Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa
File:                     d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa (raw, json)
Hash identifier:          9vIWiOmUViio0aLvwFKaeIysT/ksgLpMWvEJXhMrTFY=
Subject key identifier:   46:11:3F:71:C0:4B:7B:FD:8E:14:C3:50:AB:59:7B:AB:EB:30:CE:B0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A3FAADBB992D211083C46BD40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     401398
IP address blocks:        198.89.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:db:b9:92:d2:11:08:3c:46:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=366fcc65-945f-42e5-a642-b637ec57002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:97:83:ee:63:5a:8d:37:91:03:6c:16:45:
                    c4:76:c3:be:cc:44:a2:ea:30:2b:ca:01:21:a3:91:
                    f4:0b:c5:28:d6:56:48:06:65:ab:7e:57:22:1b:c1:
                    39:dd:c3:52:5b:b1:25:e7:77:65:66:5a:08:e0:e8:
                    61:eb:4f:95:88:2a:96:72:49:62:09:7d:c7:e2:c0:
                    e7:be:9e:37:f1:c1:55:27:0d:f3:c3:17:d7:58:71:
                    b0:b1:f3:e6:64:bb:6f:35:58:76:3a:52:78:4b:77:
                    0b:dc:15:96:ae:b5:57:87:fe:d2:15:ad:93:ed:79:
                    38:b9:ed:5e:23:7d:d1:8d:4c:33:e5:a4:8b:37:3f:
                    77:4b:78:d3:6d:8c:9c:f0:35:6d:64:c1:9e:17:ab:
                    8e:e5:d6:92:b3:22:79:1f:e0:b3:75:c3:c9:1f:83:
                    0e:1c:a7:9d:90:73:31:75:5a:7a:f5:2b:2b:51:cf:
                    1b:01:f7:70:48:b0:a4:15:cf:19:29:4a:d2:31:2f:
                    35:3b:93:95:28:60:b7:63:91:80:ef:19:db:7d:06:
                    9f:32:07:ea:83:2c:6d:ce:4b:af:9d:4b:a6:ca:7e:
                    22:87:44:c0:96:df:cd:f0:a2:61:12:0e:9f:ab:88:
                    b8:4f:a4:89:90:30:04:47:27:c8:db:99:17:5b:7d:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:3F:71:C0:4B:7B:FD:8E:14:C3:50:AB:59:7B:AB:EB:30:CE:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d4a11e7a-87a7-3259-b5f8-0d98a7c5cd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:95:f4:d3:4a:24:30:10:d5:80:94:1b:44:68:ed:dd:5a:
         24:32:45:ae:55:2a:86:c4:dc:cc:d9:0f:a7:de:d5:8e:e9:de:
         7a:5e:5b:c8:9c:07:01:a8:0f:9b:6d:91:49:a4:76:1d:10:60:
         7b:b3:19:56:0f:f0:2e:59:e9:bd:64:59:95:36:ad:49:d9:a9:
         0a:d3:51:4c:e2:9d:4c:ec:51:2e:85:50:f1:dc:c2:50:0b:e4:
         bc:8a:4a:6d:14:85:75:7b:37:47:38:ec:c3:f5:78:4f:ba:c6:
         09:11:51:ea:df:c6:19:0c:d4:ce:a7:c3:91:c5:42:7d:63:68:
         34:14:2f:82:28:a7:bb:f0:99:23:42:d2:87:95:54:d4:0d:a1:
         e0:91:a1:b5:a8:ee:05:79:ba:50:60:e9:ad:92:cd:4a:34:a0:
         56:60:c0:88:95:e6:f6:61:d6:8f:b8:21:4d:d7:a6:4c:a1:4b:
         ab:75:22:82:4b:a8:d9:cf:98:86:67:be:4b:6f:aa:25:d5:29:
         17:d2:f1:07:63:d9:4a:c4:09:fa:dc:27:e3:47:5d:ba:8a:a8:
         a9:d5:00:9b:bc:cb:6b:90:aa:f7:ad:b6:f0:67:d7:dd:98:af:
         8d:25:06:ed:9a:e0:8e:d4:a3:aa:63:55:63:ab:39:d6:3f:01:
         1a:ae:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:38 2025 by rpki-client