Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa
File:                     23c73c80-b368-335e-8b8c-0a8d889b6664.roa (raw, json)
Hash identifier:          K2Vo9aJ6TdlKaYf2B4ys/xcwB2PoWauzqoRBUrncPEk=
Subject key identifier:   0A:31:EC:69:F4:5D:EB:64:92:60:1F:A8:6A:42:7A:71:26:8D:8E:F1
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584B99D7A2D00BC3A22D879E3060
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14956
IP address blocks:        144.172.74.0/24 maxlen: 24
                          144.172.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a2:d0:0b:c3:a2:2d:87:9e:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=a867c649-f13d-443a-9230-80508f451f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:85:09:2b:8c:1e:ed:55:2a:92:33:1c:c8:
                    7a:a0:1a:b2:90:cb:5e:7e:09:fd:6c:2e:d6:75:e4:
                    e1:43:1e:83:65:3d:41:3e:c0:1e:6f:17:75:71:0b:
                    e4:2e:cf:b8:cf:c5:94:40:f1:d6:02:05:73:92:01:
                    6f:8b:52:9f:a9:41:24:f7:8e:f1:ed:28:d8:35:36:
                    d0:da:ce:35:94:db:a8:c1:a5:9d:ad:0d:74:cb:94:
                    0f:12:41:d7:f1:8b:f4:c4:f5:90:ec:73:66:ab:86:
                    e6:64:df:72:c9:40:cc:24:e7:e9:1b:10:a9:18:5b:
                    96:4c:41:c1:4c:c8:8a:f5:e7:e6:8c:50:58:79:2b:
                    02:3f:c8:6e:33:5a:55:3a:bd:23:c9:22:5a:cc:62:
                    9a:a6:1d:5a:aa:03:48:01:05:b8:66:f4:c2:9a:c4:
                    e1:25:53:ec:be:cb:37:c7:6d:35:ab:b9:6a:49:fc:
                    e7:66:94:d3:80:d4:6d:9e:f6:96:3b:b0:e3:f7:cf:
                    5e:d3:94:ce:3b:93:21:5b:8d:45:b4:cf:b6:cb:e1:
                    98:ad:9f:f8:ee:4d:ee:ba:87:82:d2:d3:54:8e:e0:
                    2a:24:4f:a2:e4:62:e9:cc:71:5a:63:3c:3a:43:e4:
                    fb:14:db:eb:af:b9:5f:af:ff:d2:a2:16:29:91:f5:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:31:EC:69:F4:5D:EB:64:92:60:1F:A8:6A:42:7A:71:26:8D:8E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.74.0/24
                  144.172.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:c3:2a:5b:f9:eb:6d:2b:7d:e0:c5:78:b1:06:75:e6:51:
         d8:a5:f1:33:90:1b:2d:9d:79:11:c2:43:e0:85:7b:19:cc:36:
         7d:16:45:f8:76:1f:13:4a:42:c7:d3:c1:47:e4:dd:f7:5e:14:
         bf:2f:a7:94:9b:0e:92:ef:1a:9d:eb:80:2e:7f:11:fd:3a:ab:
         a0:d9:80:27:70:01:92:c6:b8:c6:02:f9:21:ef:65:7e:c3:82:
         d1:87:4d:c7:9d:f4:ae:84:4c:3c:2e:e1:f6:2d:d5:6b:ae:1e:
         ff:bd:e2:57:7d:a6:8f:e1:83:a0:0e:40:9e:39:f8:a9:2b:34:
         61:ca:74:21:4c:7b:d3:ff:c3:81:c8:df:9c:44:91:5e:cf:ef:
         49:49:2c:b8:66:cd:c1:6d:18:c7:4f:30:ee:f0:77:b7:52:78:
         8a:23:cc:95:e7:c2:1f:5f:c6:4b:eb:ad:c5:c0:05:bc:92:9f:
         f9:2a:a8:83:84:ea:07:6e:2a:a9:76:44:9c:f2:c0:09:dd:74:
         76:47:6d:63:39:76:2f:1c:85:64:90:3b:85:72:fb:76:70:e8:
         cf:21:d2:7e:d2:72:a5:8d:b1:3c:ec:6f:ea:fe:d3:fc:cc:e1:
         4b:60:89:03:39:82:3f:95:5b:28:63:a6:75:17:74:14:3f:b8:
         e7:d0:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:53:25 2025 by rpki-client