Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0152b678-7622-3d63-9146-9c70d1294927.roa
File:                     0152b678-7622-3d63-9146-9c70d1294927.roa (raw, json)
Hash identifier:          CduE/9XWOwH4GNd7Y1IxUpTZy4AJqSMBBPO2jvyMUFk=
Subject key identifier:   A4:59:32:24:00:5E:94:8C:51:41:17:57:05:A5:86:DD:04:A5:EB:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08EA68B06C0476E2EC3740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0152b678-7622-3d63-9146-9c70d1294927.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.35.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:ea:68:b0:6c:04:76:e2:ec:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5cfcacca-5937-453b-a14e-8a7bdf889033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:9b:d8:47:92:8b:61:db:08:db:ae:a3:8f:
                    06:0e:43:16:43:ec:b3:fd:e3:e4:e5:10:6a:56:90:
                    f6:74:60:32:af:d5:10:13:af:71:f2:7a:35:f2:56:
                    6d:c1:ef:ef:5d:c2:20:3e:75:e6:5c:c1:4c:34:98:
                    3e:c4:1b:02:cc:58:51:c1:c5:38:77:66:50:bf:66:
                    a0:03:b3:68:a9:15:96:f3:ad:84:a9:fb:78:3e:7b:
                    73:6d:81:ec:d1:f8:e5:75:95:32:e4:7d:d7:1c:26:
                    b2:73:88:c1:7a:53:a9:34:da:9b:bd:33:b4:ae:ea:
                    30:61:33:06:de:56:38:bf:bd:84:ca:82:d9:70:94:
                    67:a6:ef:0b:44:50:3a:f7:6b:80:7b:0b:27:00:ba:
                    16:94:41:4e:a2:9e:7e:49:0b:49:7d:ad:39:56:09:
                    81:20:9c:38:04:42:2a:8d:38:be:ca:a3:83:c2:46:
                    12:2f:5c:62:ad:d9:3c:48:ec:c3:36:45:ef:dc:75:
                    ac:80:28:8e:66:3f:e0:ba:4c:67:18:22:5a:b4:2b:
                    66:b4:32:26:01:2a:ab:2c:c9:69:6c:f3:4c:96:db:
                    77:99:ca:99:a3:9e:cd:01:69:e2:22:58:a0:b4:65:
                    01:9e:08:f3:aa:ef:2b:f3:5f:0a:49:00:42:f0:fc:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:59:32:24:00:5E:94:8C:51:41:17:57:05:A5:86:DD:04:A5:EB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0152b678-7622-3d63-9146-9c70d1294927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.35.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:8d:c7:61:db:62:8a:97:e1:f6:89:3d:55:1c:63:c2:52:
         50:a2:f9:eb:8a:52:8f:35:9a:e3:9d:60:88:48:e8:bb:68:94:
         c8:14:78:bd:56:9a:f8:be:15:f6:08:85:35:89:d5:7e:fc:9b:
         73:ce:4c:aa:2d:47:91:08:d5:d0:72:ab:c9:8d:96:fe:d8:01:
         37:37:ea:76:79:4d:7c:61:dc:5b:30:62:1f:83:69:20:d4:3a:
         11:24:54:15:89:7f:53:fd:1c:c3:de:d4:a9:5c:a0:9b:84:5b:
         f2:85:b3:70:42:2a:8f:3c:e2:39:ee:59:1c:a6:08:0a:30:ad:
         8e:f7:d9:86:e3:9d:70:6d:4c:b0:99:39:07:92:d6:c9:5f:9c:
         63:85:db:1d:52:be:c0:e4:08:6e:a7:07:97:57:f3:9c:ad:fa:
         f8:35:f6:a3:0b:10:ed:4c:ee:04:df:bd:45:f3:f3:0d:9f:9e:
         c9:cb:4d:88:a4:db:cb:85:de:6f:d1:03:e6:61:aa:a4:92:bb:
         18:7a:ee:e9:5c:9d:3a:b9:cb:0c:48:60:a6:6c:da:ce:8c:64:
         ef:3a:e0:6e:8e:af:a9:85:09:b3:f7:21:a3:82:97:cc:0b:d5:
         c0:c3:dc:30:30:79:49:d2:d4:71:10:0c:a6:7d:bf:0c:2c:6e:
         41:ad:a2:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCOposGwEduLsN0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NWNmY2FjY2EtNTkzNy00NTNiLWExNGUtOGE3YmRmODg5MDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMWb2EeSi2HbCNuuo48GDkMWQ+yz/ePk5RBq
VpD2dGAyr9UQE69x8no18lZtwe/vXcIgPnXmXMFMNJg+xBsCzFhRwcU4d2ZQv2ag
A7NoqRWW862Eqft4PntzbYHs0fjldZUy5H3XHCayc4jBelOpNNqbvTO0ruowYTMG
3lY4v72EyoLZcJRnpu8LRFA692uAewsnALoWlEFOop5+SQtJfa05VgmBIJw4BEIq
jTi+yqODwkYSL1xirdk8SOzDNkXv3HWsgCiOZj/gukxnGCJatCtmtDImASqrLMlp
bPNMltt3mcqZo57NAWniIligtGUBngjzqu8r818KSQBC8PxQ+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRZMiQAXpSMUUEXVwWlht0EpesyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDE1MmI2NzgtNzYyMi0z
ZDYzLTkxNDYtOWM3MGQxMjk0OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+wjcdh22KKl+H2iT1VHGPCUlCi+euKUo81muOdYIhI6LtolMgUeL1W
mvi+FfYIhTWJ1X78m3POTKotR5EI1dByq8mNlv7YATc36nZ5TXxh3FswYh+DaSDU
OhEkVBWJf1P9HMPe1KlcoJuEW/KFs3BCKo884jnuWRymCAowrY732YbjnXBtTLCZ
OQeS1slfnGOF2x1SvsDkCG6nB5dX85yt+vg19qMLEO1M7gTfvUXz8w2fnsnLTYik
28uF3m/RA+ZhqqSSuxh67ulcnTq5ywxIYKZs2s6MZO864G6Or6mFCbP3IaOCl8wL
1cDD3DAweUnS1HEQDKZ9vwwsbkGtoio=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:58:02 2025 by rpki-client