Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5e970983-8895-3242-8e54-cf4deca717c4.roa
File:                     5e970983-8895-3242-8e54-cf4deca717c4.roa (raw, json)
Hash identifier:          GUif6nkhbuDGPGG7FFKZA2ncoRqWY+ZTz4YqZEceXUg=
Subject key identifier:   8F:FA:F3:0F:FA:B9:D2:B8:06:5F:AB:7E:66:1A:36:53:8B:00:9E:6F
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A857601E023A7AC519131E100
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5e970983-8895-3242-8e54-cf4deca717c4.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     198983
IP address blocks:        104.194.140.0/22 maxlen: 24
                          104.194.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:01:e0:23:a7:ac:51:91:31:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=fe6bfb56-0214-4284-b5da-56b0e72bbdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:9a:06:69:f8:c6:2f:cd:f3:b4:40:d7:b2:
                    3f:4a:54:a3:28:20:28:cb:0a:d8:77:7e:11:f3:94:
                    97:de:5a:9a:9b:8d:45:92:c4:5d:9a:ec:d9:af:ff:
                    55:62:7f:8b:4c:a6:c3:56:6f:db:75:eb:01:e5:b3:
                    08:e1:50:b3:90:8f:62:24:59:f1:66:9b:e1:c1:c9:
                    0c:26:04:00:32:19:78:82:1a:63:ac:e1:02:b0:07:
                    07:27:8d:8a:5f:82:c0:15:8f:f4:4e:32:49:fa:23:
                    ef:ed:2d:55:bc:48:25:ae:63:2a:45:a4:60:70:e3:
                    b7:78:e9:66:bd:9e:84:f7:31:1c:ae:2c:97:15:4e:
                    6c:c6:eb:dd:39:99:95:21:a2:14:a7:dc:b6:89:a5:
                    5b:5e:d3:48:1c:ab:03:e6:69:04:fa:68:15:d8:a5:
                    10:7a:9b:e1:c3:e2:b1:55:f4:e2:ec:4e:25:4c:ce:
                    fe:6e:b5:25:11:e7:95:b8:34:55:62:09:cb:9a:ad:
                    04:a9:d0:40:77:d3:99:0e:60:7a:f7:87:ae:a7:f4:
                    66:93:d8:90:58:67:84:58:6c:86:10:9e:75:47:55:
                    75:6c:a5:69:ee:1a:50:83:2f:2d:81:1b:3a:85:87:
                    f6:ac:2d:16:be:e7:a7:dc:f8:da:84:d8:af:90:04:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:F3:0F:FA:B9:D2:B8:06:5F:AB:7E:66:1A:36:53:8B:00:9E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5e970983-8895-3242-8e54-cf4deca717c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.140.0-104.194.151.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:29:33:61:ad:14:70:8f:45:1e:19:5b:b8:48:70:f8:aa:2b:
         98:2d:27:e1:cc:66:ba:c1:6a:6d:58:e4:36:f1:29:cf:c6:63:
         ac:e1:6f:ab:79:88:87:74:74:c2:b3:80:b1:4c:20:9b:be:30:
         5d:29:2b:29:0f:e8:97:fd:e3:57:7a:17:9e:72:34:ce:26:64:
         1a:b0:cd:6e:c2:75:41:13:8f:8f:2a:7b:f0:c8:77:5f:a0:10:
         0d:8e:58:56:6a:e3:40:78:f4:c8:95:fb:61:c8:f7:7a:f5:75:
         63:14:7e:fc:bc:3f:4c:d7:17:ea:80:85:df:5d:e8:a4:df:52:
         5b:45:dc:7d:0e:ba:5d:32:8d:16:da:08:fd:9f:9f:b4:0b:6c:
         f7:61:2d:31:13:47:30:48:cf:91:80:52:1e:2a:01:22:89:23:
         66:1a:38:c8:d9:af:1d:81:85:70:d9:05:cc:40:5a:b3:2b:32:
         fe:a3:94:bb:a3:e1:75:4c:5e:6f:7a:18:a4:d0:2d:21:e7:37:
         bc:2c:b7:f6:2d:22:af:ea:85:f2:65:3e:a2:b6:1b:e9:11:6d:
         7e:24:7c:c2:99:17:5b:cd:56:e2:bb:f6:4f:67:04:4e:d7:a1:
         6d:03:26:0a:01:ac:a0:9e:0c:19:07:82:54:17:ae:08:ef:72:
         7b:8e:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:51:53 2025 by rpki-client