Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f978c22-e9a5-3499-b795-cbb838778bfe.roa
File:                     1f978c22-e9a5-3499-b795-cbb838778bfe.roa (raw, json)
Hash identifier:          khwSVzSe2Fmjg9cIj2m0m5uMeo75EXmvdHwbvtGdLdE=
Subject key identifier:   75:78:99:08:BF:EC:8A:38:70:D5:98:C1:4E:39:5D:68:7F:99:F0:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFCEEE4D5C3C8E97C5B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f978c22-e9a5-3499-b795-cbb838778bfe.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.253.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:ce:ee:4d:5c:3c:8e:97:c5:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=14d47b4e-ef91-476c-b807-4824dc6aa5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:56:56:56:2d:1f:8a:ad:a4:1f:f7:14:ae:
                    42:4f:e5:a9:ee:1c:47:cb:fe:6c:3f:a4:e1:4b:a2:
                    5d:c7:3a:75:07:d9:bb:1a:f7:00:07:1a:26:04:92:
                    19:39:f4:f4:45:67:4b:43:9c:75:b3:84:cd:d0:f6:
                    dc:e6:45:42:15:11:d0:06:95:4b:2d:ee:55:49:b1:
                    f1:71:e4:50:a9:bf:73:af:1d:6b:02:1d:9c:9d:f7:
                    e5:50:29:ed:37:2e:be:0d:1d:4b:35:d3:06:7b:1f:
                    d9:bf:41:48:68:0e:d0:5f:d4:17:73:f1:88:2c:87:
                    ac:dd:7e:32:7d:53:8b:5b:39:21:ab:45:f8:92:6d:
                    94:d0:e1:c2:66:97:fa:b2:cb:08:2a:e2:0d:4d:e0:
                    3a:73:ba:ba:ca:84:48:1d:43:8c:0c:05:58:49:68:
                    08:e2:86:0f:ac:6e:a7:02:35:e9:c5:f9:0c:c3:91:
                    f7:3e:20:c4:e0:d2:2c:d9:c0:ee:a2:cd:95:a8:49:
                    0c:75:f6:23:c9:a5:bd:bd:73:0c:44:24:f5:74:3b:
                    02:59:c3:c7:92:36:8e:58:ea:90:4d:a5:a1:a7:af:
                    2f:80:62:d2:22:0d:fe:37:74:99:63:ad:a6:e9:61:
                    db:72:13:4e:80:fd:c1:95:8b:5e:a9:69:74:3c:35:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:99:08:BF:EC:8A:38:70:D5:98:C1:4E:39:5D:68:7F:99:F0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f978c22-e9a5-3499-b795-cbb838778bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.253.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:63:ac:8b:fc:e6:a0:d7:47:0a:6f:f7:c8:76:75:d6:da:4b:
         99:fe:d2:70:b5:1f:44:15:e2:09:ae:e0:ed:cd:19:db:96:d4:
         16:59:c7:75:51:88:78:43:fb:d9:44:49:00:7b:f4:1b:16:46:
         f8:19:d1:19:08:c8:a5:ad:56:15:14:cc:6a:c3:e7:d2:56:48:
         90:30:3f:89:45:81:15:16:ea:e7:7a:4c:af:a3:19:1d:96:32:
         07:a4:7a:5b:39:ef:c5:fd:a3:76:90:df:82:a3:97:7c:76:32:
         69:20:50:61:03:cd:c3:f9:14:bc:7b:c4:19:1f:81:71:f6:ef:
         62:df:99:40:de:51:c9:58:35:ae:a8:51:9e:43:3c:a8:3d:e5:
         79:1f:e8:96:f3:70:cc:4d:99:3b:94:76:9b:fb:b2:91:13:2b:
         32:44:b8:02:01:00:bf:e1:07:3b:09:fd:94:b6:cd:e9:78:e0:
         0e:f1:f9:58:90:b7:45:06:4d:b4:ac:78:de:e7:54:62:ce:5e:
         6c:7d:be:a9:df:a0:f9:c2:88:05:e3:bc:8d:a8:67:f0:e1:5f:
         88:e1:5e:44:30:63:b9:66:1e:02:1c:51:17:bb:4a:4b:3b:74:
         e3:e8:e9:d5:08:da:2b:b0:1d:c9:96:4c:7f:e9:f6:be:57:3d:
         8f:28:4a:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr87uTVw8jpfFtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTRkNDdiNGUtZWY5MS00NzZjLWI4MDctNDgyNGRjNmFhNWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4epWVlYtH4qtpB/3FK5CT+Wp7hxHy/5sP6Th
S6Jdxzp1B9m7GvcABxomBJIZOfT0RWdLQ5x1s4TN0Pbc5kVCFRHQBpVLLe5VSbHx
ceRQqb9zrx1rAh2cnfflUCntNy6+DR1LNdMGex/Zv0FIaA7QX9QXc/GILIes3X4y
fVOLWzkhq0X4km2U0OHCZpf6sssIKuINTeA6c7q6yoRIHUOMDAVYSWgI4oYPrG6n
AjXpxfkMw5H3PiDE4NIs2cDuos2VqEkMdfYjyaW9vXMMRCT1dDsCWcPHkjaOWOqQ
TaWhp68vgGLSIg3+N3SZY62m6WHbchNOgP3BlYteqWl0PDU49QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHV4mQi/7Io4cNWYwU45XWh/mfAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY5NzhjMjItZTlhNS0z
NDk5LWI3OTUtY2JiODM4Nzc4YmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYv3yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9jrIv85qDXRwpv98h2ddbaS5n+0nC1H0QV4gmu4O3NGduW1BZZx3VR
iHhD+9lESQB79BsWRvgZ0RkIyKWtVhUUzGrD59JWSJAwP4lFgRUW6ud6TK+jGR2W
Mgekels578X9o3aQ34Kjl3x2MmkgUGEDzcP5FLx7xBkfgXH272LfmUDeUclYNa6o
UZ5DPKg95Xkf6JbzcMxNmTuUdpv7spETKzJEuAIBAL/hBzsJ/ZS2zel44A7x+ViQ
t0UGTbSseN7nVGLOXmx9vqnfoPnCiAXjvI2oZ/DhX4jhXkQwY7lmHgIcURe7Sks7
dOPo6dUI2iuwHcmWTH/p9r5XPY8oSlw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:11 2025 by rpki-client