Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
File:                     e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa (raw, json)
Hash identifier:          4jYJeZ/TgQYXjLsizvsqu/w1JPElndHVz4UpVC1Q61I=
Subject key identifier:   E1:A3:CA:5A:4E:3B:88:CD:47:B6:35:22:9F:F8:15:92:15:40:A6:8C
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B27617A72E0B9F87D7EF61400
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     32133
IP address blocks:        64.98.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:7a:72:e0:b9:f8:7d:7e:f6:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=259cebe8-aba0-44e4-ad99-157b3a5dd77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:6f:ae:77:b7:8d:70:50:38:3f:e7:e7:03:
                    e6:e1:48:16:53:86:58:f8:54:3b:78:18:bd:b9:d4:
                    41:ef:ae:ea:db:ee:85:d1:fb:af:0b:bf:df:52:d5:
                    14:e2:8e:80:3f:9b:99:62:7f:37:82:3d:34:c7:b7:
                    72:59:c0:a4:44:f7:e2:4c:bb:6f:79:b9:b9:05:d2:
                    c7:20:a3:e2:e7:86:0c:51:09:6b:78:be:45:7b:02:
                    35:a7:11:2c:3f:80:a3:62:84:35:77:0f:e0:8c:df:
                    5f:f1:92:a2:36:cd:25:2a:51:49:cd:0c:57:64:3a:
                    6e:68:63:f3:d6:d0:ef:59:42:4c:e8:c2:4f:3c:4c:
                    dc:d9:4b:f2:f3:70:68:b9:69:10:1c:0c:17:eb:2e:
                    66:cc:ad:4e:85:72:48:0d:c6:d8:42:aa:32:99:86:
                    10:c2:ca:50:b7:61:90:3c:89:38:3b:60:bb:a8:97:
                    76:8c:07:e5:45:f3:a8:ee:dd:52:a8:c0:ac:0e:de:
                    8d:35:27:8f:10:50:57:07:3d:5c:20:9b:f1:2e:76:
                    6e:88:bd:cb:fc:93:7b:97:cf:7f:b7:03:f7:20:3a:
                    6d:1f:5f:b9:1a:a0:11:16:66:76:a7:9c:57:dd:0c:
                    01:86:53:2a:a6:a3:cc:16:5c:84:0d:4d:d3:73:f8:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:CA:5A:4E:3B:88:CD:47:B6:35:22:9F:F8:15:92:15:40:A6:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:00:94:6d:c8:0e:99:2b:31:72:b5:83:97:4e:b4:5d:39:
         c6:26:23:1b:3b:47:a5:e2:17:12:81:20:06:cc:ba:a2:ca:90:
         ce:ef:0b:9b:4b:3a:21:b6:8b:d3:aa:f2:f5:a4:81:16:ea:4a:
         78:93:00:a6:c1:51:81:ed:bd:ce:d2:92:35:b2:48:34:d4:8f:
         59:f4:27:35:aa:0d:0c:03:a1:68:9d:83:79:6b:4e:5e:5f:ab:
         a4:6a:2c:4d:bd:8f:9a:85:e9:dd:48:5a:64:57:3b:ad:c5:5f:
         f5:a5:4b:5c:05:ac:f4:e8:2c:db:40:82:41:ea:4b:18:3a:2c:
         f1:a6:57:72:d2:51:d3:31:20:62:e8:37:8e:82:7b:f5:b2:2e:
         5a:0e:9d:a9:70:b1:ed:55:5d:a6:6e:17:c2:2f:19:50:35:68:
         42:75:85:39:aa:25:48:93:2c:0a:1e:ce:0c:dc:2d:39:0d:23:
         77:bb:3a:35:3c:55:87:fd:50:59:1d:9d:c1:79:b0:87:93:9e:
         c0:83:9b:ab:a2:fd:0f:e1:79:4f:aa:1f:90:a8:65:85:93:2d:
         34:0e:0c:30:38:16:7d:68:89:40:12:35:c4:f2:63:28:7a:c7:
         f9:30:15:ea:17:05:34:c6:90:4d:2a:44:1b:b7:84:87:2b:10:
         f3:0c:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:21 2025 by rpki-client