Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f477fd-c268-36e1-ad09-0dc81d630529.roa
File:                     45f477fd-c268-36e1-ad09-0dc81d630529.roa (raw, json)
Hash identifier:          jy/FN+ljjC2u7hNFBnawfW0PD8rsqNlJswUuUWUd3Dw=
Subject key identifier:   58:15:3B:4A:FD:80:B8:C3:40:78:35:B4:27:F2:22:FF:69:50:4B:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C693A1AB9E99F3B0EB780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f477fd-c268-36e1-ad09-0dc81d630529.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.62.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:69:3a:1a:b9:e9:9f:3b:0e:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=be65f992-7da6-4564-bf29-32d27bdd9db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:63:3c:be:c1:4b:3b:f0:6a:fc:1a:0c:9c:
                    ad:83:18:a6:36:d6:07:b4:fb:c4:ee:80:0a:81:78:
                    2f:9f:87:2f:44:88:92:0a:3f:1a:c3:42:41:e1:bb:
                    d3:f8:8d:d3:b7:c4:7b:bb:ed:bd:29:13:70:33:de:
                    51:e9:fd:da:6b:33:b3:d0:1c:51:d9:d2:64:9a:0b:
                    b4:64:99:59:14:7e:5e:4c:ba:31:56:99:36:55:fb:
                    70:3c:1c:3c:5c:e2:80:6a:41:d7:f3:45:08:0a:91:
                    97:29:f7:66:f9:0b:2c:a8:6d:ad:d8:87:98:8a:4a:
                    a3:66:4e:b2:fa:7d:7e:f5:7c:23:4c:c0:0d:bc:14:
                    a2:0b:5a:d4:89:3b:81:82:e0:b8:fd:31:ec:74:f4:
                    f1:ff:9c:70:92:ba:fe:95:30:35:d1:b3:dc:7b:ad:
                    8a:17:c6:0d:40:f0:7a:94:39:04:96:fc:44:63:a5:
                    6d:a5:fc:39:ea:6e:83:b5:9c:fa:1f:04:97:0b:2c:
                    7c:81:89:72:b5:8e:b4:58:60:6f:9f:0f:8e:ca:4d:
                    d1:d6:fb:33:3a:27:af:04:0a:5c:44:5f:60:06:68:
                    03:a2:83:e4:de:13:c4:3b:22:4f:69:1f:b3:3a:0d:
                    7c:2e:35:46:2b:5b:ec:d3:43:35:d2:41:f2:79:0e:
                    4b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:3B:4A:FD:80:B8:C3:40:78:35:B4:27:F2:22:FF:69:50:4B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f477fd-c268-36e1-ad09-0dc81d630529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:8a:fc:b3:69:24:c7:61:26:fe:2d:a4:aa:0a:ab:24:d8:
         36:ba:5e:18:ed:b7:48:85:03:3e:e2:db:e8:59:aa:43:cc:6c:
         05:7b:0d:76:91:c1:3a:fd:47:9a:7e:77:90:75:92:b0:97:07:
         98:56:6c:e0:94:48:58:50:05:46:72:82:6a:be:11:7d:86:11:
         c4:3d:4b:54:e0:e8:d4:00:24:86:c4:62:1f:e6:25:28:94:b1:
         4d:b7:29:bb:0c:30:29:54:33:53:78:10:b8:ce:7c:02:d0:85:
         25:e3:08:0b:06:01:5e:f9:e3:c2:53:a4:07:9c:08:26:07:4f:
         ef:29:40:72:15:51:14:96:fe:41:c7:4a:54:99:0d:08:61:bc:
         46:89:51:09:87:8a:c7:05:87:e6:ac:d4:3c:6b:2f:9d:06:87:
         5e:4d:2d:7b:1f:2b:5b:8c:e9:df:b0:18:b3:ff:f4:e2:84:9d:
         e0:cc:b6:d3:04:62:d6:08:44:58:23:87:8e:57:d4:38:99:e9:
         f4:ee:4b:99:d3:fa:86:d9:32:be:35:c3:70:80:34:ff:4d:0c:
         74:2d:6d:41:4e:97:f7:9f:1d:91:86:6f:f2:f5:b9:91:46:8a:
         d2:29:c7:d9:91:20:81:3c:2c:65:c9:a0:3d:e9:a4:71:31:e1:
         d5:fa:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:58 2025 by rpki-client