Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa
File:                     3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa (raw, json)
Hash identifier:          5zx7+A5JpFsOtvC97kF6aDQPMfoV8UqD1UbSPj+m1wA=
Subject key identifier:   6C:E7:CA:B4:86:2E:CE:EC:18:FA:82:C4:4A:A2:18:AA:5E:11:3F:A6
Certificate issuer:       /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial:       010D0C9F4328584B5C6C792CD1359B80A14F7300
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     18013
IP address blocks:        172.98.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:79:2c:d1:35:9b:80:a1:4f:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=b774534f-147b-4aa8-b107-af60448edf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:94:ca:ac:c2:8d:ba:a7:d5:ec:72:38:84:
                    4e:2d:f1:24:59:2e:a2:74:2d:a2:ed:96:bc:50:17:
                    01:7c:91:71:29:2c:c8:06:d5:43:75:25:11:ac:4d:
                    a5:a9:5f:83:87:c2:24:1b:00:76:91:00:53:3b:45:
                    4b:da:8a:04:0e:0a:8d:f0:9c:86:04:44:40:63:6c:
                    5d:4e:62:19:5a:9d:7b:61:86:fe:af:ce:51:55:31:
                    99:a2:4a:d2:64:81:a2:0a:b1:6c:93:1e:b3:1e:4d:
                    62:01:44:12:7f:50:50:e1:0f:45:1d:e6:19:8a:36:
                    27:07:69:e5:ca:cc:40:21:6c:7b:2e:29:0f:af:2e:
                    66:cf:8a:7c:96:d6:9f:e6:c4:7b:ef:fb:2e:0c:b8:
                    7a:12:24:ec:92:c1:6f:43:f5:49:2d:31:f9:05:a3:
                    50:00:b1:3d:c3:81:17:e3:f7:5d:1c:2e:9a:45:e0:
                    e1:72:25:ae:17:81:99:8b:b8:f1:4c:44:9e:ea:5a:
                    13:0e:ec:e8:21:f9:a8:01:60:d4:af:30:ee:58:1f:
                    f7:6a:cc:bf:19:c9:87:60:e7:f4:ef:a6:37:10:f2:
                    63:df:e7:fc:74:9a:f0:57:1b:f2:5c:25:61:15:44:
                    de:ce:b1:e8:46:60:1b:d2:83:c7:44:b6:6a:74:1b:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E7:CA:B4:86:2E:CE:EC:18:FA:82:C4:4A:A2:18:AA:5E:11:3F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:fe:6c:e2:bd:52:f1:48:3e:f6:c4:e5:74:37:14:5c:ea:
         70:80:bf:dd:3c:5f:60:9a:b8:33:6e:18:41:a6:00:5f:d7:7a:
         3a:fe:9e:ee:91:dd:dc:9a:ce:26:2b:e4:c7:6b:58:1d:27:40:
         f6:76:9a:46:8d:c1:e5:3f:88:3d:2c:e1:28:40:dc:83:c0:14:
         31:1c:60:d3:c8:f3:87:65:f1:d2:a6:8d:ec:1e:bf:21:7b:77:
         22:0b:27:fc:ac:c3:5d:ec:aa:65:18:14:63:f7:ac:f5:96:e2:
         72:47:9a:d4:86:4c:1d:6e:0f:07:2d:7c:71:bf:6c:e1:fc:78:
         d6:72:6d:66:f0:1a:79:5a:71:4f:a4:57:db:ff:eb:cf:17:5a:
         dd:38:97:95:28:98:b9:90:27:d7:e4:1a:2e:03:51:90:83:cc:
         42:f9:fe:73:de:06:b3:fa:08:1f:61:22:a4:1b:ad:cd:da:54:
         e9:e3:1a:75:8c:a4:a0:c2:47:55:c1:90:33:5a:e9:5f:b7:e7:
         8c:1c:8d:3e:43:3c:b5:84:77:b1:20:69:87:98:86:8f:8a:de:
         c2:63:f2:69:7f:92:08:70:08:21:ef:8a:9c:62:ae:5f:f8:53:
         c8:24:13:33:75:fc:85:0a:09:42:78:7d:a7:32:9e:20:f1:23:
         59:32:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:53 2025 by rpki-client