Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa
File:                     30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa (raw, json)
Hash identifier:          X5l7X1JIyEo3N/idJQhg8vrURHg4HgYf3hVn3LoehAE=
Subject key identifier:   02:2C:C7:14:08:95:22:A5:3F:FB:6A:12:3F:65:EF:3D:25:5F:A8:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16548F52B9000974C172070
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        98.251.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:48:f5:2b:90:00:97:4c:17:20:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=1b4be094-b19c-4dc4-af7c-d853d727e471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:1c:13:27:28:ae:af:b3:3a:d6:ee:f6:38:
                    1c:8b:68:a3:40:43:8f:fe:9a:29:31:26:eb:7a:6b:
                    b2:0c:40:f0:9e:99:87:8d:dc:b4:51:f0:60:74:ce:
                    28:c5:86:26:e0:ff:09:67:47:40:4e:16:de:45:2f:
                    5b:97:60:58:5e:7f:85:ec:68:45:dc:94:e7:14:c5:
                    62:32:d5:20:e1:8f:9c:08:91:60:3d:74:2f:80:5c:
                    a3:20:14:3e:ff:f7:1e:bb:51:ba:48:2e:ab:6b:95:
                    bb:d3:79:15:f1:56:d9:d7:22:d8:ba:08:d9:97:cb:
                    31:05:02:b8:e4:c6:20:db:78:f3:48:00:5c:8c:f0:
                    db:1e:e1:d4:8f:86:98:4d:cc:f9:f8:39:93:61:7c:
                    cb:1b:66:79:ce:6f:f5:7c:96:25:e2:76:7a:fe:58:
                    8d:17:5f:ea:62:db:b0:40:3d:d4:78:ce:f9:0c:e8:
                    c7:0c:50:b2:3c:a0:03:50:1b:42:51:2b:8d:dc:05:
                    58:cb:68:9d:be:bf:75:8c:07:f1:98:80:db:56:ce:
                    b3:b6:85:43:05:92:b5:d0:5a:15:56:e3:98:ef:3b:
                    93:1c:5c:7d:1f:f2:f5:35:be:2a:74:16:8d:94:5a:
                    dd:b8:cf:12:dc:d2:38:e9:4d:1a:ef:f3:f1:ae:43:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2C:C7:14:08:95:22:A5:3F:FB:6A:12:3F:65:EF:3D:25:5F:A8:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:73:cd:e4:4a:33:0d:99:b0:ab:df:be:f9:e5:eb:b1:32:d4:
         76:75:8c:1f:2d:db:69:c9:dd:ea:49:98:53:6c:d9:e0:3e:c3:
         7e:c0:e7:12:c6:1e:a5:01:2d:dc:ce:82:65:01:b1:03:6a:82:
         b2:75:bd:36:dd:25:b1:4e:7d:23:8d:9c:5b:64:d6:5d:67:c2:
         c3:d7:d6:3c:30:48:75:2f:de:15:94:b5:07:f6:da:fd:fd:51:
         2d:28:ab:89:25:3f:13:ca:11:97:62:70:2c:a7:ec:69:fc:71:
         88:8d:c9:48:4f:4b:7d:39:b0:09:10:9c:83:91:d5:36:da:9a:
         65:7b:34:6a:40:30:65:fc:7a:d7:bf:4f:d7:fe:03:d1:f7:7c:
         50:d6:ad:2a:a4:92:43:f7:fc:24:b7:34:a0:48:97:26:c9:24:
         bf:58:75:a1:1f:63:8b:73:bb:2c:8c:80:4f:8d:10:50:a3:d2:
         e9:95:35:3c:dc:46:2b:a2:da:9a:05:12:9f:e1:00:02:9b:19:
         7d:79:43:7c:96:4b:ee:b1:cf:d1:25:48:8f:65:ab:e6:20:a5:
         12:85:68:4c:8a:bb:19:24:dd:73:76:5d:bf:0a:d2:88:18:75:
         9b:ab:b7:cc:90:cd:63:16:86:ce:b9:f5:06:13:07:40:4b:82:
         fe:d9:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:22:10 2025 by rpki-client