Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa
File:                     f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa (raw, json)
Hash identifier:          FvpEYte9A4zAEFM8dfA4MtGvW9gOxQ648X5HqkI4IdU=
Subject key identifier:   3C:0C:A2:C7:C1:0D:04:B2:D8:BA:B9:0E:AE:DA:DE:6A:9E:FE:64:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB40C80FF1E2C552A6A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33651
IP address blocks:        98.42.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:40:c8:0f:f1:e2:c5:52:a6:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=515ae09d-8345-46e9-9266-fe35aba47cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:30:0d:4d:27:f5:55:24:ba:4a:fc:84:ff:
                    ae:80:d3:dc:e1:a7:01:f5:22:f3:e2:f2:85:de:72:
                    5a:f7:12:3a:f1:6b:b0:2a:91:98:d7:cb:a1:f7:0e:
                    9a:40:4d:39:b1:42:f5:c3:09:d4:26:d4:82:34:ae:
                    d8:e8:c4:b4:7b:ab:6f:28:7a:c8:e2:6e:d6:9c:81:
                    14:68:a4:73:19:6b:c9:be:5d:ba:54:6d:9f:02:ce:
                    8d:84:12:40:10:da:ce:d5:c8:c4:6c:7b:42:49:03:
                    8e:b3:59:ad:f9:69:9a:90:8d:e7:d7:48:d0:be:93:
                    85:5b:8d:26:a0:dd:3d:e9:97:ba:a6:99:4a:43:60:
                    e7:7e:e5:2c:5f:ce:42:e9:e2:11:07:47:49:4a:b7:
                    f1:1c:21:d7:c5:33:24:f4:91:6b:3c:74:7b:a1:53:
                    76:f9:35:c2:86:23:94:be:ac:d5:3d:78:3a:30:de:
                    30:c8:87:05:b9:5f:5c:3b:9a:84:82:57:97:45:23:
                    b4:b9:ea:a8:93:f7:c6:06:b1:ae:80:14:36:4a:a3:
                    e9:7d:fd:ac:d0:81:b9:a8:45:bd:7a:87:80:91:1a:
                    d5:f4:3b:8b:54:a0:f4:2f:78:ee:b0:32:1a:16:65:
                    e3:b3:35:78:ff:34:a5:f0:58:a3:08:92:83:bf:a2:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0C:A2:C7:C1:0D:04:B2:D8:BA:B9:0E:AE:DA:DE:6A:9E:FE:64:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4538b77-9b87-368f-88e8-5a7a5a2dbbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:47:c9:30:c3:0d:15:51:f6:b8:82:9f:af:58:4c:5a:8c:66:
         99:9b:b2:86:a3:4c:30:3e:e1:49:7b:31:e6:96:a7:87:42:81:
         7e:b2:12:34:f9:45:99:ee:43:1c:3f:aa:e1:a2:b5:1e:e4:5e:
         f9:ec:b2:b0:19:70:5d:a2:15:1d:07:c7:38:12:c1:1b:5e:1d:
         40:ae:2f:05:2f:26:24:83:f2:10:45:e6:44:dc:72:ec:b5:6f:
         34:4c:7a:84:86:da:6f:21:8c:52:d0:ba:5d:6e:d5:8c:91:ac:
         12:eb:24:9c:ac:4b:d3:f1:16:f6:de:b5:14:87:c2:0f:6e:62:
         dd:31:b4:2f:ff:16:ee:42:38:f6:a5:4a:5c:6a:1a:0a:66:fd:
         ae:5f:a1:0f:9e:83:65:67:10:7d:83:12:0e:bc:84:0e:6b:53:
         ea:90:13:14:71:44:49:ae:f5:96:77:b4:96:8d:c1:6d:9c:be:
         f1:93:a1:48:10:0a:26:70:42:18:7a:ca:06:d2:f2:5d:9d:d4:
         16:34:20:ca:2a:db:b0:b9:65:3b:0b:34:29:78:18:24:cd:71:
         31:9a:16:ad:c6:0b:20:43:70:3e:9c:36:87:0c:11:9f:ae:a9:
         50:31:dc:65:42:79:ec:69:34:87:6c:35:5d:aa:78:e1:66:94:
         1c:aa:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:16:37 2025 by rpki-client