Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa
File:                     3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa (raw, json)
Hash identifier:          /BK/i7TjUXAyd+k4UekYpWW3ZpbgTweecCGolZq/Hh0=
Subject key identifier:   B8:78:E0:29:28:1A:21:40:79:61:A3:FB:C5:28:1B:98:D3:FC:14:8E
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B276178D655D2DCD83D10B500
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     32133
IP address blocks:        64.98.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:78:d6:55:d2:dc:d8:3d:10:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=313ebc9d-d65f-494d-9838-3a743b18cd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:aa:14:7d:32:39:fe:3d:8e:f1:c2:c6:8c:
                    3f:1e:8d:2a:28:09:5a:5b:92:1a:a6:b0:ff:ca:dd:
                    37:76:c4:e6:65:94:81:b9:b9:c2:ee:4a:81:ba:ca:
                    77:ab:31:d9:38:59:28:23:20:b6:1d:15:91:76:49:
                    3c:12:db:af:e4:7f:1d:24:f8:1e:fc:0b:63:86:ce:
                    40:e6:e8:86:b3:a9:7d:16:35:42:68:7a:68:12:81:
                    b1:98:11:92:3c:8e:61:bd:a5:8e:2e:f1:1f:88:01:
                    fd:5b:1f:f6:81:ce:c6:19:cf:4d:ad:a7:1a:b4:f4:
                    df:98:c5:31:21:99:f3:48:74:1d:88:c6:6a:c0:c7:
                    95:95:e2:47:52:32:50:ec:b5:ec:26:25:6f:55:9d:
                    b9:38:21:1e:cc:e7:59:22:87:a1:62:fa:1c:86:0d:
                    1c:89:d3:06:d0:27:08:71:e9:7b:4e:78:8d:3c:5a:
                    ba:c1:eb:25:73:63:9f:f9:9b:e6:e7:45:e8:7e:64:
                    2a:d0:79:b5:2a:57:9d:01:10:c2:5a:d0:99:ef:de:
                    e8:6d:89:0b:7f:2b:7e:59:b4:02:a9:b9:ef:6c:46:
                    75:2a:04:6a:08:6f:84:d6:9f:93:57:09:5e:dc:b4:
                    3f:5b:ac:c8:3b:62:9b:b4:51:10:62:d9:27:39:21:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:78:E0:29:28:1A:21:40:79:61:A3:FB:C5:28:1B:98:D3:FC:14:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:00:c3:dd:28:e3:77:34:d2:67:54:b3:9f:44:bf:51:98:
         db:5e:f2:23:d7:55:53:94:d8:08:d4:05:df:f8:cc:8c:bd:3f:
         49:40:d4:aa:ce:19:b9:32:e8:8b:44:ac:63:86:f1:e0:46:ae:
         cc:63:b9:d6:2d:ba:20:b7:a9:ee:0f:a5:71:8e:50:8b:29:16:
         b8:cb:81:e6:47:02:dc:88:d0:7c:b7:7f:e0:46:52:54:f8:4e:
         71:70:da:66:14:96:cc:19:e2:33:cd:7e:d2:85:09:fa:f0:6e:
         d9:90:c9:a9:28:47:58:80:6e:75:b0:ab:18:c6:d7:76:65:9a:
         95:e2:90:fb:d0:c2:78:4e:1c:dc:98:9c:61:e8:32:68:ba:ba:
         a4:81:e8:87:92:c5:61:16:de:35:7b:7c:20:51:80:fb:be:af:
         ad:7d:da:7e:d7:a6:92:db:a6:55:33:c3:2f:43:cd:98:36:2e:
         bc:30:76:cc:66:54:1d:ea:c1:1b:dc:22:ad:c8:38:ac:46:6b:
         34:eb:bc:7f:b8:55:e3:8a:ac:a0:7a:73:d8:1c:93:2a:5b:a4:
         68:35:1a:3d:67:f6:ee:1b:0c:f6:4d:31:a3:84:a7:ad:92:08:
         23:75:bb:e0:9f:f8:e6:a1:15:02:ac:3b:e4:a4:c0:42:5a:88:
         43:68:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:12:31 2025 by rpki-client