Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98589b0c-176e-3038-bfb2-a8e16e953abd.roa
File:                     98589b0c-176e-3038-bfb2-a8e16e953abd.roa (raw, json)
Hash identifier:          uwCbgWc+8Z6cBuTTm8DX734t9Q0Mh/3ocKDlX4ReWmo=
Subject key identifier:   A1:11:F3:C2:AF:58:D7:F7:1E:ED:0A:5B:8B:B6:22:CC:C8:B6:3E:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9385348D193599801BF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98589b0c-176e-3038-bfb2-a8e16e953abd.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.194.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:38:53:48:d1:93:59:98:01:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=992d3eab-8229-45ef-9d15-e176ae48c1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:01:1f:53:7c:5c:56:9f:73:cb:3d:05:05:
                    5a:ad:f7:8c:ac:9c:82:8e:88:55:be:a9:26:2f:19:
                    8c:18:d1:93:10:05:3a:c5:22:b3:85:0d:56:c8:f3:
                    3e:f0:2c:82:86:a1:44:58:af:6c:91:7c:9f:a9:f3:
                    df:88:53:fa:a8:b7:66:92:17:10:14:95:a3:55:b0:
                    11:2f:55:cc:32:a9:74:7c:e5:95:3c:fb:41:1d:40:
                    1e:8a:bd:fa:86:3c:04:04:84:db:69:ce:33:b3:bf:
                    f7:2c:9d:41:2c:c2:92:36:28:90:04:4f:3a:3c:c9:
                    da:1c:05:47:34:19:38:48:45:99:51:a8:72:ae:29:
                    5d:17:bd:79:ff:28:3f:6d:3e:ed:7f:9f:b2:8a:4d:
                    ee:ae:bb:82:d4:8a:e3:35:70:34:6e:d7:8a:be:b4:
                    df:b4:38:90:e4:25:4d:fc:81:b9:d6:d6:f7:ca:bd:
                    52:dc:a5:21:dc:bf:bc:ca:0e:02:48:8e:5b:9e:fc:
                    cd:d8:32:3a:d3:06:2a:3a:2b:54:58:bd:70:7e:59:
                    ad:d1:bf:1e:68:30:12:60:d5:67:42:e7:93:82:42:
                    89:fd:ed:20:07:c1:0e:7b:86:aa:a6:b5:1a:ed:29:
                    a7:47:21:bc:8d:29:47:23:8e:74:04:27:39:e4:89:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:F3:C2:AF:58:D7:F7:1E:ED:0A:5B:8B:B6:22:CC:C8:B6:3E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98589b0c-176e-3038-bfb2-a8e16e953abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:de:ef:77:48:f3:07:74:7e:31:6d:a8:aa:27:61:12:10:41:
         c0:79:26:67:cf:48:89:ee:36:2a:be:50:5c:8a:2e:11:58:ca:
         f8:f7:d4:f2:da:4a:4c:8f:4b:56:2e:ae:f3:00:fa:e8:59:2c:
         93:a4:d3:48:52:d1:0d:6d:bc:8a:2c:ca:f8:82:0c:7c:0d:48:
         6e:bb:cf:83:47:55:18:ae:77:6b:f2:f8:4a:1b:6b:fd:73:97:
         a4:a4:30:ee:81:67:c5:d2:20:cb:e0:f9:2a:5d:00:c9:c0:9e:
         28:f8:33:20:46:15:cc:cd:78:11:21:6b:60:60:ef:c2:82:97:
         2e:a5:5c:a6:56:41:3a:49:b9:49:ee:d9:00:f7:5d:36:6d:7f:
         c2:ca:3b:bd:43:f5:fe:2a:c8:6d:25:43:1b:e2:db:ca:51:cc:
         c4:e3:a6:14:b7:7a:3c:50:2a:35:3f:fe:d1:54:05:61:7d:8b:
         41:c3:1f:1a:33:14:bd:91:4d:7f:b1:e7:e3:94:c2:bd:5b:f9:
         28:67:ad:c1:25:61:3a:58:69:56:a9:b8:2d:f5:12:89:4b:8a:
         3b:f9:a9:40:a0:d0:12:da:5a:75:6b:57:28:57:ce:bf:86:ac:
         2d:9f:a1:17:d1:0d:f2:c4:c9:bb:9d:47:33:b0:c7:db:ce:4f:
         60:a5:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:17:44 2025 by rpki-client