Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53524413-3563-3e2b-b3aa-2910ec5c6009.roa
File:                     53524413-3563-3e2b-b3aa-2910ec5c6009.roa (raw, json)
Hash identifier:          AkR1ls2dEurZriD8jmvBUjIJ4ShFkElSMGu5ilkDszw=
Subject key identifier:   FC:14:67:FC:4C:76:36:81:FE:5B:2A:97:66:79:7F:55:4D:58:54:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F9547CE72FF85F8C917F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53524413-3563-3e2b-b3aa-2910ec5c6009.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.194.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:54:7c:e7:2f:f8:5f:8c:91:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=4570e0b5-bd84-4896-aa59-cbc292de06f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:24:b7:47:1e:08:02:ec:a5:6e:b6:16:3b:
                    b0:b4:4c:79:d6:23:07:5c:0b:54:77:34:95:be:02:
                    fc:cc:e9:48:04:24:49:a4:d4:e5:8d:16:62:cb:b4:
                    3d:04:c2:fb:fc:3a:cb:ea:88:32:f7:08:37:d3:49:
                    2d:c5:6b:ec:2f:53:ac:26:c1:c7:49:be:33:73:53:
                    e4:33:f4:a7:d4:72:e1:a2:9a:01:f9:c4:d5:57:d4:
                    eb:7b:15:26:3d:96:cf:42:bb:8b:5e:cc:88:ec:c3:
                    cb:f8:a5:41:2e:67:21:09:31:04:e3:33:11:82:c0:
                    51:8e:48:6b:db:45:79:3a:18:24:b8:6f:17:1f:dd:
                    71:54:07:ea:05:d2:4d:53:75:63:14:99:26:72:25:
                    49:78:d2:35:29:9b:7d:a7:5e:4b:af:3a:58:46:b3:
                    f3:14:d3:8f:36:4f:c2:15:6b:ca:5b:bc:eb:7b:93:
                    94:bf:87:5e:b8:71:d5:7a:19:72:3b:3d:ed:85:c0:
                    c6:50:63:e7:d8:09:c9:dd:b2:46:80:66:98:ae:aa:
                    48:1f:94:5b:29:70:b5:d4:4e:0f:84:c5:70:f7:84:
                    74:8e:8b:be:f3:b3:1f:36:f9:f0:01:d6:0d:4b:df:
                    d9:cf:7a:66:3e:a5:76:53:0a:5a:6c:8e:9f:f6:c5:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:67:FC:4C:76:36:81:FE:5B:2A:97:66:79:7F:55:4D:58:54:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53524413-3563-3e2b-b3aa-2910ec5c6009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:b1:72:c6:d8:70:e5:84:74:9a:4f:3c:58:29:63:c2:aa:
         66:9a:d6:6b:bb:51:4e:b2:1b:3b:9a:b1:da:e5:86:c2:26:5d:
         4d:3a:c1:37:f0:50:90:e4:43:09:8b:8d:10:f3:bd:6a:b1:8b:
         6f:f1:4c:10:fd:2b:0b:29:11:db:fe:c0:d3:2d:c6:ef:c9:88:
         6b:8e:ba:66:29:3e:1d:6c:1f:13:ff:5f:52:ae:0a:bd:dc:02:
         34:d3:93:87:d8:68:3f:05:13:ce:d4:0d:3d:e4:40:f2:df:6b:
         f9:97:62:71:74:aa:cc:f7:14:5e:12:6f:64:c0:3b:e2:35:7c:
         85:f1:97:c3:78:50:ce:24:96:2e:c0:25:40:cc:3a:32:c0:fb:
         7b:55:ee:35:bd:9f:f9:cd:04:30:6e:cd:e2:ca:46:4f:1d:37:
         28:6b:2f:13:ce:a9:a9:53:ee:18:0b:f5:7d:d1:bb:54:47:d8:
         54:ce:44:8a:ed:46:94:dd:a0:7d:f5:ca:ca:6f:1b:80:e2:73:
         83:60:76:17:f5:64:73:da:2e:0f:8a:ec:25:73:b6:59:d1:76:
         15:f2:7f:e6:17:80:fe:2b:30:7d:7a:f1:7a:b3:c7:97:5d:15:
         68:cc:e7:95:1c:c5:6b:c9:62:b3:80:81:af:be:a0:d9:d9:55:
         b9:ab:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:16:57 2025 by rpki-client