Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8373c5df-4d41-3c18-9139-e0429c6d7ab2.roa
File:                     8373c5df-4d41-3c18-9139-e0429c6d7ab2.roa (raw, json)
Hash identifier:          KasKRXi7Ov8H2xIYdfbC9fgfy1CU289jE4pQdtx2ago=
Subject key identifier:   5B:01:33:81:31:D6:9B:BE:0B:AA:86:3D:E4:A8:60:25:47:78:01:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9537057AACF71A017A300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8373c5df-4d41-3c18-9139-e0429c6d7ab2.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.57.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:53:70:57:aa:cf:71:a0:17:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=43dee3eb-56e3-4b2e-82f9-d2e4c478cb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:74:46:e8:1a:5b:a5:72:5a:09:e1:a8:0d:
                    51:8f:64:aa:b4:2e:43:4c:bc:86:c3:b3:4c:fb:d3:
                    cb:ee:e4:7d:42:ff:53:e7:d5:13:68:6c:62:89:75:
                    69:8a:48:34:8d:9a:36:ce:26:19:a4:a2:58:6d:d0:
                    d1:92:4e:28:d5:90:69:9c:21:2d:49:c2:dd:c2:e2:
                    2b:bd:ff:fa:59:cc:01:71:10:dc:3e:f5:22:cd:aa:
                    c3:fe:69:52:88:b7:ad:5e:df:b2:bc:df:1c:0b:ee:
                    28:45:83:3e:8b:20:50:0c:dc:07:e5:b1:a1:ab:90:
                    68:b6:33:9d:0c:86:8e:33:31:92:9b:09:04:eb:f0:
                    79:c4:89:7c:6e:f6:b8:1f:6a:65:18:f8:7b:8f:3f:
                    1d:6d:bf:f1:e8:0b:1b:80:80:63:8f:cb:89:3a:38:
                    30:4d:2e:84:69:18:8f:d6:af:ce:c6:54:a6:59:ea:
                    3f:8c:b1:ae:91:f2:f9:6e:24:5d:55:6c:9c:9b:be:
                    fc:04:03:c4:cd:3b:b7:ff:a9:ce:16:75:6c:b1:f2:
                    38:8a:7f:33:1f:e7:6a:dc:f7:6f:f2:86:82:aa:c5:
                    08:b1:e6:ac:67:a2:ad:4a:8f:6e:be:52:5c:bb:5a:
                    ed:bc:d2:92:75:39:eb:31:88:b6:59:59:8e:d1:f6:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:33:81:31:D6:9B:BE:0B:AA:86:3D:E4:A8:60:25:47:78:01:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8373c5df-4d41-3c18-9139-e0429c6d7ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:e7:eb:a8:06:f1:17:9b:e2:8f:7c:94:69:d8:d0:33:eb:
         cc:44:5e:c7:7c:ea:ae:ad:01:2c:6c:60:71:9d:85:e0:b5:51:
         b5:06:dd:9f:73:ba:03:52:95:ac:75:80:a8:ec:2c:fd:af:b1:
         23:f4:04:f3:66:9d:de:3c:65:b2:84:54:51:b9:5a:49:7a:6f:
         15:be:65:f4:8c:fc:ca:4a:54:aa:3f:ae:b8:af:9a:74:16:4e:
         09:e0:82:bc:9a:29:9b:eb:c8:86:cc:6e:99:19:cd:2f:f7:60:
         1f:c4:aa:23:e6:51:2f:cc:48:f0:ab:ea:18:20:13:d6:1b:87:
         52:8a:69:c4:a1:7e:4d:75:1d:09:cf:09:0c:11:d6:84:d4:b0:
         b3:bf:7c:90:0b:b7:27:76:8e:98:b6:55:ed:a5:7f:c0:8a:b2:
         25:fa:42:0b:fd:25:8a:5b:14:d8:5c:ca:2d:86:07:ba:96:b9:
         3d:9e:82:9c:89:44:68:6d:a3:7e:e1:37:be:ef:cf:ee:c8:a8:
         08:6f:a4:83:17:e8:47:9b:84:aa:d5:7f:ab:6b:81:69:ce:82:
         95:dc:99:ea:75:6e:90:66:a3:63:07:98:ac:7a:90:56:40:5d:
         e1:2d:2d:da:4e:da:0b:20:9b:3a:17:55:84:31:a5:0b:5d:8d:
         02:62:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:51:18 2025 by rpki-client