Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa
File:                     e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa (raw, json)
Hash identifier:          nyh56gz4eZn7On2T+ZYr6xu9BtwlUY0jsVsBUC9Xij4=
Subject key identifier:   84:A3:51:6E:3C:ED:5B:4B:5F:A4:E7:33:F6:5C:D3:F8:6F:AB:E8:54
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584AD3A11701633B1D854AE5E1E0
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     33182
IP address blocks:        98.142.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:17:01:63:3b:1d:85:4a:e5:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=3dd55825-4023-4dd6-9cf4-bbd3d1b91871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:05:28:64:01:d7:15:1d:82:36:ac:20:1d:
                    aa:98:10:7b:79:30:08:98:d4:69:3d:98:cd:7e:95:
                    e5:b3:d3:8b:08:39:03:db:c5:9c:d1:85:92:91:16:
                    95:7b:47:26:d3:b4:fe:5f:de:e2:86:f7:33:5e:1c:
                    c7:e9:ba:80:c1:8c:c9:68:ad:61:02:7b:c1:76:f7:
                    cc:b0:ee:42:fa:d2:bc:85:a1:95:13:1b:a8:46:91:
                    26:00:5d:2e:c0:e8:fb:54:a4:cd:86:fd:0c:62:47:
                    14:38:e2:c7:1a:cc:8e:fa:5a:84:09:47:a9:0e:89:
                    e6:61:46:2b:c9:5d:e7:5a:9b:9f:91:c6:01:6d:35:
                    a1:bd:71:43:9d:48:6e:b7:51:bb:aa:d9:77:9a:ae:
                    49:4e:8a:7b:1f:5a:30:9b:84:af:16:72:35:f3:41:
                    53:d5:62:28:fc:0d:9e:70:22:ca:8d:65:08:fa:5c:
                    d8:0d:8a:ac:f6:cc:ed:67:d8:2e:fd:95:70:9e:0e:
                    5f:49:24:5c:57:ff:68:b8:a9:2a:fe:43:f2:f5:50:
                    3c:61:67:2f:76:d7:84:50:44:dc:ce:fa:c1:ff:61:
                    7a:1b:56:ff:e0:57:d4:10:64:68:25:7e:3a:08:6a:
                    7e:ae:ac:28:2b:d5:44:0f:74:c1:e7:27:92:d5:62:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:51:6E:3C:ED:5B:4B:5F:A4:E7:33:F6:5C:D3:F8:6F:AB:E8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:52:54:bf:1f:97:fa:83:75:2a:9f:54:fd:e6:d2:bc:8e:a7:
         f0:10:f9:6d:72:89:75:f0:c4:8e:e3:01:2d:68:7c:7d:46:57:
         85:72:93:4c:e2:f4:87:e9:fa:1f:f3:4e:99:cf:d9:2a:69:33:
         d8:d6:d7:51:e8:f2:41:b7:b0:bc:22:7d:f0:a9:ed:18:6c:ab:
         42:e4:2e:ec:8d:9c:7a:66:d0:c2:c8:b2:13:3b:01:ea:13:22:
         37:14:6f:2e:a0:a6:8c:17:a2:64:4a:04:14:83:63:33:df:70:
         b1:35:24:a7:62:e5:e6:5d:85:25:09:c3:83:0b:75:b4:54:0f:
         5e:ef:fc:ee:9d:85:b9:c8:80:c4:4b:33:d5:ae:49:4a:13:17:
         64:da:de:3c:4f:0b:b5:3f:11:d4:e9:26:fe:fe:0f:84:74:e1:
         ad:27:fe:22:b0:67:ae:14:21:92:f1:71:28:b7:e8:06:ee:a0:
         20:db:ac:0f:af:79:66:dc:fc:5d:eb:c4:a5:02:67:6a:86:66:
         f1:39:9c:a9:e9:a5:14:3d:6a:44:00:d0:76:bb:10:30:1f:3b:
         e3:dd:f4:6d:b5:3d:71:a2:0e:39:0a:82:14:ae:f9:0a:85:c3:
         4c:8c:82:03:30:61:a6:eb:60:74:b9:5b:30:1f:40:dc:4a:6f:
         90:46:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:23 2025 by rpki-client