Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4176dde-2941-3bc0-ad3e-4cb97421a046.roa
File:                     f4176dde-2941-3bc0-ad3e-4cb97421a046.roa (raw, json)
Hash identifier:          o+3+dWgcJ0xxV+pFlRnHvdOu6CEBi2x+y3YCROGdsjE=
Subject key identifier:   08:AA:31:51:47:F1:52:66:DD:B5:0F:54:D4:86:54:B9:19:0A:08:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAF92FE019A706EA773180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4176dde-2941-3bc0-ad3e-4cb97421a046.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.44.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:f9:2f:e0:19:a7:06:ea:77:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c779dcfc-69c8-452d-a12b-273dbbf04358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:51:b7:7a:3b:eb:f3:83:6d:45:7e:0d:c4:
                    34:c4:ab:5c:bf:a4:d0:3d:87:5a:57:c8:0e:bd:4c:
                    19:67:08:d9:34:00:ad:b3:7b:c2:d5:27:57:2b:c4:
                    a1:4b:6d:63:ad:0b:d5:fb:bd:b7:87:03:5c:51:ec:
                    62:76:1f:09:80:69:02:60:be:48:0c:ec:60:80:a1:
                    05:e1:cd:23:1a:99:2b:28:7f:c4:c6:96:d7:07:59:
                    33:f4:8e:d9:2e:b4:ce:9f:26:ef:ac:22:d4:e5:2b:
                    dc:21:51:4c:2f:7c:c3:d6:50:b3:a8:3e:42:3a:cb:
                    40:09:26:e7:6f:1d:b0:0b:b0:09:f9:e4:09:27:95:
                    44:7a:1f:61:eb:2f:52:e4:bf:72:e1:ad:46:4e:1c:
                    82:3d:5a:88:b4:1b:0b:9e:58:de:18:5f:bf:c8:65:
                    99:7f:8a:01:12:c4:57:18:0c:19:91:a9:ad:31:61:
                    89:8a:37:ac:ae:ee:c7:93:c6:d0:ae:50:28:da:d9:
                    34:f1:e2:8a:b4:96:7f:52:32:67:03:6f:94:dc:26:
                    a4:0a:45:12:2f:1d:6d:fb:45:4d:e2:d0:3f:5a:df:
                    73:10:3f:39:13:0f:7d:51:6e:ec:37:d4:6a:7e:5e:
                    64:7b:31:41:50:d6:f8:87:44:2b:d9:1b:de:92:57:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AA:31:51:47:F1:52:66:DD:B5:0F:54:D4:86:54:B9:19:0A:08:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4176dde-2941-3bc0-ad3e-4cb97421a046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:22:d6:61:7d:c8:f4:01:af:77:2f:2e:a6:ec:df:92:c8:ba:
         ea:f1:11:d1:3f:61:94:24:af:fc:bb:cc:2b:d5:5a:17:e2:a2:
         b0:b0:d9:63:0a:6a:9e:df:11:9a:12:b7:b6:d7:29:29:09:f7:
         55:cc:ce:ff:06:8b:bc:79:c1:c1:a6:33:32:6f:80:b7:f4:05:
         f1:9d:ab:51:0f:79:e5:36:fa:24:9f:bf:80:19:94:ba:f8:e7:
         18:3e:c0:ff:db:aa:9c:8e:52:c3:f2:63:bf:bf:0b:b2:05:70:
         3d:62:82:5a:e0:ac:51:44:6e:ec:12:73:a3:a9:2c:80:9f:c4:
         cf:70:0d:41:a5:4c:a1:48:b4:99:a2:0d:e0:fe:5d:af:7f:7f:
         da:20:e3:6b:70:53:28:98:90:a2:83:94:ec:fd:ce:50:09:07:
         55:94:72:2e:a6:0c:00:2a:24:2b:01:b1:67:50:08:b8:3a:be:
         9f:4d:98:43:e8:53:19:8f:f6:0d:9c:49:b8:85:d9:86:89:75:
         46:2c:45:1a:4e:49:a9:21:83:8e:9e:b4:fa:01:77:7f:f2:55:
         2c:3d:15:3f:72:ec:bf:b6:a8:bf:45:23:7e:d9:9c:20:1a:95:
         60:cf:86:c6:75:38:c8:9f:95:fd:92:d3:06:a7:ae:ab:f6:7a:
         04:ce:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:41:11 2025 by rpki-client