Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa
File:                     e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa (raw, json)
Hash identifier:          Ep89HqbC/fbPkdfUqlI0paWCP5WbvlOGvri2TnIJaSo=
Subject key identifier:   4A:97:12:1D:00:72:EB:FB:05:C1:75:5E:31:EA:A0:75:99:C4:D4:9F
Certificate issuer:       /CN=e729e81c-d76a-426a-a543-5254046b0d89
Certificate serial:       010D0C9F4328584AFC1BF783E9CAA398E28D0700
Authority key identifier: 0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        98.158.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f7:83:e9:ca:a3:98:e2:8d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e729e81c-d76a-426a-a543-5254046b0d89
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=d425a773-f17b-4546-a484-f35816377b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:d1:54:b7:87:42:3a:46:7f:d0:94:50:d9:
                    dd:7f:89:8a:42:84:3f:36:08:10:8a:c2:20:b9:17:
                    5c:48:cc:ca:86:53:e4:2f:1a:2c:12:b6:92:b3:35:
                    d7:5b:58:a7:e3:e5:5f:30:5d:ba:4c:37:dc:43:9c:
                    0d:cb:0b:0c:83:59:44:84:e2:72:34:89:e9:b5:b8:
                    87:b6:13:bc:0b:fb:4e:7e:a1:4e:7b:48:53:3b:39:
                    0d:08:e8:a5:21:31:2c:51:a5:59:8d:e2:89:56:46:
                    1a:fd:f5:34:af:da:88:48:52:67:76:ac:95:ba:d3:
                    70:e8:94:c8:a5:e9:8e:8f:56:75:77:b2:27:cf:17:
                    18:ac:1f:73:5d:fe:41:9d:5d:a6:4b:58:22:a0:c3:
                    20:88:3f:a7:90:fa:c0:0b:88:19:6a:6e:f6:1a:e4:
                    d8:cb:e9:57:73:64:fb:74:9b:25:93:09:5d:22:d1:
                    87:a2:17:46:b4:65:f9:fb:8c:b4:85:65:0e:9b:c6:
                    0c:3d:2e:b1:ff:5c:1d:7f:8f:a2:f6:7b:b6:72:77:
                    5a:78:02:e5:51:89:e3:c3:ea:7a:1f:af:d6:94:19:
                    65:b1:39:20:17:21:af:3b:d7:8a:b3:da:fe:ee:19:
                    53:32:f0:d4:a2:4b:70:8a:36:ae:1a:5c:bd:ca:4e:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:97:12:1D:00:72:EB:FB:05:C1:75:5E:31:EA:A0:75:99:C4:D4:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl

            X509v3 Authority Key Identifier:
                keyid:0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:30:1c:86:31:a4:6c:9c:c3:4d:95:2b:35:58:f0:1b:e6:fe:
         0e:c8:4d:98:ac:28:66:86:17:b7:c8:2c:23:4c:ac:28:c2:0d:
         58:f3:6f:df:5b:40:09:df:ba:bb:23:7e:c8:67:90:cd:81:66:
         b0:85:41:f6:a6:c2:7f:ea:0a:89:1e:6c:84:83:f0:f8:88:41:
         ed:ac:0d:c6:d2:c6:e6:c1:bd:6f:6f:58:63:db:f8:0f:b7:5b:
         ae:0e:71:c2:e6:62:a7:ba:aa:e0:0d:a1:d7:55:d1:f0:6b:e8:
         2e:62:95:2d:c8:2d:52:bd:cf:6c:aa:7a:d8:9b:a1:55:a9:ea:
         e8:8b:25:fc:09:5c:7f:1e:2e:58:38:02:40:81:e3:20:7e:17:
         9f:d6:c9:58:15:2b:17:92:57:16:9a:3d:91:d9:23:a2:fb:b1:
         72:1c:c5:14:fb:95:27:f6:ea:9a:b4:02:e3:1e:7f:59:ad:e6:
         eb:90:d8:3c:cc:51:d5:24:e3:79:0b:84:80:dc:d0:0e:ba:fe:
         f1:a2:4c:ba:d9:a6:fe:bf:b4:de:2d:ec:14:70:7a:05:76:0e:
         35:84:2e:e8:db:78:9c:80:1c:32:12:f9:1c:6b:8d:ae:03:28:
         c6:0c:4f:42:95:12:01:57:8b:51:7c:af:73:e1:d7:cd:f7:e9:
         bd:81:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:04 2025 by rpki-client