Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa
File:                     1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa (raw, json)
Hash identifier:          diJn3uaJXVffdnsz29tzevU5e+tg9c1qhLnbaodYhZY=
Subject key identifier:   76:D1:3B:8E:9C:77:99:D5:A9:C9:8C:60:96:83:4F:9B:19:01:5E:70
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584B0A1158548915D52B3BAD38BC
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     32133
IP address blocks:        98.124.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:58:54:89:15:d5:2b:3b:ad:38:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=117f562f-993c-48d7-8c82-d204f161d7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:26:b4:46:be:77:19:1e:c5:25:2b:95:f1:
                    fb:27:d7:b2:50:34:48:7b:bd:b6:d4:18:95:97:33:
                    55:0d:fb:0b:45:65:40:d2:37:f7:9d:01:b2:fd:d9:
                    b7:99:2e:b8:77:74:81:d4:87:2d:08:e7:22:6a:d7:
                    62:b2:d6:a4:ed:38:49:cc:ec:24:d9:dd:ab:0e:a7:
                    67:9f:19:e9:48:f3:c6:71:64:dd:ef:d6:6f:0d:ba:
                    d1:44:5f:ac:8d:c4:73:63:67:a5:59:e5:fc:4d:ec:
                    bf:5b:ee:57:36:96:b0:54:69:80:3e:2b:6a:ab:e4:
                    3d:c2:d1:dd:13:58:0d:e0:16:10:c5:cc:a0:b1:38:
                    88:ad:f0:67:3e:32:b7:54:c5:85:44:a2:6b:59:e9:
                    80:4a:b4:f7:db:92:78:2e:83:1a:f0:f9:27:74:84:
                    dc:2c:e5:13:eb:90:de:d6:8a:2f:6c:62:f9:81:c2:
                    cb:69:dd:61:e1:02:38:28:2a:eb:b9:e7:be:f3:24:
                    92:48:8d:6a:62:42:6d:72:48:1c:f4:26:4e:f3:cb:
                    ed:b7:d9:46:9f:a7:0c:84:48:de:54:75:60:01:4c:
                    02:f1:01:1e:65:87:68:6c:f1:41:c6:f9:dc:f5:5d:
                    d6:18:e0:3f:4f:fe:c5:6f:41:24:cd:8a:f2:95:b8:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D1:3B:8E:9C:77:99:D5:A9:C9:8C:60:96:83:4F:9B:19:01:5E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/1a6f0efd-e915-3740-aae4-45134d0ac4ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:68:f2:df:50:9b:27:1c:67:0e:c0:69:28:2f:92:e5:ea:d4:
         88:c4:25:86:e4:df:84:9a:7a:83:90:fe:cd:db:81:4e:b8:28:
         e2:ee:75:93:c0:3d:77:a3:0f:0c:3c:61:6d:a6:11:65:5a:c1:
         3c:75:9a:14:8e:a2:88:8b:62:12:af:1a:2e:b6:40:34:87:2a:
         be:29:0e:d0:ad:a0:94:8f:41:39:17:b3:be:2b:f9:3f:2e:24:
         b4:03:27:6a:36:41:51:8c:0b:3a:be:90:81:88:a1:89:66:ed:
         7e:03:5d:f7:e5:f3:f7:90:56:9e:1a:11:d8:18:ba:34:8f:45:
         e4:18:77:6b:43:47:15:b2:38:3d:41:db:8b:d7:c0:81:de:15:
         08:e6:2b:a5:9f:a6:bf:b3:cc:d1:0a:aa:7d:59:2a:83:b3:0d:
         65:04:0c:bc:01:7f:bc:45:aa:8e:4c:4d:a7:ee:2e:6d:cb:8b:
         22:c2:25:21:76:07:78:e2:2f:eb:77:a1:89:0e:41:53:02:6f:
         8a:4f:07:a3:cd:ed:92:dc:7d:48:f6:62:ec:ee:f8:4e:6b:87:
         8b:ee:04:92:01:ae:e1:46:cf:5b:c1:e9:dc:09:6b:8a:fb:41:
         97:8b:43:ba:74:32:b2:0f:86:07:13:79:ad:b5:3f:59:c8:1b:
         e5:2b:ca:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVhUiRXVKzutOLwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MTE3ZjU2MmYtOTkzYy00OGQ3LThjODItZDIwNGYxNjFkN2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTsmtEa+dxkexSUrlfH7J9eyUDRIe7221BiV
lzNVDfsLRWVA0jf3nQGy/dm3mS64d3SB1IctCOciatdistak7ThJzOwk2d2rDqdn
nxnpSPPGcWTd79ZvDbrRRF+sjcRzY2elWeX8Tey/W+5XNpawVGmAPitqq+Q9wtHd
E1gN4BYQxcygsTiIrfBnPjK3VMWFRKJrWemASrT325J4LoMa8PkndITcLOUT65De
1oovbGL5gcLLad1h4QI4KCrruee+8ySSSI1qYkJtckgc9CZO88vtt9lGn6cMhEje
VHVgAUwC8QEeZYdobPFBxvnc9V3WGOA/T/7Fb0EkzYrylbiFjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbRO46cd5nVqcmMYJaDT5sZAV5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvMWE2ZjBlZmQtZTkxNS0z
NzQwLWFhZTQtNDUxMzRkMGFjNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYnzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFo8t9QmyccZw7AaSgvkuXq1IjEJYbk34SaeoOQ/s3bgU64KOLudZPA
PXejDww8YW2mEWVawTx1mhSOooiLYhKvGi62QDSHKr4pDtCtoJSPQTkXs74r+T8u
JLQDJ2o2QVGMCzq+kIGIoYlm7X4DXffl8/eQVp4aEdgYujSPReQYd2tDRxWyOD1B
24vXwIHeFQjmK6Wfpr+zzNEKqn1ZKoOzDWUEDLwBf7xFqo5MTafuLm3LiyLCJSF2
B3jiL+t3oYkOQVMCb4pPB6PN7ZLcfUj2Yuzu+E5rh4vuBJIBruFGz1vB6dwJa4r7
QZeLQ7p0MrIPhgcTea21P1nIG+Uryhg=
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:19 2025 by rpki-client