Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa
File:                     56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa (raw, json)
Hash identifier:          AYlUIqysm5oBoQBRGXbCQ6iYvq9Ka1j0cC3I4UlRz40=
Subject key identifier:   CD:2C:5C:67:99:5F:C0:92:DC:B9:C8:19:C0:E3:F0:72:CF:C1:1C:48
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B2066D736B2D4B8FB58ACB780
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        98.159.40.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d7:36:b2:d4:b8:fb:58:ac:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=908cad6c-9ca6-4071-8a26-bba9cc507970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:9b:d2:ea:31:b9:4b:73:0a:53:8a:79:99:
                    ea:cf:f2:c3:f8:16:ff:33:9a:e1:2b:40:f0:da:69:
                    ad:b8:19:67:aa:9f:67:83:1f:30:d0:64:ac:9d:39:
                    eb:4a:3e:17:1f:a8:e7:51:a8:fe:20:f5:a7:f2:5a:
                    9c:bf:6a:94:46:da:25:50:24:c6:a2:b5:a5:ca:28:
                    17:33:9b:fe:2b:b0:09:05:53:40:11:89:7e:b9:49:
                    1b:71:38:78:9d:97:70:93:7f:96:9d:5f:73:6d:75:
                    41:68:9e:29:c7:cb:e2:f1:39:3d:08:bf:99:cc:32:
                    05:f9:c7:21:6d:5e:a0:2f:d6:36:34:a7:2f:83:cd:
                    7c:35:22:2c:86:ba:e8:e5:a6:ce:25:61:eb:d4:d8:
                    41:5d:6c:e4:86:73:51:b1:af:26:60:d8:b5:57:ec:
                    7d:fc:3a:00:b8:47:2e:31:0d:c6:48:12:9a:6d:b0:
                    99:c2:81:2b:c2:9a:61:ef:b5:9d:94:90:d1:b9:e5:
                    11:0e:b0:a8:70:60:5b:e3:58:3c:8c:4b:7f:d4:ec:
                    a0:1e:e1:44:3e:55:63:a4:22:15:5b:20:80:c0:4e:
                    7f:4d:06:4e:4c:8f:45:e9:88:e7:7a:83:4e:3c:97:
                    9c:fd:5f:75:24:dd:28:f8:2b:5b:d1:0c:11:12:48:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2C:5C:67:99:5F:C0:92:DC:B9:C8:19:C0:E3:F0:72:CF:C1:1C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.40.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:32:43:02:69:be:d5:50:af:c9:61:1a:8e:c1:bc:fb:ff:
         2d:43:52:68:47:4a:a0:9f:0a:51:cb:09:b9:83:1b:92:c6:63:
         e2:0a:e8:2b:e3:35:1d:b5:a7:2c:55:46:af:a6:64:0d:1b:fc:
         9d:55:5c:2c:f9:4c:fc:69:1d:c1:4d:21:c2:22:e4:00:9b:17:
         2d:cf:8b:75:80:b5:dd:11:ff:5b:0e:ac:e7:2a:08:2c:82:7b:
         1e:33:49:21:c9:e8:b5:06:64:e9:c6:53:c1:6a:e8:1e:37:82:
         0d:d7:06:6c:08:8e:d2:a6:ca:b8:73:66:5a:ac:4a:37:b0:36:
         a9:21:95:18:98:4f:85:e6:c3:2b:d2:84:c5:da:8c:88:fa:9e:
         42:21:8f:e3:1f:9f:7e:e9:80:90:7e:02:b9:f3:27:2e:dc:1d:
         34:15:53:9a:3b:04:4c:cd:5a:cf:31:12:0c:de:ba:ab:51:c6:
         af:28:34:70:33:e2:e7:38:d1:71:38:01:b2:1e:58:0d:9d:fb:
         02:af:86:fc:a8:9e:56:18:df:f0:70:9d:6b:1a:39:1c:c6:72:
         9d:62:eb:ed:e4:64:27:f7:8c:0c:99:f3:68:36:48:a9:30:c7:
         03:81:55:1d:01:c8:42:10:f5:8f:b5:9d:3b:04:58:84:b3:41:
         bc:85:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:10:47 2025 by rpki-client