Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7468ea79-18c6-3bed-9e98-b3841d38cb06.roa
File:                     7468ea79-18c6-3bed-9e98-b3841d38cb06.roa (raw, json)
Hash identifier:          8BvWd58Qrhyyu1oBaQeRojztlDFLr0zlo/Cm2V3HHRs=
Subject key identifier:   89:BD:A4:6B:C6:70:02:86:93:5B:56:BF:2A:BB:3F:E9:FF:85:76:3F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B891776DB618B8C778DF08E80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7468ea79-18c6-3bed-9e98-b3841d38cb06.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     21859
IP address blocks:        98.98.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:76:db:61:8b:8c:77:8d:f0:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=df3808bc-fc5d-432c-94c7-02e1cc408a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:24:dd:c2:08:c8:bb:40:2b:86:8b:8f:52:
                    75:94:82:70:39:30:7a:37:ad:73:d5:cd:25:f7:a0:
                    83:43:43:ae:76:0b:7b:97:37:41:ef:37:11:09:4c:
                    e4:f8:23:98:57:c4:b9:9e:36:b5:f3:24:c6:86:38:
                    59:f1:4e:bf:b6:7f:62:2b:22:59:c8:4a:38:8f:aa:
                    0b:89:dd:d3:75:88:38:fa:0b:9b:03:98:dc:bf:fe:
                    a7:4f:65:98:a8:c2:e6:6c:26:fd:05:75:9d:db:5f:
                    f4:f3:9a:4b:67:9d:fe:b3:d0:11:19:02:22:53:c6:
                    f1:9b:f5:57:ca:09:a7:b6:7a:bc:27:21:7c:4f:07:
                    ac:bc:38:4c:43:1c:bb:a8:01:be:18:e5:19:09:39:
                    f2:e9:03:87:c7:be:80:ea:1d:9a:38:5e:3b:95:55:
                    7e:7c:ab:8d:1f:00:98:fc:94:85:4b:c4:ea:2b:a7:
                    4b:ef:5e:73:5d:f2:3d:e7:bf:27:2c:4f:c2:7c:e2:
                    13:6e:82:e6:41:aa:ac:ad:fa:44:23:3f:47:b0:87:
                    7e:30:b8:ea:9b:cb:e6:01:8c:dc:0d:88:ee:b7:9d:
                    8b:f0:02:ba:6a:d8:85:ef:50:5a:aa:a8:8b:a1:28:
                    a7:7c:81:99:db:31:20:88:60:50:9a:56:9f:3d:61:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:A4:6B:C6:70:02:86:93:5B:56:BF:2A:BB:3F:E9:FF:85:76:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7468ea79-18c6-3bed-9e98-b3841d38cb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:5a:7f:1a:5c:c1:34:53:a8:70:57:82:af:ea:7a:f4:29:
         54:78:2e:a7:a2:a3:4c:11:2a:25:ca:20:1e:6a:63:24:18:21:
         8d:4c:9d:8e:1f:67:7e:4f:37:db:cb:ba:fe:83:3a:a2:ff:b4:
         eb:8c:af:95:8f:2d:85:51:b6:ab:6e:1c:d2:ed:5d:b0:30:35:
         c2:e3:e5:06:1b:98:66:66:e0:e1:3d:68:e5:66:08:b5:c0:36:
         44:b4:00:0e:82:d6:97:b1:ba:d7:7e:d9:82:c0:0f:c2:41:46:
         34:1d:d4:56:94:1a:34:7c:95:b3:39:60:a7:c6:03:d4:d4:6f:
         6d:7c:b3:de:98:e6:65:c2:8a:63:14:f0:66:e1:4c:40:29:ea:
         1e:cd:a1:fd:40:fd:f8:f4:9f:05:e1:4b:a2:e2:5c:ca:c5:74:
         6c:c1:96:67:29:02:d2:f4:5b:22:55:07:31:fe:d2:ac:cc:7a:
         94:d6:94:04:58:e0:35:34:27:04:76:45:74:7c:82:3f:0c:07:
         1d:f9:86:60:53:83:8c:71:73:ec:40:2c:16:9b:f9:80:64:c9:
         34:d7:3d:58:e9:d3:64:94:d9:76:0c:bd:f9:0f:a0:c7:2b:8b:
         32:a7:38:62:38:21:6d:a6:f6:c8:df:47:4c:50:00:c2:3e:57:
         5f:92:74:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3bbYYuMd43wjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
ZGYzODA4YmMtZmM1ZC00MzJjLTk0YzctMDJlMWNjNDA4YTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn0k3cIIyLtAK4aLj1J1lIJwOTB6N61z1c0l
96CDQ0Oudgt7lzdB7zcRCUzk+COYV8S5nja18yTGhjhZ8U6/tn9iKyJZyEo4j6oL
id3TdYg4+gubA5jcv/6nT2WYqMLmbCb9BXWd21/085pLZ53+s9ARGQIiU8bxm/VX
ygmntnq8JyF8TwesvDhMQxy7qAG+GOUZCTny6QOHx76A6h2aOF47lVV+fKuNHwCY
/JSFS8TqK6dL715zXfI9578nLE/CfOITboLmQaqsrfpEIz9HsId+MLjqm8vmAYzc
DYjut52L8AK6atiF71BaqqiLoSinfIGZ2zEgiGBQmlafPWFnlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIm9pGvGcAKGk1tWvyq7P+n/hXY/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNzQ2OGVhNzktMThjNi0z
YmVkLTllOTgtYjM4NDFkMzhjYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmK2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGLWn8aXME0U6hwV4Kv6nr0KVR4Lqeio0wRKiXKIB5qYyQYIY1MnY4f
Z35PN9vLuv6DOqL/tOuMr5WPLYVRtqtuHNLtXbAwNcLj5QYbmGZm4OE9aOVmCLXA
NkS0AA6C1pexutd+2YLAD8JBRjQd1FaUGjR8lbM5YKfGA9TUb218s96Y5mXCimMU
8GbhTEAp6h7Nof1A/fj0nwXhS6LiXMrFdGzBlmcpAtL0WyJVBzH+0qzMepTWlARY
4DU0JwR2RXR8gj8MBx35hmBTg4xxc+xALBab+YBkyTTXPVjp02SU2XYMvfkPoMcr
izKnOGI4IW2m9sjfR0xQAMI+V1+SdBw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:45 2025 by rpki-client