Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d4a2d31-1071-3052-b18a-75a9e6a25d53.roa
File:                     7d4a2d31-1071-3052-b18a-75a9e6a25d53.roa (raw, json)
Hash identifier:          T7MUx4Aqj+xPYtePCQCyPb+vbqEU+YASmpuFoWZ1p00=
Subject key identifier:   61:88:96:97:4F:CF:81:2A:71:FE:55:69:8B:46:48:50:DE:07:A1:F1
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B2066D7206CFCAAAECA8E5128
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d4a2d31-1071-3052-b18a-75a9e6a25d53.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        98.159.40.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d7:20:6c:fc:aa:ae:ca:8e:51:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=00b31db4-6f29-4c88-b1e7-c2f6c061ff62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:15:a2:69:62:2a:a4:c4:a8:ba:2e:65:c8:
                    a9:6b:67:a7:a3:48:8a:50:ba:f5:0c:e1:8a:4d:8d:
                    7b:32:40:ca:18:f5:37:2f:6e:4f:2e:85:9b:4b:b7:
                    94:c4:ca:33:81:1f:d7:7b:60:ba:fb:4e:11:0c:1c:
                    17:e5:b7:4b:5c:71:ad:16:6e:c4:34:5c:cb:21:4c:
                    48:49:b2:1f:d9:94:27:42:31:ad:59:3b:51:7b:ac:
                    73:2e:cd:c3:83:8b:2e:12:01:48:94:fe:75:70:c6:
                    40:db:52:1c:26:09:58:95:78:14:9b:a3:4a:bc:cb:
                    6b:19:2f:25:8a:36:e2:6c:5a:a5:4d:61:58:5c:77:
                    44:a3:45:7e:aa:04:5c:58:25:25:e4:80:48:92:d0:
                    83:fe:5b:7e:f9:9b:e9:7b:a5:c6:8d:0b:89:03:57:
                    34:73:c8:f0:43:3d:4a:8e:d9:f8:e4:3b:f8:b2:10:
                    3d:1e:43:41:4d:34:7a:2c:d1:b8:8f:04:3d:f7:a4:
                    0f:fa:53:6a:c2:99:34:2b:21:25:1e:43:c1:7b:67:
                    dc:21:e2:2a:9d:5c:83:e0:49:90:e9:ba:27:84:1d:
                    fa:29:35:0a:04:91:30:70:86:0e:c8:d6:89:3a:2d:
                    d3:c2:3b:db:b4:cb:3b:cb:79:ef:7a:9e:9e:a4:0e:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:88:96:97:4F:CF:81:2A:71:FE:55:69:8B:46:48:50:DE:07:A1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d4a2d31-1071-3052-b18a-75a9e6a25d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.40.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:f1:13:e1:96:96:d2:48:b9:fd:18:bc:8c:80:30:94:1b:
         3d:eb:d2:d4:06:20:0f:8a:26:fa:75:c4:8c:80:5a:6c:7e:f0:
         2f:7c:66:5f:bb:40:d8:63:3d:16:1e:ff:ca:75:2c:21:c0:74:
         f2:06:36:dd:0e:49:67:fd:7c:7d:0f:5e:c8:8e:9d:3d:04:9d:
         2b:76:92:aa:a6:25:bc:53:2b:c5:ef:57:3d:3b:3c:61:b3:29:
         58:1a:38:05:c7:ad:2f:5c:df:c6:78:15:c7:00:69:2e:e3:02:
         21:57:1c:ab:7c:00:06:92:da:b5:05:aa:21:23:b8:7d:a3:5e:
         7b:39:89:0f:70:e0:ef:9c:3f:5a:54:43:d3:4c:de:16:2f:45:
         e0:02:0b:8b:7c:1f:10:be:d1:dc:06:a6:42:ba:f7:65:3f:32:
         b3:63:8b:f2:65:86:87:d2:d9:10:98:9d:b9:dd:7a:18:4a:bf:
         bb:d4:d8:00:24:3d:8d:6d:0b:bf:b9:c8:65:45:06:f0:33:d3:
         14:6d:66:e4:78:7c:d1:ed:32:3a:c1:bd:68:f6:22:94:2e:5c:
         d7:34:ee:81:41:db:0f:35:6c:f3:6d:3d:17:ba:e9:ce:f3:de:
         97:85:18:e1:3b:0b:bc:a7:f6:c6:70:f6:20:f9:c1:d4:4d:88:
         a3:11:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:15:41 2025 by rpki-client