Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa
File:                     a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa (raw, json)
Hash identifier:          nnBTs4gZEVPu11dZuVJk2QCCj6nA+0Fotfe/0bwmI6I=
Subject key identifier:   04:B7:2F:B0:E3:F1:10:3B:C9:83:35:BE:0A:53:B1:10:51:80:46:F9
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B7DECAB4D843487FCDAEB1E00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     21859
IP address blocks:        98.98.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ab:4d:84:34:87:fc:da:eb:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=cc4a9ce6-80b7-4008-8146-9a1283e3a151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:25:21:71:58:ea:12:8d:9b:2b:db:92:38:
                    8c:04:c3:81:a0:e8:da:a5:93:94:36:4a:0d:12:63:
                    69:08:3a:18:96:9d:ab:ca:3d:81:b3:fc:7a:c0:72:
                    fd:30:c6:07:15:fc:ea:d8:7b:5f:02:13:e9:38:ce:
                    62:1f:c4:5b:63:cd:6f:ef:6f:45:1d:94:fe:0e:60:
                    18:f2:c9:f3:e6:2c:01:0c:ac:dd:9d:24:88:6e:aa:
                    95:53:72:d9:eb:50:66:87:eb:59:72:f3:8b:0b:0c:
                    64:20:d1:8a:f3:bf:3f:3d:fc:cd:64:35:c8:26:a8:
                    15:c8:89:d6:29:ae:8f:87:b3:f7:0e:65:82:0b:fa:
                    bc:0a:b3:5d:ab:75:76:55:74:06:d4:9d:88:09:2c:
                    94:a7:63:79:a8:33:36:29:46:8d:70:13:3b:c5:5e:
                    e0:70:6b:a5:f6:11:b2:3e:2e:ac:7e:ae:89:94:48:
                    79:d4:a5:0f:06:fd:1b:b4:56:d3:ce:ee:de:35:bb:
                    35:28:8b:0e:d6:6e:3a:f5:d2:ba:6e:b0:0d:78:32:
                    b0:69:b0:fa:07:18:65:85:5d:83:ad:14:37:c4:8a:
                    7f:04:60:c2:16:0c:8a:e3:6a:74:2d:69:89:c8:dc:
                    a4:39:60:a4:3d:cf:2c:14:2b:6d:d0:58:42:81:9b:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:2F:B0:E3:F1:10:3B:C9:83:35:BE:0A:53:B1:10:51:80:46:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:82:ac:a9:ac:6b:09:d3:7c:a7:92:51:83:bc:4e:10:71:5b:
         78:a4:44:18:8b:87:71:ff:c1:9f:df:58:7c:11:82:e2:5a:e4:
         3e:4c:3f:63:fe:ef:b9:7b:5e:d1:b5:c7:3f:2f:fc:8e:1d:6b:
         08:db:b8:c5:5f:3c:ab:e0:1d:49:2a:92:90:36:6d:e4:5a:f9:
         34:96:7e:e8:2c:bf:71:db:ec:45:a8:7e:6a:d2:c8:81:da:4d:
         be:7a:90:be:a8:cb:f5:95:fe:fb:a9:71:ef:31:84:b4:ad:0c:
         c8:a6:b9:76:3b:59:03:33:5b:95:1b:fb:3b:a7:02:aa:c5:ff:
         4e:5a:6e:80:e3:de:67:63:02:1c:b8:18:a8:57:6c:0f:98:2e:
         b0:2a:9d:b2:27:e6:9e:33:7d:c1:4b:37:eb:39:a4:01:d9:3f:
         9c:42:92:4b:46:30:f6:75:57:bb:ff:8b:87:5a:73:7e:a2:59:
         88:38:10:5a:d0:f1:e5:01:db:06:5d:c0:87:bd:d4:f8:30:92:
         41:fa:2b:0c:85:71:15:dd:3b:14:ac:09:f0:ab:f4:ca:88:66:
         97:96:77:f7:42:c6:91:86:70:25:48:42:6f:3b:da:6e:87:0e:
         e2:33:23:66:b3:8b:b9:08:19:70:f3:61:aa:df:b8:1a:54:c0:
         a4:f2:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:25 2025 by rpki-client