Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1257528a-d675-3fa6-8c3a-74f38c868d8e.roa
File:                     1257528a-d675-3fa6-8c3a-74f38c868d8e.roa (raw, json)
Hash identifier:          9NAaPAD/Tf741UQJRo1O5tubvHDXG792TC1Ym9Jqjyg=
Subject key identifier:   27:4D:DA:3E:B1:32:5B:40:DB:F2:87:3D:E6:73:1E:69:31:12:A4:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9528A7734E6EE473BD340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1257528a-d675-3fa6-8c3a-74f38c868d8e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.57.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:52:8a:77:34:e6:ee:47:3b:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=24acafcf-b302-4156-b025-949c169d20ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:b2:c1:ba:20:ca:84:24:1a:ec:a1:94:ce:
                    61:4d:7a:bc:e2:6e:c3:ac:9c:c3:1b:34:42:3d:bc:
                    6f:a6:4b:11:6d:a6:00:af:6f:54:de:85:1d:66:b9:
                    db:8d:3d:2d:43:d0:c2:84:11:cc:71:13:f2:a1:ba:
                    48:4a:e3:22:6a:80:2e:c5:4d:da:74:7a:e2:13:d6:
                    68:aa:87:a4:d7:4b:26:fd:10:20:b7:ca:59:25:07:
                    6f:55:7c:a9:9c:c5:a6:31:19:cc:fd:6a:b2:4e:6a:
                    9b:f1:9e:75:fc:c3:7b:df:85:39:88:d8:fb:88:75:
                    60:7c:c6:51:6e:c9:d7:bd:bc:fa:32:5c:a1:cf:59:
                    8d:76:32:16:31:5e:77:28:18:cf:fa:ea:d8:a3:49:
                    6a:69:ea:ee:25:97:cc:99:91:e3:3a:82:b6:64:69:
                    ae:5b:36:af:3d:3b:5e:08:42:06:6f:73:7c:1c:64:
                    fc:1b:5d:3f:b7:a8:6c:b5:aa:52:64:c1:2e:75:22:
                    15:19:68:f7:e0:79:ad:3c:2c:58:11:a5:ca:6c:1a:
                    85:c8:d5:a6:97:4a:f1:35:0b:8e:46:35:c7:b2:80:
                    57:52:e3:eb:61:db:ea:8e:cd:ee:c6:42:e0:6e:53:
                    a2:40:5f:f4:76:5e:b3:92:df:75:ce:7e:13:33:15:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:DA:3E:B1:32:5B:40:DB:F2:87:3D:E6:73:1E:69:31:12:A4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1257528a-d675-3fa6-8c3a-74f38c868d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:56:a3:b5:31:b2:12:56:3f:55:39:d7:68:7a:70:4f:40:a8:
         bc:13:dd:88:1a:9e:fa:52:a2:e5:5c:62:2e:bf:49:9a:61:38:
         58:cb:65:e1:ea:87:31:0e:68:39:14:12:65:49:b6:cc:e3:d0:
         e5:cd:02:51:74:63:32:4e:ab:5f:8d:b2:31:eb:eb:60:f8:ab:
         5e:84:dd:a6:c5:4c:a6:2c:45:64:27:5a:db:e2:b5:f1:e2:3b:
         f9:16:fd:82:41:3d:ec:49:a4:ba:fc:d3:df:7d:8b:01:ca:42:
         c5:ad:fa:33:a7:ac:92:69:81:4a:d3:86:2a:95:75:37:37:ce:
         86:00:9c:5b:f5:ec:80:08:8a:59:be:a7:ac:3c:53:d3:d6:66:
         b8:61:15:7c:80:e3:b8:08:b2:7f:cf:b3:ab:ec:09:70:04:1c:
         a6:fc:54:bb:b8:8e:49:b7:98:a7:ed:6d:2f:e2:f1:08:17:15:
         69:77:ab:d1:2a:4c:a8:6c:06:31:ed:2f:7b:5b:f3:af:a5:f5:
         12:10:63:30:76:d4:c3:89:bb:5b:31:34:bf:e9:d1:0f:85:a9:
         66:87:12:73:af:b8:b8:8b:2b:2f:d6:0e:0d:00:f0:c0:53:d1:
         01:03:85:a9:65:6f:bf:37:a7:1d:24:67:96:fc:88:84:3b:0d:
         0b:68:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:06:35 2025 by rpki-client