Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/046d3bfc-d427-3694-80ae-0c88bff12d5f.roa
File:                     046d3bfc-d427-3694-80ae-0c88bff12d5f.roa (raw, json)
Hash identifier:          N6nu0mvx6p08IEGkfee/Pa3YWWsyq3WcuCmN3C4RdXc=
Subject key identifier:   DA:B8:5F:B1:4E:52:7F:6B:B1:34:C9:38:D6:CB:12:29:25:87:A7:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFC309DA40809ADA39B580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/046d3bfc-d427-3694-80ae-0c88bff12d5f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.215.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:c3:09:da:40:80:9a:da:39:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=38a95c1d-00f7-4d4d-a17f-dc1152ef4200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:62:49:9e:2f:8b:bc:32:ba:3b:78:f3:e1:77:
                    05:62:97:37:5f:55:3f:bb:38:d4:02:56:3a:11:c3:
                    b0:89:22:20:13:08:c8:6b:64:17:a7:c7:5d:b0:a7:
                    85:cf:89:04:8c:9e:32:47:b1:bf:df:70:da:92:b4:
                    62:7d:8d:5b:9a:29:3d:c0:eb:36:d3:da:00:7e:86:
                    fc:e4:32:29:ad:24:bf:40:fe:32:3c:7d:30:e0:e7:
                    87:b4:a3:a4:a6:87:e1:ae:2d:06:17:5e:20:80:1d:
                    32:2a:15:29:8e:d4:13:e8:27:ae:28:aa:d1:b9:2b:
                    40:27:db:fe:ea:b8:5f:1a:68:46:8f:23:b6:dd:8c:
                    18:54:d4:4e:0f:69:f0:44:cf:fe:ec:1c:22:85:55:
                    b9:2c:a1:fa:c2:50:a4:5c:01:2e:12:26:e8:72:c8:
                    9d:b4:11:74:45:0c:d6:1f:1c:bb:ca:e1:e3:b0:f1:
                    11:65:75:d1:81:6a:8e:18:63:a8:87:dc:ae:69:32:
                    a6:4f:3c:cd:e6:5b:3e:e8:50:bc:c3:4e:40:51:22:
                    a3:a1:39:7b:67:94:94:21:37:60:86:71:eb:75:89:
                    7f:20:e8:5a:5d:b8:8b:cc:9a:c0:3a:cf:84:70:a0:
                    21:9c:bb:37:cb:38:29:3d:e2:56:8e:80:1b:9a:4e:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:5F:B1:4E:52:7F:6B:B1:34:C9:38:D6:CB:12:29:25:87:A7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/046d3bfc-d427-3694-80ae-0c88bff12d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:32:95:b1:c0:7a:ab:ef:8f:70:8f:f4:ef:fe:43:a2:18:43:
         df:04:8e:52:d4:c6:f2:0c:5c:9d:d1:d2:21:f8:16:a7:5f:09:
         9e:a0:6b:7e:e8:ca:a2:ff:8e:a2:ee:4c:cc:03:89:1e:1e:e4:
         bb:ac:23:5a:10:ec:25:7b:1b:1b:4a:e2:4a:c5:25:63:b9:dc:
         8b:ec:f6:84:f4:15:c5:24:c2:5e:62:6f:c1:a1:81:0c:d9:4e:
         fb:c2:9e:8f:c5:80:94:8d:be:08:2f:38:3c:8c:f0:c1:0e:14:
         4c:30:1a:62:b4:8d:65:f7:e8:2c:d3:3d:7b:6f:53:5d:7d:86:
         c5:5b:4f:6d:f9:30:56:25:ac:6c:3c:43:2b:70:04:54:6b:97:
         50:bc:ab:2c:10:95:3f:8b:56:47:79:2f:8f:3e:59:c8:3e:f9:
         3f:48:42:fa:f9:dc:f0:cb:a7:ef:9e:57:52:4b:62:4d:24:e4:
         bb:59:45:8e:95:06:ec:05:5d:30:79:67:94:89:07:3c:83:13:
         10:35:d5:9d:ef:75:8a:42:e8:7f:49:84:78:3a:ca:1e:bd:6a:
         89:fe:f9:37:14:59:08:46:53:7a:15:61:32:5d:d8:e2:80:b5:
         f6:63:df:03:21:40:4a:b4:81:e8:44:11:c3:4a:4e:36:24:7f:
         29:57:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:21 2025 by rpki-client