Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b8647f32-8c49-3e20-80e7-d36a19d8299f.roa
File:                     b8647f32-8c49-3e20-80e7-d36a19d8299f.roa (raw, json)
Hash identifier:          umthCZ5IHANonWx+7lGZno7pOZ1hbt2HjVPFlbD4LAs=
Subject key identifier:   1A:0D:B1:00:2D:D5:84:86:83:DE:C2:9E:15:EC:46:46:E7:B7:7C:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0D820FE812F150747A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b8647f32-8c49-3e20-80e7-d36a19d8299f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     19115
IP address blocks:        98.8.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0d:82:0f:e8:12:f1:50:74:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=db2af7f9-9b52-41ee-982e-d54ebe8c8c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:9f:bf:50:41:ec:cd:81:8b:62:7c:19:53:
                    92:60:d0:1d:d6:eb:a0:01:e9:46:ab:75:e9:2b:3e:
                    93:26:b0:f0:b4:d3:5e:3e:ed:21:30:b9:8f:c2:d1:
                    16:5f:a1:5b:49:74:1c:fe:f9:8e:2f:3c:9b:9c:89:
                    a6:b1:a9:46:30:d1:e2:91:a6:16:eb:a9:e6:f4:cb:
                    c4:9e:d5:15:1b:4a:39:a4:c1:7a:f8:1c:80:c9:c4:
                    4f:72:45:b3:3f:29:0f:81:e6:9c:60:ef:9c:2b:94:
                    b6:2a:97:8a:97:af:cd:69:cc:5b:01:7f:46:7e:7a:
                    da:a5:3d:61:fd:00:b5:c0:54:35:1b:a4:52:85:dd:
                    71:d4:e7:67:7e:93:ac:66:d2:97:86:85:77:79:67:
                    85:64:20:f1:fe:02:70:65:1f:43:dc:5a:65:2a:76:
                    99:c0:1b:5d:b9:07:4a:b4:ab:5c:22:3f:3b:ae:48:
                    dc:0b:69:c8:11:87:b3:10:3a:71:c6:92:8b:38:bf:
                    de:e7:01:c4:ea:d7:46:40:40:e3:0b:70:1d:ba:8b:
                    50:54:f5:80:e4:20:d2:29:ee:c3:7a:62:53:a3:fc:
                    df:4a:43:b4:a2:25:66:e6:4f:d6:2f:e2:c1:b5:b6:
                    f4:bd:e7:a2:24:93:a1:58:ce:c6:de:83:59:98:84:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:B1:00:2D:D5:84:86:83:DE:C2:9E:15:EC:46:46:E7:B7:7C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b8647f32-8c49-3e20-80e7-d36a19d8299f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:db:a4:d0:13:9c:d9:ec:a7:81:e8:d9:c6:54:c6:f0:53:b1:
         5d:22:32:f4:f9:e2:e0:f6:a2:77:ad:e8:ce:6e:b4:3c:a6:4f:
         de:fb:cb:5b:14:51:8a:20:e8:33:a9:9b:c9:71:46:e6:56:e0:
         64:b0:83:f8:18:78:72:c2:be:cd:56:40:e6:a4:65:37:e9:a7:
         42:e8:24:e6:17:dd:b6:47:bf:9f:cb:91:58:83:80:cf:75:e4:
         36:81:ff:d1:2c:7b:63:14:ed:da:d0:82:37:9c:21:09:f5:17:
         ea:62:b2:b8:97:c4:c7:89:9a:03:ea:d3:37:69:c1:2a:52:7d:
         0a:9b:52:3d:be:5d:c3:9f:da:ed:bb:f1:9c:1b:24:28:ad:d8:
         c4:a6:05:a6:4c:95:6a:04:39:89:62:31:f0:d8:6a:e3:ca:9d:
         8a:85:94:33:98:d6:8d:b3:d6:87:1b:f8:0a:3a:6a:8b:72:0c:
         16:ce:a2:41:00:d7:10:ef:43:2c:5e:1e:ac:17:fd:d1:18:49:
         3b:e2:bd:14:fd:9a:4e:88:21:c6:7a:ab:19:9c:f8:b0:98:5a:
         9c:c8:6a:9f:c5:ba:14:e6:01:6b:81:70:d7:4f:5d:19:8d:ba:
         c5:a0:c8:e7:de:ab:a6:c3:f4:57:b7:85:78:b5:f1:03:58:f0:
         d1:26:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:45 2025 by rpki-client