Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/279a2cdd-34ae-33dc-a826-e857a4613613.roa
File:                     279a2cdd-34ae-33dc-a826-e857a4613613.roa (raw, json)
Hash identifier:          6zrt5Y2mljzrPZPg8q6VjTdy+/9hQ69zkr99qMmGYQo=
Subject key identifier:   01:22:CB:4A:2B:F5:61:78:67:A9:E9:E7:6A:D0:A4:48:5E:A7:1F:90
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A4AD5995278520739099DFE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/279a2cdd-34ae-33dc-a826-e857a4613613.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     35997
IP address blocks:        98.120.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:99:52:78:52:07:39:09:9d:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=20442db9-f1b5-4851-8c02-0747bc84ce1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:27:73:c1:88:06:f9:e2:43:31:a8:52:4c:
                    e6:7b:9c:5e:a6:3f:25:73:31:b8:b7:2b:3d:22:c4:
                    8a:8c:a1:4a:74:18:84:ab:90:4b:3a:85:c4:5f:45:
                    ed:63:f7:2c:a5:da:9f:8f:0e:ae:98:c5:f6:ac:78:
                    9f:06:f6:67:58:25:1a:4c:3e:ad:58:b6:4f:9c:58:
                    6c:1b:d2:10:c7:e8:ce:55:4f:58:23:8f:30:d2:3e:
                    a4:0b:80:9b:50:ae:70:5c:13:d0:6a:22:a4:e5:a9:
                    32:eb:e3:6d:73:fb:e2:5e:9e:7e:f2:67:2d:34:57:
                    02:1e:b1:f6:0b:93:d3:f0:a6:50:88:6b:98:19:58:
                    2a:c9:26:eb:4a:36:37:52:b9:1d:18:c8:29:27:42:
                    46:2a:dd:ea:89:49:d5:e0:b4:cc:9c:af:2d:03:ca:
                    e7:96:d5:d7:a3:af:a8:4c:63:98:ee:22:66:ae:2e:
                    17:8c:0e:e6:84:8b:90:03:9b:e3:6d:5b:28:5a:04:
                    49:13:8d:39:ba:cc:c8:82:11:41:57:58:a6:e0:3b:
                    ce:2f:f4:3f:27:fe:f7:36:9b:25:e9:de:5e:79:6f:
                    8e:9b:15:2b:e2:97:c5:bc:79:8d:24:c0:36:c9:72:
                    45:0a:dd:ee:5a:f6:d3:ba:f3:15:7e:b3:94:8c:bf:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:CB:4A:2B:F5:61:78:67:A9:E9:E7:6A:D0:A4:48:5E:A7:1F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/279a2cdd-34ae-33dc-a826-e857a4613613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:8e:88:0e:b7:b2:5c:d3:76:bf:57:16:fa:5c:c0:51:1d:
         4f:0a:03:69:ff:07:c5:f1:39:67:ab:2e:60:d9:ed:d4:f8:b5:
         49:d2:47:3a:4b:4f:a3:5c:fb:69:bd:3c:54:9e:a4:b0:67:90:
         ce:d9:05:67:41:f8:45:e4:24:90:57:1e:45:02:98:d2:40:35:
         45:4a:ef:f7:3c:b7:5f:21:85:9f:25:7d:58:d3:3d:22:ae:a9:
         f4:c4:bf:59:a1:ee:06:d3:dc:f6:6f:0b:6e:8e:4d:29:2a:b9:
         34:bd:62:32:50:ea:58:e4:62:c0:6c:94:7c:01:0b:a6:06:20:
         83:9d:47:c8:03:96:b9:e2:03:fb:ce:94:82:38:95:f7:b9:82:
         bf:1e:63:14:32:45:e8:e6:44:bf:75:74:d6:dc:c6:d3:81:75:
         29:af:a4:6d:96:41:24:bd:3e:15:f5:40:58:e7:6e:76:f1:48:
         2d:43:64:aa:13:3e:45:11:70:df:d8:72:76:8a:7f:9e:b9:e6:
         ac:4c:d7:f8:1c:40:f1:54:6c:77:64:64:de:1d:6e:b6:cd:8d:
         ae:c0:27:bb:a1:5f:2c:66:2c:69:b5:9f:ee:94:d0:22:ff:34:
         cf:c1:2c:30:25:b0:b9:cf:3c:b2:21:46:d4:70:9d:f0:f9:ad:
         45:e3:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:29:52 2025 by rpki-client