Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3597ace5-c19e-3324-a050-2232d0eac9b5.roa
File:                     3597ace5-c19e-3324-a050-2232d0eac9b5.roa (raw, json)
Hash identifier:          tk5HZBvOBalS6yNmcrXKm71iGJt7Daad9kW4KOJSdSY=
Subject key identifier:   71:08:6E:0A:EC:2E:55:E2:B3:AA:5E:A8:DE:20:91:BC:06:2E:6F:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06AF71F8C44E0EAEC50BA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3597ace5-c19e-3324-a050-2232d0eac9b5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.215.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:af:71:f8:c4:4e:0e:ae:c5:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8599186c-89ad-4b98-b98b-b79d402c68eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:0b:17:74:f7:d9:52:ff:e1:cc:23:e5:be:
                    15:64:c6:1d:23:e2:84:b0:0c:83:bc:ec:5e:d2:ee:
                    f1:89:19:1e:d4:32:67:b9:84:69:79:3a:45:8d:18:
                    17:5d:e5:92:60:65:e2:14:ba:9f:5c:da:23:90:31:
                    00:7e:a7:53:1f:1d:f6:d3:65:eb:fb:1f:8c:ea:38:
                    2f:7e:a5:de:fc:69:cf:a5:0e:3a:66:69:cb:cb:4e:
                    38:18:4b:ab:88:6a:74:71:f8:d1:62:57:6e:4c:b3:
                    6e:83:fb:ad:95:5c:17:45:b4:78:4f:96:fb:1e:e2:
                    83:c0:7b:6c:5c:59:3a:3a:7e:ea:ab:6b:cd:e9:99:
                    c2:aa:c0:01:85:b5:19:3b:6d:71:e5:1c:7e:18:6f:
                    f9:2b:0f:9d:8f:e5:70:d5:57:77:81:35:39:fc:fd:
                    db:71:ee:67:9c:8c:fa:5b:2e:60:75:2b:79:60:6c:
                    7e:1c:68:b2:c1:ef:6d:be:f7:3b:d1:1f:d8:25:01:
                    76:08:c9:ae:d7:ac:ef:2e:e9:4f:80:5b:64:8e:9e:
                    7a:e9:b8:d9:b7:b1:8b:27:1d:e4:e3:19:15:aa:26:
                    b8:0e:c5:c2:3c:14:2e:e3:4b:6c:df:9b:22:30:3c:
                    82:3c:a9:73:d7:c2:27:35:03:d2:00:56:d7:c8:b1:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:6E:0A:EC:2E:55:E2:B3:AA:5E:A8:DE:20:91:BC:06:2E:6F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3597ace5-c19e-3324-a050-2232d0eac9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:63:d7:98:01:4e:de:c1:95:4b:5a:5d:d6:e1:e5:69:10:92:
         1e:04:2f:a2:15:70:39:2a:ec:a8:f2:7d:17:10:77:05:03:dc:
         7d:ff:4f:c6:1f:32:7a:75:21:0a:9a:7e:0d:d2:18:0c:28:2e:
         7f:80:88:75:25:51:80:1c:9b:e3:ef:13:96:f7:41:12:91:c3:
         cf:d8:f9:ac:40:ce:ed:9d:5c:74:6f:fe:e3:b3:87:25:c6:74:
         03:f5:25:7b:b6:79:47:ce:4f:fc:aa:43:09:15:18:fd:38:6b:
         99:bf:11:8b:59:ab:37:75:86:72:63:b3:e1:81:28:3d:1f:f2:
         22:53:f7:7e:22:5f:3b:64:b7:95:1c:e1:e6:bf:cd:f7:8a:41:
         52:83:6e:75:ee:13:b4:8f:d6:ce:28:cf:5b:05:96:41:37:30:
         57:73:5a:6c:8f:ce:c6:82:e2:50:6b:5f:9e:62:cd:ee:73:11:
         93:df:a5:e4:44:7f:a8:25:5a:e7:0f:08:29:c6:b4:35:77:15:
         c7:b4:d6:16:ad:b1:bf:8b:b6:2f:71:10:15:5d:3f:9a:56:f1:
         fa:11:36:c8:f2:b8:6c:7d:0f:5c:04:9f:d2:6e:ed:0a:16:1e:
         67:cc:b0:90:ad:9f:d1:1c:67:be:8b:25:dc:fc:62:58:18:5e:
         3c:f7:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:11:13 2025 by rpki-client