYLpE8p7ICSmnr0bmfRuqeYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuy/FBBa0fsBIDn79aSvn/UwIVOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMjI3NDJiMGMtNTgyOC0z
MDZhLTkwNTEtNmIzZmU1ZWZiNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIca0gkuh2KXfNyGK5ddIDeMp9a+Okww1/4n6EDXERDB8ZAyVWtkYrAz
BYUJCa+B1V1QG2nCcYXhgltcqUXee2X2iLYhQ97998Yyfwrd5wgjnGwtQ22zLuu7
cQi1yjVCed0HL55xbRJe77DSXs+seccKT6K9fdpIH2lNQNVdx0K3xj6n1hIWU6H0
0WyXVn0fr3vveRiNdEtxTukep/AQfCrrXhEMaccp5NFzNPCV0icqDzKNaAdCpblN
KdAxr6OPr+J/ER+adMDd494WEM3A+Z6rfYhJYrfpmN07Vjt580KgUuz9UrN2GE7i
B8KN+RRbRMZS1wSHcHQdt1FxEel989g=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:18:20 2025 by rpki-client