Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4215a995-444c-37ec-bc2e-76323daf0002.roa
File:                     4215a995-444c-37ec-bc2e-76323daf0002.roa (raw, json)
Hash identifier:          rgrIRhaxRZ7ksvo43yt17Q/MZJecaE90c4AWmy2BE90=
Subject key identifier:   21:CE:89:79:67:75:07:E1:E5:08:A4:E5:5B:EB:77:FF:69:9C:38:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA939A37B23AAD5BC0B580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4215a995-444c-37ec-bc2e-76323daf0002.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        98.243.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:93:9a:37:b2:3a:ad:5b:c0:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=84bdd358-7bf6-4003-a1a9-d1c806556c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:01:c3:9e:74:5b:de:be:59:22:f0:b2:be:
                    a3:5d:37:34:e0:5f:88:f2:a2:fe:6f:43:a0:b4:3c:
                    14:91:58:b4:7e:34:45:d8:83:ea:6f:72:c9:fd:5a:
                    21:6f:33:94:51:26:fa:5b:d6:b4:1f:4f:82:2a:26:
                    0d:9e:57:87:74:95:bb:c4:70:d4:dc:0d:bd:79:98:
                    42:84:d5:a4:38:ee:09:11:b6:92:30:a6:ec:a7:e2:
                    25:09:d3:9e:b3:0d:91:d0:6e:e6:9f:a1:68:64:e9:
                    27:b6:2b:d1:e1:54:8e:05:36:c8:63:23:9d:49:b6:
                    91:00:ca:38:ee:ed:3b:13:39:a7:0e:69:1d:f8:fb:
                    0f:c3:80:82:72:ef:27:8b:27:6b:40:37:4d:39:91:
                    34:6a:4c:bc:f9:3d:e7:9f:16:1f:6c:7b:04:71:60:
                    30:ac:ba:b2:55:e2:bf:ae:97:ab:09:ea:65:0c:9c:
                    25:68:17:52:40:48:a1:ed:e9:4b:19:40:f2:06:b4:
                    c7:17:b9:11:88:3b:05:f2:5e:ce:fa:97:fd:a4:fe:
                    ce:b4:31:d8:01:70:66:0f:86:88:ad:71:b8:a8:4b:
                    b3:0b:26:f3:05:3f:ea:d3:d2:59:05:0c:94:bf:80:
                    65:01:cc:69:75:17:d8:17:e8:78:96:5d:1e:c1:b9:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:89:79:67:75:07:E1:E5:08:A4:E5:5B:EB:77:FF:69:9C:38:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4215a995-444c-37ec-bc2e-76323daf0002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:97:9b:23:1e:59:d4:66:fb:83:c1:38:59:44:3f:ec:92:ae:
         8c:4f:bf:dd:7c:41:42:f3:91:e2:b6:54:01:82:51:ce:6e:1c:
         42:84:3c:a5:4d:39:f5:1b:d5:76:77:16:93:6a:f1:55:fb:bd:
         36:66:89:2a:3d:14:22:82:d7:18:a2:a8:3d:97:da:a0:0c:1f:
         19:9a:7d:f2:ad:ac:6d:ae:35:fb:27:d2:1e:5e:d5:13:20:1b:
         2f:e8:26:fd:a7:e7:48:e7:41:e1:02:bd:0b:79:5f:80:3f:88:
         d9:db:eb:80:aa:59:4d:3a:fd:c2:3e:1f:64:e8:14:80:40:7f:
         1f:8b:ee:f3:e4:99:c7:4b:4f:aa:76:c2:29:2d:e0:57:aa:c3:
         27:9a:d3:e3:e8:4e:73:f6:f7:c7:7e:20:c9:00:cc:14:d8:58:
         79:f8:bf:f3:2c:29:04:e7:b3:0a:28:25:83:b8:a0:54:4c:08:
         2c:59:cc:99:bb:83:40:f9:da:05:b8:f2:d0:df:62:ef:e8:bd:
         1e:8a:7c:43:9f:d8:7e:dd:05:82:7d:1b:ff:41:bb:2c:47:4d:
         1b:7d:62:07:77:33:1f:ab:1c:6c:19:ec:59:a5:4c:50:ce:41:
         b7:bb:1c:80:c6:2e:85:e1:27:a4:06:65:8e:57:02:fa:01:ee:
         98:3a:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:21:33 2025 by rpki-client