Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a64c1d-5170-3fee-bbfb-108469fcf3a2.roa
File:                     98a64c1d-5170-3fee-bbfb-108469fcf3a2.roa (raw, json)
Hash identifier:          7PPGsknFb547cDyDgZPOn4n2sUB07GxfVEVDphNygCI=
Subject key identifier:   37:BC:B6:D2:DF:2D:09:08:3D:07:40:CB:C5:D0:86:42:18:F4:45:38
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B23D33B150E7D27829340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a64c1d-5170-3fee-bbfb-108469fcf3a2.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     202
IP address blocks:        192.85.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:23:d3:3b:15:0e:7d:27:82:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=89a8115c-31e0-4234-89c7-8030683a9f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:ef:e2:dd:f8:cc:47:dc:35:96:71:e3:31:
                    82:65:ae:1d:75:ba:8f:a2:f9:7d:37:0f:8f:21:8b:
                    b8:bd:d5:b5:86:72:3f:20:60:b4:5d:de:02:e1:46:
                    22:f9:9d:2f:35:a2:d9:ab:75:b2:bb:b0:4c:aa:f8:
                    09:b3:e0:51:df:a4:7e:59:b9:6b:7c:b5:e1:a8:9a:
                    8a:a4:2b:00:d6:ea:a5:91:26:81:12:74:a3:fb:05:
                    be:24:ea:1f:2a:2a:50:63:6c:31:1b:6d:96:25:8e:
                    95:2f:4b:57:30:e0:4f:db:5b:68:d8:5e:b3:f5:54:
                    be:e3:5c:f2:f6:36:99:d5:db:60:00:e2:80:74:3a:
                    9d:6d:c0:44:a1:c5:ef:b5:d7:c7:25:71:3c:73:0f:
                    2b:58:26:64:3e:91:dc:07:14:4c:12:f9:3c:e7:3d:
                    35:40:6b:f2:72:cd:a1:d7:9e:7d:fd:fa:2f:78:57:
                    ae:18:1f:83:8c:34:b0:71:cb:40:2f:1b:b8:bb:ee:
                    11:47:f5:72:ac:1a:56:82:8b:36:e8:18:7d:35:60:
                    02:2d:b3:43:78:39:a4:01:8c:50:0c:ba:6d:ed:e3:
                    bc:df:3e:81:32:a9:07:3b:4f:74:e6:4a:ab:b4:c6:
                    44:ef:ab:8b:48:7a:07:64:4a:b7:e4:2d:55:d3:88:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BC:B6:D2:DF:2D:09:08:3D:07:40:CB:C5:D0:86:42:18:F4:45:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a64c1d-5170-3fee-bbfb-108469fcf3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:3a:dd:3c:2a:7d:e6:8f:55:39:7a:34:d6:d8:b3:5c:a3:
         da:43:1a:29:6c:6d:5a:05:e2:05:15:7e:6a:14:88:15:f0:ae:
         fc:88:e8:23:a5:b4:cd:f0:38:bc:7a:ee:3d:a1:d9:23:2e:4b:
         07:aa:4b:9c:1f:c2:de:1e:4b:9a:d9:ef:4f:a1:c1:35:6f:d2:
         bd:05:12:19:8a:68:17:96:a0:55:6d:47:f9:00:f7:e3:1b:db:
         e7:53:b6:5c:8b:5d:45:26:35:b2:7a:5b:f6:c9:31:93:b6:e0:
         27:52:26:15:f8:33:4d:99:c1:9c:94:09:f9:5c:9f:f0:97:de:
         b5:cc:0e:90:0d:7c:08:6c:2a:8a:1b:f2:99:45:b7:bc:cf:bb:
         b0:a6:ec:16:ce:db:62:5c:c8:1d:ad:80:d6:a2:22:d4:dd:4a:
         d1:58:56:b7:22:5e:19:fc:fa:73:13:8d:75:cc:3c:75:8c:5a:
         2a:ad:e0:3c:01:75:9b:87:bb:8c:3b:39:e2:5f:e9:22:21:e9:
         b9:89:63:d1:2b:36:16:97:12:2a:68:a2:cc:bd:e8:a8:43:29:
         e6:1f:50:58:3f:0f:47:ae:99:e2:91:30:0d:6c:e1:6a:ce:76:
         5c:c3:aa:7c:04:c0:8a:8d:0c:d2:c9:08:27:09:c0:ae:93:ab:
         77:86:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:21 2025 by rpki-client