Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/f5d70acb-490e-30d3-a50e-04955b8cdc82.roa
File:                     f5d70acb-490e-30d3-a50e-04955b8cdc82.roa (raw, json)
Hash identifier:          7DOVPwCp3V1blSlHdWjf7qpJuk6XWECo2H5sW6Y4M4I=
Subject key identifier:   F3:85:B5:FF:89:9F:47:DC:44:03:D0:9A:42:5C:90:DB:3D:56:B7:CA
Certificate issuer:       /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
Certificate serial:       010D0C9F4328584B0F1987E00E303E6DC4D4F900
Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/f5d70acb-490e-30d3-a50e-04955b8cdc82.roa
Signing time:             Tue 02 Sep 2025 08:16:16 +0000
ROA not before:           Tue 02 Sep 2025 08:16:16 +0000
ROA not after:            Mon 01 Dec 2025 09:16:16 +0000
asID:                     37740
IP address blocks:        98.158.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:19:87:e0:0e:30:3e:6d:c4:d4:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
        Validity
            Not Before: Sep  2 08:16:16 2025 GMT
            Not After : Dec  1 09:16:16 2025 GMT
        Subject: CN=8cb6354a-2aba-4f94-ae7c-55fffc1cfe8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:b1:e3:cc:65:c5:73:78:4b:04:47:0e:6e:
                    3d:e3:e4:96:d6:7d:9c:64:9f:bb:5d:7f:33:c8:5c:
                    6f:a5:3c:19:b7:80:38:63:fd:62:c9:29:b3:e0:fd:
                    34:ed:78:e3:39:86:9b:70:0e:d8:e2:bc:2f:b1:23:
                    2c:c0:c2:8c:fa:f7:a4:73:c3:b7:db:34:4c:35:f1:
                    a5:6c:95:77:d7:1d:89:92:95:56:6a:60:77:91:a8:
                    2c:ef:a3:2b:a6:33:9a:03:60:89:80:59:74:bd:50:
                    69:1c:7e:bf:41:4a:69:84:82:04:05:d2:03:c0:cc:
                    af:cf:2e:fb:45:b6:0a:36:c3:70:67:7b:91:0d:53:
                    04:c4:96:6b:c5:d6:a8:a7:85:54:ba:72:2b:5e:48:
                    2d:11:2f:78:1f:8e:23:7c:5c:aa:76:2a:dd:3a:84:
                    25:d2:c0:01:8f:df:6f:76:40:5c:8d:22:fe:05:9a:
                    0f:df:0a:5c:ae:57:ce:44:75:a4:96:23:37:dd:13:
                    b9:cb:5f:30:6d:0f:aa:97:8b:66:45:a1:1a:b0:5e:
                    6a:70:a4:5a:8d:bf:81:30:82:8e:d7:81:b2:d5:73:
                    58:ec:4f:cd:0f:c0:8f:4c:88:37:1f:73:e1:f3:37:
                    fd:28:9d:f1:d8:b1:e1:45:f9:26:64:51:90:eb:c8:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:B5:FF:89:9F:47:DC:44:03:D0:9A:42:5C:90:DB:3D:56:B7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/f5d70acb-490e-30d3-a50e-04955b8cdc82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:55:a3:25:41:e9:91:2b:a4:6b:78:d7:28:25:b6:1c:da:
         d6:e1:03:c8:c1:5b:0c:35:a4:4f:17:27:bf:31:c6:82:49:e9:
         b0:70:b8:19:72:10:bd:0e:a6:c4:c4:be:96:96:da:36:80:3f:
         d5:94:3f:07:c1:5c:91:fc:6f:0a:06:eb:f4:a0:c0:04:58:d1:
         fa:bf:df:31:39:cd:54:a4:12:ea:60:f9:e4:f9:a8:b6:64:cc:
         e7:51:33:bf:cd:9f:93:2b:d0:5d:c3:d5:87:cc:36:eb:d8:d8:
         db:00:63:7d:05:14:c5:3d:f5:08:77:2b:6d:e7:d6:e4:a1:ca:
         25:67:14:ce:c5:29:f2:78:70:93:db:55:3e:5d:a9:05:dc:b5:
         2f:b3:8b:58:1f:92:57:41:50:b5:58:fc:9c:3d:f9:a5:fa:ac:
         ff:77:2d:02:94:0c:91:20:24:57:6f:4e:73:fa:2b:69:51:8c:
         36:b3:dc:cb:c3:12:6d:06:60:a9:69:05:3a:48:f7:ba:31:98:
         2c:58:66:28:c6:c2:96:ec:1b:d3:6d:2a:a6:4d:05:73:ee:f2:
         0b:73:14:77:e3:11:c0:c9:30:8a:fc:62:35:8d:f2:79:c4:d9:
         f2:70:24:99:71:35:86:42:66:5a:7b:1f:35:85:b4:05:a2:e1:
         3b:d0:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:43:23 2025 by rpki-client