Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa
File:                     18447f46-ae19-3da6-8932-a57b8e80e0a6.roa (raw, json)
Hash identifier:          /atxH2dCHU6uZktlxfqrLaWt8JDLsmjCRs8Vl0MPBRs=
Subject key identifier:   72:75:D0:95:53:98:BA:02:D9:6E:E6:CE:E2:FA:F3:31:4C:DA:C6:D1
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584B0CDC1D5844C0A911D049CF60
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     14956
IP address blocks:        144.172.90.0/23 maxlen: 24
                          144.172.92.0/22 maxlen: 24
                          144.172.96.0/23 maxlen: 24
                          144.172.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1d:58:44:c0:a9:11:d0:49:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=8d589c8c-590d-470f-9467-5991cde2ad63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:90:7a:52:38:42:ff:5b:31:dd:d1:55:a7:
                    0c:77:23:2c:fc:7d:e8:49:23:25:75:5c:b7:35:4a:
                    42:b7:26:2b:44:c5:80:a7:d5:25:73:02:72:a9:87:
                    2c:f2:c3:39:84:d3:91:c3:bb:88:40:03:06:b0:a0:
                    41:f4:9f:bf:9d:9a:a6:6c:bf:99:64:3d:a1:5b:26:
                    f5:2a:aa:3e:7a:fd:20:73:0a:b3:b3:d6:56:83:3d:
                    82:c0:f5:3e:1b:5e:53:4a:51:6f:6b:73:b7:63:1c:
                    e1:50:cc:c2:f8:b4:52:99:2b:b8:31:61:75:d6:4c:
                    1b:73:9b:08:5e:9a:4a:b6:cf:60:17:c0:7f:fe:8e:
                    1d:30:97:11:4f:79:45:74:b3:11:ce:82:72:c8:34:
                    84:6d:18:4a:6c:15:9c:2d:90:c0:2f:02:ce:64:fd:
                    8c:bc:42:a9:8d:7e:2d:79:51:6b:45:68:3d:b0:f4:
                    6c:82:66:42:c8:a5:2c:c3:77:04:8a:59:3a:4f:e7:
                    c7:fe:0e:b4:f5:3c:26:ab:74:d8:01:bf:e6:04:50:
                    85:1f:b1:67:49:35:88:9a:4a:f9:72:a3:d7:02:28:
                    3e:39:a6:52:6c:ec:59:d5:8f:ce:c6:9a:cb:b0:17:
                    7e:ab:c6:90:23:8e:e9:ae:73:47:3c:3f:e3:a1:86:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:D0:95:53:98:BA:02:D9:6E:E6:CE:E2:FA:F3:31:4C:DA:C6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.90.0-144.172.98.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:92:61:f3:17:64:37:5a:4f:54:77:8a:fc:c0:55:ba:e6:
         75:30:73:df:fd:f9:90:81:c0:d8:4e:9d:70:f4:1d:59:0e:67:
         ac:ba:0d:0d:24:ab:0f:ca:99:df:c3:d9:a9:e4:6f:54:59:b0:
         df:e9:2a:60:c9:13:4a:f0:b2:d4:fc:42:bf:26:62:0b:4c:49:
         a2:e3:01:e1:6d:fb:6c:e0:34:9e:9b:61:e3:7f:a5:80:c6:76:
         99:a4:84:c9:10:79:c1:e3:f8:ee:33:61:77:bc:1c:c5:1c:49:
         bb:7e:24:5e:26:72:c7:21:54:50:1b:a5:2c:fb:61:cf:b5:6a:
         b4:b0:f3:a3:9e:3a:b6:79:a0:60:8d:23:49:8a:0f:81:d2:b3:
         aa:a5:39:ee:57:5c:69:b2:45:e5:f3:5c:eb:fd:04:33:8a:fc:
         73:a4:06:40:83:49:e5:99:02:ce:e5:21:b3:a4:16:37:73:5b:
         ea:f7:03:33:ae:0c:2d:70:d9:8e:d1:85:d9:d8:3a:49:7f:1a:
         bf:01:19:17:92:87:84:0c:fe:ce:7a:b1:21:fc:ef:41:76:6d:
         dc:3f:aa:0d:d5:8e:c9:23:62:6f:ed:5f:36:22:65:b0:08:15:
         27:af:80:9a:fd:ea:82:e9:2c:cd:a3:27:5c:d5:c2:dd:fc:b4:
         38:3e:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 15:40:09 2025 by rpki-client