Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32995224-c8f9-35b2-8340-5a7731f70162.roa
File:                     32995224-c8f9-35b2-8340-5a7731f70162.roa (raw, json)
Hash identifier:          alnCWrrL4C9lERSPjYmLFsi5wTF62WkAA71uaExNW2E=
Subject key identifier:   E2:FE:E9:4C:BA:C9:96:8E:93:64:14:DA:9C:2D:79:13:44:CB:C2:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB5D7BB2B742959D3ED0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32995224-c8f9-35b2-8340-5a7731f70162.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33491
IP address blocks:        98.226.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:5d:7b:b2:b7:42:95:9d:3e:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=a293c77b-749b-4e34-817d-65e1e0e4e501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:bc:ae:7b:ed:bb:d5:e8:c4:89:fe:38:cf:
                    91:9c:ff:6f:bb:0d:75:f5:08:09:81:a2:9c:16:d5:
                    67:42:88:a9:99:f8:b2:a7:a4:d3:67:5d:ef:d5:db:
                    d8:86:3f:80:95:60:5c:e2:3c:4d:25:f1:1a:a5:df:
                    67:63:30:1f:fb:4f:30:32:29:ce:f3:d8:df:f5:0b:
                    99:a5:b3:5b:8f:39:48:d4:1f:bf:6e:c9:ba:e2:93:
                    7a:de:9b:6f:c0:dd:d5:08:a6:2e:f5:86:c4:82:ea:
                    12:12:8c:d0:34:2a:86:4f:23:02:75:f4:f4:4f:cc:
                    2d:d0:5c:4e:b0:a5:f4:49:4d:eb:ff:0f:1f:a7:18:
                    a7:01:22:1c:40:e4:e5:09:d7:79:47:81:ec:25:7c:
                    dd:db:3b:d6:60:ee:94:42:68:ab:47:e2:75:b3:1c:
                    f9:3e:e0:1c:3a:fb:c2:62:36:e3:af:5d:09:f2:16:
                    1e:b5:5f:48:40:76:ab:bb:ca:0b:0a:cf:29:9f:ea:
                    b7:e6:6d:e0:5d:25:af:d9:89:40:e0:5f:ec:80:8c:
                    0c:09:da:74:69:f2:a5:dd:ee:6e:7f:ca:2e:7f:7b:
                    bb:3e:ba:c3:b9:cb:99:dc:5c:c7:f7:48:ae:be:00:
                    ba:93:f9:90:fd:bb:fe:a3:5a:f4:89:94:89:bf:5e:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:E9:4C:BA:C9:96:8E:93:64:14:DA:9C:2D:79:13:44:CB:C2:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32995224-c8f9-35b2-8340-5a7731f70162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.226.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:49:d7:f2:14:d8:35:bc:30:0d:67:5a:6e:50:2f:3e:e5:
         3b:61:73:ad:e0:c6:73:a6:93:b5:bc:bd:fb:ba:19:dc:5c:72:
         8c:e4:cd:3f:60:96:82:a9:b0:d6:45:e6:35:71:29:eb:bf:95:
         39:bd:3f:7e:26:ee:67:a3:96:9d:2c:3a:ca:e3:e1:9e:0e:4f:
         77:a9:f6:de:c3:22:ec:f9:06:37:6f:5a:2a:aa:7e:92:97:b9:
         83:d7:b2:09:d3:a3:4d:95:c4:2f:c4:c8:1c:5c:d1:36:e7:10:
         99:37:f3:72:2a:77:0e:64:fa:45:98:5c:31:db:42:77:66:ba:
         95:a6:d5:2b:f4:61:68:9f:5a:d0:c9:49:03:61:94:1d:6e:4d:
         0d:6b:42:e5:62:71:77:91:0b:11:3c:e6:01:2b:18:dc:71:ac:
         b8:a2:b2:c2:a5:04:52:5d:60:b3:18:6f:f4:08:da:5f:f7:96:
         1e:36:7c:57:83:1f:92:d2:df:f5:99:b0:e4:0e:15:e3:fc:13:
         53:3d:8e:98:c6:88:21:a9:c2:f6:5b:ea:4a:36:c6:bd:c3:fe:
         49:f2:90:cb:3f:66:ef:04:cd:75:1d:84:fc:17:58:3b:6b:6d:
         c2:07:26:d4:af:50:66:16:7e:81:73:d9:00:d2:21:85:87:5b:
         ac:72:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:31:50 2025 by rpki-client