Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/59e57147-9f49-38b2-8cab-071b47910cf4.roa
File:                     59e57147-9f49-38b2-8cab-071b47910cf4.roa (raw, json)
Hash identifier:          srNdK9EbAYhg8834UCGTL7i5g2TNXJUUmzeS3NeNaDo=
Subject key identifier:   D1:AB:DB:69:F8:FD:8F:B1:13:10:9C:C5:4D:41:AB:C8:CD:3A:A1:5C
Certificate issuer:       /CN=98e62aba-8b05-4785-a899-f75688a272a5
Certificate serial:       010D0C9F4328584A4C3B046D870BCED97478DC00
Authority key identifier: 74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/59e57147-9f49-38b2-8cab-071b47910cf4.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     23532
IP address blocks:        199.204.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:04:6d:87:0b:ce:d9:74:78:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e62aba-8b05-4785-a899-f75688a272a5
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=5168c346-1e64-49c9-8408-c08105b9a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:8a:fe:5b:69:c6:84:37:a3:58:7e:ce:53:
                    e3:20:a1:bc:bf:97:23:2b:10:3d:d2:08:c6:6f:1d:
                    b5:d7:25:cf:d2:31:25:13:e1:2c:82:a0:ff:ee:bd:
                    d7:9b:60:5e:2d:0e:08:df:e8:61:7a:20:13:a6:ed:
                    bd:eb:a0:c7:e1:e5:72:17:46:ae:d9:02:d8:06:52:
                    da:1c:62:09:e0:bc:ed:dc:38:57:55:70:94:f3:74:
                    f4:b1:07:b8:21:cb:54:b2:16:8d:c4:cd:e7:5d:02:
                    c9:0a:ed:b7:0a:a7:b5:06:4e:25:30:33:a9:99:4e:
                    64:f2:8d:25:77:3f:81:9b:f8:b4:a7:0d:d8:d0:4b:
                    9a:02:0e:30:72:e4:dd:1c:0f:8d:6d:56:58:2d:ca:
                    cc:f7:e1:31:bf:4a:47:94:1f:8c:44:88:f4:ae:3a:
                    9b:aa:ec:88:6b:65:30:85:0d:17:bb:a7:2a:9b:50:
                    db:b4:d8:85:d7:b7:88:13:c3:87:b8:63:97:18:97:
                    51:99:77:1f:3b:ea:ce:ea:5d:1d:be:a1:40:06:af:
                    dc:9d:3b:4d:06:98:5a:98:43:73:4f:3c:78:b7:e3:
                    8d:2f:f8:82:a1:ce:0a:55:cb:84:3d:97:eb:31:8d:
                    27:5b:8c:0e:42:e3:e0:ab:41:8c:67:00:6a:99:20:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AB:DB:69:F8:FD:8F:B1:13:10:9C:C5:4D:41:AB:C8:CD:3A:A1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/59e57147-9f49-38b2-8cab-071b47910cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl

            X509v3 Authority Key Identifier:
                keyid:74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:31:cf:db:73:cb:dd:f8:a2:f1:f2:ab:51:90:df:e7:76:51:
         ad:6c:5a:68:8c:43:9c:3b:7b:5f:d8:60:1f:50:0c:d5:78:e8:
         da:dd:af:eb:46:db:9a:06:d1:ac:7e:cc:d4:52:4e:9e:d0:43:
         e6:53:3b:94:0a:54:cb:8d:49:35:f0:01:39:09:28:fe:b0:c9:
         9c:a1:fe:20:36:c7:bc:1d:09:79:e0:06:0f:1f:79:17:a2:48:
         75:2b:e0:0e:3d:0c:2b:cf:a2:04:f8:03:a8:f5:f2:2b:78:e9:
         74:67:ad:81:e4:68:0e:86:c0:92:28:a0:ae:18:c7:12:c6:d7:
         57:83:d6:4b:86:ac:25:4d:bc:4e:2a:05:4f:b4:a8:37:7c:5b:
         bb:b5:eb:ff:17:fc:ce:c0:dd:13:de:27:14:d2:05:8c:fa:a1:
         b6:a9:f4:0d:4e:c7:87:53:2e:88:d0:b7:c4:9a:bd:11:f7:b6:
         a2:48:93:63:d0:82:26:8b:b4:84:08:b2:7d:de:71:fa:78:0d:
         5f:b9:20:95:69:6e:fb:dc:89:b1:4a:6f:7f:63:de:75:91:44:
         01:fa:3e:5b:17:7f:c6:32:5d:e0:19:fd:da:77:34:a6:e0:9e:
         67:9b:8d:4b:04:66:57:b9:e5:83:b1:95:e0:dc:cc:82:aa:0a:
         ff:b2:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:27:50 2025 by rpki-client