Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa
File:                     801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa (raw, json)
Hash identifier:          KZLwzqD6N/mKpmUadRxyIjco7kjYgji+oiJDYMh1+Kk=
Subject key identifier:   63:17:C9:55:B6:5B:DB:9F:99:B0:26:FD:2B:50:B2:3A:DD:73:6B:4C
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584AFC1C0248FFD361B9DF68BAC0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     17241
IP address blocks:        75.98.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:02:48:ff:d3:61:b9:df:68:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=f8b601c5-61c0-48fc-b34c-47498e317bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:dc:6c:a1:e6:c2:13:2c:d0:a7:fe:8f:20:
                    45:ce:f4:85:72:68:7c:b3:de:29:0b:08:fb:a1:0f:
                    96:f2:ca:3c:12:c9:3a:34:ae:92:c6:5b:fb:96:08:
                    c8:07:24:ac:98:d4:c1:85:4c:d4:92:12:89:b9:1f:
                    51:61:f7:44:21:5c:d2:0b:63:c8:fd:ec:9c:d4:a5:
                    12:05:21:29:26:3e:a2:82:9a:fb:80:8b:7c:49:d2:
                    55:bb:a9:97:78:9b:ac:6f:53:05:fb:28:a5:6c:96:
                    ae:9a:e7:0e:0f:c7:fa:5e:ac:df:68:c1:f4:75:3f:
                    32:aa:ec:b1:33:58:9a:12:2a:ca:55:ea:6a:dd:05:
                    cf:59:87:43:45:e5:9c:d3:f5:b7:94:5e:43:b8:a2:
                    2f:6d:38:0f:12:ad:6f:bf:ff:6f:92:81:1d:76:b2:
                    48:ba:df:29:fa:13:3b:90:0d:fc:07:bc:46:39:f9:
                    dd:46:de:4f:36:35:ce:ab:b3:2e:54:57:32:4e:2c:
                    58:19:b2:a1:f0:d7:b8:3e:7a:f3:41:36:90:93:e3:
                    a8:04:53:a5:fd:61:d0:92:fc:c7:86:cb:0c:6a:38:
                    5c:03:76:1f:fc:ce:bb:2d:02:88:85:5c:37:d1:67:
                    56:f5:75:7a:a8:98:02:46:47:03:17:81:48:3b:ba:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:C9:55:B6:5B:DB:9F:99:B0:26:FD:2B:50:B2:3A:DD:73:6B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:bc:0b:a1:70:0f:c4:8e:c8:e8:8e:e2:af:78:e9:ab:a0:
         f3:8e:ab:e7:da:a4:39:e8:81:55:93:87:23:01:4e:0c:31:c0:
         43:f7:40:ec:a6:3b:d0:09:69:d6:ad:c4:5c:c5:44:63:de:de:
         11:28:b3:ec:59:ca:67:8b:5b:3a:3f:97:3c:fe:39:ac:a7:48:
         67:53:4e:fc:fa:13:1e:73:08:ba:25:89:34:82:25:c7:ba:da:
         f2:6f:7a:56:95:1e:e3:6b:6d:4e:a8:5e:71:94:bb:78:a1:7f:
         2a:39:06:9b:2f:5b:9f:8e:54:97:97:35:49:7d:d5:de:66:49:
         66:b7:9b:dc:ae:b5:99:23:18:be:cd:a1:f2:79:ec:df:c8:03:
         c3:fc:50:cd:25:72:cd:13:d0:7e:d7:07:ad:96:ec:ba:12:8d:
         6b:74:30:43:6e:31:d4:85:f9:5f:8d:2b:f7:ed:b1:23:16:1c:
         b5:31:1f:b3:12:4a:ca:23:32:d2:b4:02:29:81:9d:ab:d8:9d:
         79:a2:85:2d:16:0d:b1:a7:8e:96:fb:c6:ff:98:ac:7a:38:1e:
         90:f7:05:f5:60:11:3f:2a:10:5c:ed:6a:a6:cf:bc:9d:92:a3:
         02:cf:77:7e:61:76:c4:5c:f0:6d:e1:b1:69:dc:d7:92:9e:e2:
         32:46:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:01:36 2025 by rpki-client