Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
File:                     fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa (raw, json)
Hash identifier:          x30qqkt64O0oPSLTVOVVRIRwTURTnkdO67UIMkTzWt8=
Subject key identifier:   3D:12:E4:C3:D8:D8:65:81:41:CD:DF:F1:65:36:13:F8:63:D6:B3:90
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584AFEE6A42433BB013B5DAC8C18
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        172.98.164.0/24 maxlen: 24
                          172.98.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a4:24:33:bb:01:3b:5d:ac:8c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=e4b5027e-b9a2-4e57-bd67-3d9a16a6fe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:b8:39:60:ec:05:59:b2:3b:67:06:01:1d:
                    06:02:2e:7a:d3:0d:54:b5:05:c6:58:7b:3d:78:98:
                    63:03:76:48:cd:b0:ac:61:bb:c7:e7:88:0e:91:f3:
                    89:d7:f4:31:1a:90:3b:6a:48:8d:df:05:f8:ce:d9:
                    ac:4c:4f:35:32:2b:8d:2f:b9:48:88:d4:91:5e:97:
                    92:68:91:68:9c:dd:c9:2f:ae:5c:2b:3f:f6:c3:84:
                    8f:d3:62:3b:e8:67:d9:29:41:2c:8b:d8:61:d0:7c:
                    b6:94:e2:0d:f8:71:a7:98:dd:e8:86:bd:fd:44:49:
                    69:ad:64:c9:95:73:2c:37:40:c1:9f:54:cd:8f:93:
                    0c:53:b4:c6:d6:87:a8:94:b8:e7:dc:2c:29:5b:55:
                    c1:82:7f:ee:da:07:17:f3:33:6d:eb:3d:f7:6a:96:
                    9a:6d:6b:7b:06:90:17:1c:49:ac:9d:f4:97:8c:e6:
                    8b:d7:c6:99:b6:5b:9f:ab:f0:59:2b:d9:8e:b9:1c:
                    d4:88:87:28:88:db:df:43:07:9d:dc:70:1c:8b:30:
                    d9:4b:7a:a9:78:77:ec:df:a2:af:7a:cd:d7:74:d2:
                    c6:77:0b:ab:e2:86:65:7a:01:11:16:c0:95:0a:85:
                    e6:12:e2:79:25:b7:70:d1:77:b8:3a:02:6f:5f:be:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:E4:C3:D8:D8:65:81:41:CD:DF:F1:65:36:13:F8:63:D6:B3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.164.0/24
                  172.98.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:ee:fe:62:c0:a6:28:5b:7f:2b:38:ba:3c:94:cd:e4:15:
         fe:75:6f:bd:c2:92:04:37:9d:11:d9:55:4e:a4:f3:a8:b1:2a:
         0d:68:b9:62:ee:62:61:92:e6:47:41:d6:61:5a:d5:75:c5:2d:
         11:01:b2:2f:0c:3d:4e:56:6e:33:09:c2:e3:f4:cb:de:7d:bd:
         83:d9:24:7c:6f:9b:57:1a:93:b5:36:91:5d:8c:41:a2:be:2e:
         e5:6d:19:97:64:81:8b:63:d6:dc:25:27:13:b6:72:24:85:6e:
         33:42:6a:01:a4:a4:b6:9a:c6:3d:a9:b0:20:0c:de:94:f5:01:
         14:f2:2d:1b:a1:29:c6:bd:68:23:17:61:d1:f8:a9:9c:36:6f:
         df:be:48:4d:10:d6:5f:24:89:e1:64:16:f2:54:7a:ed:fb:c0:
         22:53:61:60:9e:26:1f:63:27:4c:1f:59:9d:9c:4a:7f:46:4e:
         79:ca:d9:a4:59:a6:c1:17:41:a0:df:bd:d8:a2:4d:86:cc:33:
         5d:84:ae:d0:a4:23:5e:70:55:4e:17:0c:ea:5e:1c:43:23:84:
         1d:10:96:d8:5e:2c:29:59:74:3c:f9:19:3f:49:b6:b3:ee:ff:
         ab:9a:a0:3a:26:f2:1d:29:01:40:c8:b1:5a:1c:69:0b:6f:21:
         58:db:10:c0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr+5qQkM7sBO12sjBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTRiNTAyN2UtYjlhMi00ZTU3LWJkNjctM2Q5YTE2YTZmZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWC4OWDsBVmyO2cGAR0GAi560w1UtQXGWHs9
eJhjA3ZIzbCsYbvH54gOkfOJ1/QxGpA7akiN3wX4ztmsTE81MiuNL7lIiNSRXpeS
aJFonN3JL65cKz/2w4SP02I76GfZKUEsi9hh0Hy2lOIN+HGnmN3ohr39RElprWTJ
lXMsN0DBn1TNj5MMU7TG1oeolLjn3CwpW1XBgn/u2gcX8zNt6z33apaabWt7BpAX
HEmsnfSXjOaL18aZtlufq/BZK9mOuRzUiIcoiNvfQwed3HAcizDZS3qpeHfs36Kv
es3XdNLGdwur4oZlegERFsCVCoXmEuJ5Jbdw0Xe4OgJvX74CHwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFD0S5MPY2GWBQc3f8WU2E/hj1rOQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZmNkNzUyMDItMmJjNS0z
NmRlLWE1YTItM2MwYjAwYTgxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKkAwQA
rGK6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABQ77v5iwKYoW38rOLo8lM3kFf51b73CkgQ3nRHZVU6k86ix
Kg1ouWLuYmGS5kdB1mFa1XXFLREBsi8MPU5WbjMJwuP0y959vYPZJHxvm1cak7U2
kV2MQaK+LuVtGZdkgYtj1twlJxO2ciSFbjNCagGkpLaaxj2psCAM3pT1ARTyLRuh
Kca9aCMXYdH4qZw2b9++SE0Q1l8kieFkFvJUeu37wCJTYWCeJh9jJ0wfWZ2cSn9G
TnnK2aRZpsEXQaDfvdiiTYbMM12ErtCkI15wVU4XDOpeHEMjhB0QltheLClZdDz5
GT9JtrPu/6uaoDom8h0pAUDIsVocaQtvIVjbEMA=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:30:08 2025 by rpki-client