Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa
File:                     f22cd3f7-789c-3752-839b-38ae727d4e3e.roa (raw, json)
Hash identifier:          HCSsAyJEy6ml7sMynr8bpO2cLGkD7rCekxgfH2AxUYI=
Subject key identifier:   5A:07:0C:BB:FE:C5:65:95:37:6B:D9:62:5B:BC:CA:D2:BB:AE:25:B4
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584B0A1167DCE32F5E42255BA280
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        198.97.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:67:dc:e3:2f:5e:42:25:5b:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=388d2e83-f033-45c2-b0a0-b590f41e4cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:99:d3:ff:7e:58:3d:aa:03:70:df:80:20:
                    a4:5e:72:0e:ee:cf:8c:1c:5b:b4:65:c5:98:ff:03:
                    6f:e3:98:ab:24:9d:a7:cc:e0:b2:a5:78:19:bc:c0:
                    c3:3f:c3:42:c5:15:e2:db:b7:9e:e6:83:81:02:90:
                    09:84:a5:81:9f:5e:17:1b:07:5a:d8:7b:fb:0b:30:
                    a3:f8:67:b0:ad:83:4e:e5:c2:5f:eb:29:92:99:6c:
                    6b:08:c3:8c:76:b4:96:d6:cc:1a:e0:60:ae:27:0a:
                    78:c0:98:2d:9a:0f:a1:d9:6b:0d:2d:6c:f9:2c:ff:
                    2f:a4:45:13:f7:90:b7:c5:bb:ff:77:96:af:8f:99:
                    3f:5e:56:4a:89:f7:41:f2:60:96:49:1c:b4:ab:20:
                    98:95:23:d7:44:25:ac:85:d1:b1:cf:99:06:50:42:
                    51:21:48:76:f1:e6:c2:45:3f:36:fd:e5:11:15:d1:
                    8f:86:6d:ef:80:23:e0:be:63:09:76:a0:97:e2:5e:
                    b8:4b:ad:03:6b:fe:68:6b:20:ac:ab:67:8b:af:f3:
                    6b:3d:dd:9f:f7:5a:48:2a:b2:74:6f:31:f3:36:d3:
                    80:b9:25:96:93:ab:7f:4d:cc:7f:aa:55:e0:ec:55:
                    53:a2:a2:8b:dd:21:9c:a4:92:2f:77:48:93:d8:93:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:07:0C:BB:FE:C5:65:95:37:6B:D9:62:5B:BC:CA:D2:BB:AE:25:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:44:6b:5c:97:f6:cc:f0:38:e1:a3:25:4b:01:af:45:c2:6c:
         7c:ef:56:bd:a4:56:07:31:1e:c3:fe:5a:71:23:15:90:27:01:
         58:48:02:ef:d7:b3:aa:81:f3:c4:04:ea:c9:3b:5b:7e:5e:9c:
         de:49:37:c1:0c:c0:ef:c7:cf:6c:f5:82:07:4e:6c:46:fd:ea:
         9a:ee:50:d2:ce:15:77:26:c6:57:5f:ab:7a:2d:2e:ac:e8:f3:
         12:b3:b6:6c:ce:18:7d:d0:44:03:03:de:9b:fa:e0:fe:3d:93:
         b2:ce:e4:20:5f:c8:dd:b2:c6:ec:30:36:81:7e:9f:d4:31:90:
         05:e6:f4:b9:c9:c6:0a:92:03:e8:2a:3e:52:ce:4b:29:50:d1:
         ed:5f:fa:0a:b2:b0:df:50:90:82:6a:6c:48:e2:05:ba:a4:55:
         33:c2:3a:0a:08:c8:02:73:1f:52:e2:d5:43:ae:48:d9:6b:c0:
         5b:a8:1c:68:77:8c:ee:67:b8:16:69:ac:8f:4e:95:57:c4:e8:
         1d:8c:c9:fa:c5:8f:49:b9:c8:5b:2c:1f:43:b5:cb:12:63:dd:
         cd:b3:8b:43:41:74:bb:b9:20:f2:3f:a8:8c:46:99:35:8a:a4:
         3b:1f:fb:d6:85:47:78:03:ce:dc:78:7c:bf:ba:14:90:ff:41:
         9e:de:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 22:11:15 2025 by rpki-client