Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f1d2987-f59e-38bd-9453-57a7372dfcf6.roa
File:                     1f1d2987-f59e-38bd-9453-57a7372dfcf6.roa (raw, json)
Hash identifier:          5C4mBvfH/ZUGM07ErNZBbawr79wTEzFby2kBxaRZNOE=
Subject key identifier:   55:77:BB:03:31:14:B7:75:8D:29:62:03:EE:0A:42:CD:4F:21:CE:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4327E6A651642739A05F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f1d2987-f59e-38bd-9453-57a7372dfcf6.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.201.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:7e:6a:65:16:42:73:9a:05:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=3e22b72e-cab0-422f-b84e-05ee9cb654a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:60:5d:31:e8:f2:40:c2:4c:35:92:af:d3:
                    fb:66:40:5e:e5:d8:5b:ab:ad:5f:86:d4:11:90:37:
                    84:9b:ea:a5:8d:32:36:61:09:bf:00:96:c6:bd:b5:
                    6b:af:27:b9:11:81:fa:dd:38:7f:57:2c:f4:82:1a:
                    cf:a3:7a:20:ed:86:ed:d0:89:2c:f9:06:6b:ed:78:
                    30:46:11:14:a3:76:79:2e:27:61:24:5d:86:f4:4e:
                    59:07:20:b5:a8:2e:21:59:7c:b7:38:c4:68:56:87:
                    7e:f9:3e:9b:da:d5:f0:67:9e:84:3a:4a:7b:98:3f:
                    8f:73:dd:62:ca:57:16:e7:d7:e2:13:d8:cb:63:30:
                    c8:8e:b0:22:fb:64:ed:ec:7d:b8:f0:de:43:8c:30:
                    d8:de:7a:b3:f7:07:c9:fe:51:ba:95:17:5c:2d:da:
                    0b:2e:18:c3:09:3c:72:a7:b7:a5:c3:67:0f:0d:be:
                    0e:dd:27:5a:0b:ff:f2:68:be:f6:a0:2f:97:9c:57:
                    3d:03:63:0c:d4:42:dc:51:9e:84:a3:b1:41:74:fd:
                    ff:7d:b4:69:05:b9:c1:cf:7e:b0:da:af:88:51:72:
                    29:b9:f0:5c:00:69:5f:da:39:63:c8:1f:0d:c4:9b:
                    34:25:c0:fe:73:82:b3:7a:2e:0a:6d:d6:f2:0b:8b:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:BB:03:31:14:B7:75:8D:29:62:03:EE:0A:42:CD:4F:21:CE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f1d2987-f59e-38bd-9453-57a7372dfcf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.201.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:7a:55:6f:49:13:c2:09:74:58:94:e6:75:b3:bf:8d:3a:3f:
         b0:b0:72:1f:f4:63:5e:e2:5b:f6:6d:e9:00:e9:ad:4f:7b:7c:
         32:9d:16:06:b2:53:bf:f0:cf:c0:98:c0:2a:a7:43:a5:6f:b3:
         c5:5c:38:9c:91:06:06:8d:ce:ca:a8:81:c6:98:f3:bf:5e:bb:
         98:ac:8f:50:fe:fe:d8:a0:55:27:4c:ea:85:e3:04:8c:3f:b7:
         5c:ce:4f:f8:66:bd:49:d2:94:9f:ed:2f:c9:89:40:ef:bc:7e:
         f9:ea:86:33:f2:32:54:65:de:64:97:88:91:84:44:20:5c:43:
         dc:f8:48:ed:4e:cf:20:d0:cc:ef:10:9d:85:61:f0:d6:8f:cd:
         1d:f9:2a:09:66:c6:13:3c:62:53:e5:96:5f:d2:a3:b0:27:ea:
         f4:0a:07:f9:63:8b:5a:40:d3:22:8d:13:3d:0f:99:d6:0e:dd:
         3e:a2:a3:3f:18:9f:18:a6:ea:0a:c2:6e:ab:dd:4d:4d:f2:45:
         01:50:b4:6f:4a:68:ed:11:03:1b:4f:58:23:5f:ab:54:82:11:
         14:51:5e:e3:48:1f:fb:a9:31:0a:30:28:d2:5f:33:e7:a1:93:
         eb:c3:5e:8f:ca:87:f7:c0:56:67:79:3d:d4:a9:e9:f0:2d:33:
         30:8b:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:06 2025 by rpki-client