Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae5e8f3-66e9-31a9-9d55-6b5b2e59774c.roa
File:                     6ae5e8f3-66e9-31a9-9d55-6b5b2e59774c.roa (raw, json)
Hash identifier:          zV5W1rW5jSYzlBjd9liClRngHs2y3LBOHqPp5yNQ/R8=
Subject key identifier:   1C:6D:3D:1B:7F:3B:C5:B6:9D:57:98:28:1C:0A:69:C5:F2:ED:32:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C0E76FB31490DCD55CDC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae5e8f3-66e9-31a9-9d55-6b5b2e59774c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        98.110.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:0e:76:fb:31:49:0d:cd:55:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=433b37b0-940a-499e-a1c0-015b3f037e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:c1:55:4a:1e:65:3d:7c:bb:82:5f:e4:6f:
                    de:4d:d5:69:e3:5d:78:08:c0:65:5b:7f:6f:55:f9:
                    62:a3:35:4f:5a:24:35:76:48:36:3e:d8:87:49:0c:
                    47:b1:72:86:11:e2:89:d9:28:4c:54:9f:9c:2d:b4:
                    03:5a:88:eb:0a:e2:81:48:90:1b:d9:51:ad:9a:d1:
                    63:5e:be:dc:1c:c2:68:1e:ed:7e:eb:55:b1:1d:8f:
                    44:be:b1:b3:e1:9d:f8:ed:78:41:9a:33:0d:88:c0:
                    bd:d8:9d:32:d7:67:3f:03:41:c6:37:86:1e:55:b5:
                    bc:41:9b:38:ef:15:c7:2f:84:a7:29:02:81:aa:4a:
                    ea:b8:79:20:b1:3e:d2:a7:65:ae:d3:18:9e:98:6d:
                    3a:94:9c:df:9e:db:47:bb:86:dc:bd:a9:d6:eb:e4:
                    36:e0:5d:46:97:7d:ab:4f:4c:dd:f6:f0:fa:eb:ce:
                    b5:1a:7c:fe:bc:9d:a7:fb:55:e6:38:72:29:f0:97:
                    d5:5b:34:32:c0:51:9d:6d:e3:23:e5:5a:1b:03:94:
                    62:e3:1a:5b:dd:3b:dc:82:9d:46:fe:25:8c:6c:e7:
                    9a:ee:bc:4c:e1:c7:e7:b0:6c:25:82:19:c7:ba:2c:
                    9e:4d:d1:16:65:82:53:0c:c1:d6:de:f7:9c:c4:2f:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:3D:1B:7F:3B:C5:B6:9D:57:98:28:1C:0A:69:C5:F2:ED:32:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae5e8f3-66e9-31a9-9d55-6b5b2e59774c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.110.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:22:2e:01:c3:b1:4a:b4:98:57:4b:87:e9:d6:25:55:1a:
         3b:b6:28:04:c2:b4:85:fc:f8:37:b8:b0:3c:e0:d8:6b:3d:65:
         4c:ba:78:72:74:e3:fe:30:6f:a6:10:4a:c6:b2:9b:22:2e:3c:
         a6:db:c1:85:42:86:42:d6:5b:b3:db:f4:8c:e2:40:0a:04:9d:
         23:5f:e3:72:78:2a:7b:24:1f:c3:c7:10:56:f1:ae:b2:cd:f0:
         ca:50:6c:d0:63:94:88:f3:57:5c:fb:78:aa:54:7c:26:2a:fc:
         6d:d6:09:44:4d:d3:da:7a:c8:e0:ec:98:74:ab:05:32:4a:89:
         c6:e3:2c:f4:28:07:92:27:e0:8f:14:ec:6b:f2:5d:bb:6b:40:
         82:59:67:52:1e:33:96:a0:cd:03:f0:bd:61:5e:00:99:96:d3:
         b5:4d:33:e0:7f:6f:ba:62:99:c9:4c:3e:7e:2f:db:5f:74:51:
         46:33:f8:86:64:7c:24:c8:8f:97:2a:1d:c0:92:41:82:81:a9:
         38:6a:cd:d9:a0:db:27:11:9d:34:39:f6:28:c3:13:81:37:ea:
         15:a8:a0:5b:a4:6a:21:3e:21:7b:56:ae:5b:70:02:07:ff:4f:
         cd:fb:79:01:3c:8a:08:21:2b:4c:f5:07:b9:b5:65:06:0e:03:
         ae:a5:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:02 2025 by rpki-client