Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa
File:                     9b36d67c-d771-3dd9-ab4a-67645e996e77.roa (raw, json)
Hash identifier:          pGUkl84xiHvWQNfMXmwianIVIy7zLgAGhUqXMXIt7JI=
Subject key identifier:   75:4B:6A:92:AB:73:E5:E0:71:98:DA:42:7E:72:A3:9C:A8:71:59:A8
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584B2496CF4A324C4D422709F200
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     53667
IP address blocks:        23.183.80.0/22 maxlen: 24
                          104.244.72.0/21 maxlen: 24
                          107.189.0.0/19 maxlen: 24
                          162.244.92.0/22 maxlen: 24
                          162.245.0.0/21 maxlen: 24
                          198.98.48.0/20 maxlen: 24
                          198.251.80.0/20 maxlen: 24
                          199.19.224.0/22 maxlen: 24
                          205.185.112.0/20 maxlen: 24
                          209.141.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cf:4a:32:4c:4d:42:27:09:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=33037975-7a92-4e8d-95b3-bb2403384caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:78:2b:62:66:45:7c:64:2e:fc:ce:db:0f:
                    16:58:7b:cd:92:6e:cc:fe:0b:d1:14:e5:c2:a8:51:
                    53:79:51:85:15:f9:cf:0d:eb:e7:cb:ab:ca:b6:8d:
                    fa:3d:3d:4f:5f:78:13:be:16:29:4c:99:a5:8a:ae:
                    3b:92:fb:50:d6:8c:18:38:cc:72:83:1f:66:45:99:
                    ab:90:4e:a4:87:92:8d:7c:70:22:18:db:f0:eb:8b:
                    11:0b:5d:5d:2e:a9:e6:cd:f0:6d:32:fe:3c:ca:23:
                    d3:25:9f:09:ca:db:58:1c:81:fb:75:8a:b8:b2:6b:
                    a2:98:10:70:e1:81:a8:82:31:dd:1c:9e:99:fa:29:
                    f7:8f:46:e6:22:4a:36:05:26:3e:5d:a4:9e:0a:6f:
                    3c:56:01:4b:1e:47:d6:f7:ff:07:87:cc:86:0b:cb:
                    24:24:88:0e:06:76:b5:90:f6:86:c4:4a:42:0c:84:
                    04:1d:94:9c:bb:35:3e:80:fe:62:ee:6d:b3:42:44:
                    12:a1:ce:1e:f5:17:d8:f4:5f:95:10:2d:85:e3:cb:
                    c1:be:70:72:af:50:aa:29:73:51:78:99:75:9a:f6:
                    d4:ff:ab:11:df:53:4c:93:98:63:be:c8:d0:8c:ac:
                    b3:e8:ad:07:e6:5d:2a:4b:1b:dc:a6:24:65:0b:8c:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:6A:92:AB:73:E5:E0:71:98:DA:42:7E:72:A3:9C:A8:71:59:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.80.0/22
                  104.244.72.0/21
                  107.189.0.0/19
                  162.244.92.0/22
                  162.245.0.0/21
                  198.98.48.0/20
                  198.251.80.0/20
                  199.19.224.0/22
                  205.185.112.0/20
                  209.141.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:a6:84:05:d2:11:33:a1:17:73:3b:d0:2d:cf:c7:0e:ea:
         8d:9c:e5:f2:3d:13:60:95:24:47:fb:2a:c0:e3:a8:f9:75:41:
         75:a8:ca:e6:6d:6f:6b:3e:d7:b2:85:8e:3d:4c:87:dc:53:0e:
         88:e6:a5:98:d4:e2:ee:97:f0:d7:33:38:69:47:04:cd:53:d1:
         c7:16:da:60:50:2e:c6:52:da:e8:1d:c8:e6:42:ec:e3:14:93:
         0a:14:6f:2a:82:d0:36:f6:ff:cf:f8:e8:1a:f4:dd:f3:63:80:
         61:7e:5d:9c:08:4f:ba:4f:57:6b:6e:6c:bc:97:14:27:6f:2f:
         72:c1:c6:06:c6:8d:11:b3:91:1f:c1:20:1a:4f:79:4c:25:f0:
         16:ee:8d:5c:68:21:7d:fe:ca:5d:cf:c8:f2:fb:7a:9b:2c:a9:
         62:00:de:cb:31:09:a5:bb:6d:dc:e3:8d:cf:95:c4:36:1d:1a:
         f4:1e:e2:b2:ec:7d:81:08:6b:c6:44:7a:37:ba:38:6c:a0:c3:
         25:be:84:a7:20:21:f1:7a:34:ea:4b:ea:5a:b9:39:d6:25:35:
         aa:9f:8f:fe:32:2b:2c:d4:ae:86:d0:e7:74:e2:cd:0f:f1:e3:
         be:b1:b4:61:fa:e9:80:0b:a3:6e:71:81:1b:1b:71:4e:78:7d:
         57:9d:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:28 2025 by rpki-client