Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/865a79a7-0e0e-3707-b226-2712029e142b.roa
File:                     865a79a7-0e0e-3707-b226-2712029e142b.roa (raw, json)
Hash identifier:          dVdNZ02lVHlnxNhPSQmj4xbuJVqUhkWHkGuazO4SPUI=
Subject key identifier:   3C:28:3A:7F:4C:C5:2E:85:B4:01:CF:D3:B8:56:64:A9:CC:D5:3E:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A942941A9B4AF240BCB740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/865a79a7-0e0e-3707-b226-2712029e142b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.198.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:42:94:1a:9b:4a:f2:40:bc:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c0b3b420-d020-4fa2-ac14-862cb647e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:3e:a8:18:3e:b7:30:d9:54:ca:79:40:a0:
                    9f:e7:33:8f:ff:4a:c5:15:b7:18:c8:44:e7:be:9a:
                    66:aa:ba:85:48:b3:7f:46:85:e0:eb:4b:04:d8:b7:
                    31:b9:ec:c4:58:06:61:eb:6b:76:7d:0a:9c:f9:2f:
                    1e:4f:fa:b2:09:62:f6:d1:5c:a3:51:0b:48:ff:82:
                    6d:77:ed:f4:a2:b3:84:d3:26:ef:bb:99:f0:a3:a0:
                    fd:c0:da:19:7e:52:fd:6a:bb:97:a0:4c:a1:b5:31:
                    f7:b4:e9:ad:da:19:23:9f:88:42:a9:62:32:ce:8a:
                    86:5a:b7:d2:e5:50:53:cc:54:de:45:a9:b7:9e:aa:
                    6b:de:4b:c7:2a:08:c2:9b:72:f9:88:34:c0:79:13:
                    1f:2a:ec:cd:ae:af:7b:1c:47:4f:8a:66:23:56:71:
                    ad:f9:b3:12:d6:eb:cc:49:98:fc:12:4f:cc:c2:a3:
                    d3:68:b8:47:d5:e7:4a:00:7d:f5:04:fa:12:ed:d4:
                    13:b4:6c:31:56:c7:bc:84:a2:a4:b8:67:fd:c7:06:
                    1d:fa:60:9c:b5:8a:70:23:9a:21:3c:f4:91:d0:a0:
                    34:60:60:d8:fd:98:a0:92:63:e6:a3:c1:0b:6f:36:
                    ee:12:7a:85:c0:11:4b:66:b6:cc:11:bd:68:e7:0a:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:28:3A:7F:4C:C5:2E:85:B4:01:CF:D3:B8:56:64:A9:CC:D5:3E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/865a79a7-0e0e-3707-b226-2712029e142b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:7e:ec:5b:a0:a7:f9:74:89:7c:39:de:6d:05:e0:3c:84:
         86:d9:9c:4c:7d:8d:8a:38:f0:d4:b4:92:9b:9d:ae:90:93:70:
         cd:e7:dc:fc:38:96:b8:14:44:e5:27:62:8a:7a:ed:11:fa:a0:
         b4:ec:7e:96:22:99:31:86:de:12:5c:e2:d8:56:0a:d2:27:5e:
         6d:ff:13:08:27:cc:c5:46:7b:3d:f4:3d:d6:22:bd:c4:7a:61:
         b4:0e:b7:e1:74:43:ab:77:12:d8:57:05:38:d5:3d:cf:8e:9b:
         01:93:b7:cb:34:ad:be:4c:55:a0:2d:7b:f5:d0:2c:9e:b6:f8:
         c3:29:c9:00:94:54:78:be:3e:9e:eb:31:33:c9:89:9f:77:4b:
         1c:49:e5:9d:04:db:e9:ef:11:ab:ce:22:d7:66:8c:96:3e:b6:
         e4:01:aa:c7:64:20:96:3a:ee:2f:45:c7:74:c2:f9:ec:99:92:
         5b:4c:a0:1f:0e:90:7a:6c:36:ef:08:4f:10:b0:da:dc:ca:39:
         f2:09:66:b9:e8:cf:fb:61:43:a6:9f:70:71:59:21:da:67:00:
         0a:c9:01:e8:06:28:8c:7f:fe:8e:40:6c:67:4f:b4:b4:b6:05:
         d7:12:a0:78:3b:16:e5:48:da:64:0b:b6:4b:7f:80:41:62:2c:
         6b:f8:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:04:16 2025 by rpki-client