Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa
File:                     99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa (raw, json)
Hash identifier:          7ifI/VK5wFE78nrjgBjneiB2egqJntF9/PoiY41uCQw=
Subject key identifier:   23:E4:F6:CF:0A:6D:54:9F:54:0A:32:DC:6A:E2:3A:A7:8C:23:C8:97
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584A050A70E0D0CF2DAB1AD77D40
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     174
IP address blocks:        216.98.226.0/24 maxlen: 24
                          216.98.227.0/24 maxlen: 24
                          216.98.228.0/24 maxlen: 24
                          216.98.229.0/24 maxlen: 24
                          216.98.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:70:e0:d0:cf:2d:ab:1a:d7:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=580f4ba0-d89e-40db-bed2-adfcf205cb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:a1:f2:fe:d1:21:c4:29:35:a7:28:61:8e:
                    03:17:f2:82:fa:db:23:05:3c:6d:fd:de:74:3e:c7:
                    e0:cd:4c:99:c8:23:82:e9:fc:a0:d0:a6:da:97:2d:
                    33:e9:e4:f0:95:52:1b:6a:81:98:f9:61:5f:9f:52:
                    44:7f:8e:58:7d:71:5e:ea:96:fb:77:7a:dd:6a:32:
                    33:c2:cc:87:16:06:ee:a9:8a:03:09:55:bd:de:a6:
                    82:ca:1d:29:30:06:4e:96:04:3d:9f:91:36:c6:16:
                    8f:fe:a5:eb:af:bf:4d:c3:83:26:17:a6:39:5f:a1:
                    a5:d8:00:80:df:81:08:15:35:22:4a:68:94:33:f0:
                    d5:fa:e4:4b:91:fe:67:fd:54:d4:b8:8d:0a:d2:dd:
                    6b:79:a0:9e:20:1f:88:e2:b9:a1:60:fe:37:04:e3:
                    2a:41:93:06:0c:4e:92:78:0f:f6:f7:5e:62:20:d3:
                    f0:79:f7:fb:14:94:7c:56:56:57:c4:ce:5e:e1:e8:
                    eb:b2:57:19:40:85:57:0e:dd:a3:66:d1:c4:26:58:
                    6b:4e:e3:42:da:09:81:e6:b8:be:67:18:6f:dd:30:
                    c8:29:18:9e:6f:9a:5d:f4:6b:a0:a3:e4:7f:cf:43:
                    0a:49:c0:38:83:34:a9:ba:88:2d:98:5f:30:33:cf:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E4:F6:CF:0A:6D:54:9F:54:0A:32:DC:6A:E2:3A:A7:8C:23:C8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.226.0-216.98.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:49:7b:e6:7e:f8:61:6d:b3:2a:4a:f3:5a:30:7a:3e:71:95:
         b3:74:fc:98:d4:de:bd:81:84:f6:d8:28:e7:83:24:ef:6a:c1:
         71:3a:b6:1a:ca:98:f0:09:ce:fc:1f:ba:76:c4:e9:c4:19:b7:
         c6:96:a2:d3:f9:89:2f:66:86:c2:59:90:20:32:da:0d:e6:21:
         94:77:87:dc:80:cb:0d:d8:dd:c5:6a:d9:30:72:a0:33:f0:a0:
         d6:5d:0e:fe:aa:27:46:0c:bf:24:33:7e:c8:f1:cf:42:b8:78:
         31:a1:7a:99:f5:dd:d9:e0:0c:2b:7d:8f:db:e5:f1:03:da:13:
         a6:1f:a7:7a:2f:ed:63:83:21:f5:27:4c:fb:6b:43:bf:b4:73:
         00:47:6a:ed:38:ea:50:8b:96:92:37:01:3c:f6:fd:e4:6e:5e:
         a3:16:e3:0d:9f:93:2c:9b:fe:c7:54:02:1d:21:fc:64:e0:02:
         2a:69:89:49:7a:62:39:11:5f:99:57:c1:64:b5:ca:82:45:74:
         ff:38:f0:21:6f:f4:e9:9e:a5:dd:52:15:12:d3:5e:f8:38:b3:
         e4:5d:17:95:90:b5:33:75:e5:b6:15:1e:52:f0:0b:ff:be:1a:
         86:3a:ac:fb:b9:62:b1:6e:e1:04:84:8b:f0:cd:e6:ef:85:36:
         bf:b1:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:45:40 2025 by rpki-client