Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67dfd27b-73a6-305f-a085-e5d5ff385476.roa
File:                     67dfd27b-73a6-305f-a085-e5d5ff385476.roa (raw, json)
Hash identifier:          a5wGpCm21Ws9XOTz9WLtyO2MN6H7nq4rrlQq8WESPqE=
Subject key identifier:   08:18:CE:45:E5:3B:06:66:A0:CB:D1:09:22:78:81:63:41:79:0B:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF752A4A3A681FE49797FF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67dfd27b-73a6-305f-a085-e5d5ff385476.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        24.98.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:2a:4a:3a:68:1f:e4:97:97:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=1679465a-3ded-42ed-bcee-d2c13f6b53ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:e9:43:94:bf:59:5e:ac:ee:c4:fc:f3:cc:
                    5c:8d:a6:da:d9:5a:b3:5d:02:d0:2d:05:cb:b7:f6:
                    90:42:45:fb:ec:5a:56:5c:ae:6e:be:8c:f5:6f:27:
                    d7:9b:4d:50:bd:c0:d3:c8:a0:90:b6:1d:ac:20:68:
                    9a:d7:72:a0:64:e0:49:7d:05:43:ab:75:ab:d7:86:
                    27:09:7c:5d:04:b0:77:99:6b:84:4b:25:45:79:cb:
                    cc:e0:09:07:04:8a:ce:c5:1f:46:82:66:e6:07:86:
                    16:14:3d:af:ee:32:ef:6b:96:3f:56:36:91:f8:a7:
                    2c:11:97:ad:71:86:e2:f5:f2:0d:b4:dc:99:70:a9:
                    8a:5a:f1:e1:ab:08:b5:47:b5:2b:5c:e5:ef:05:12:
                    7f:cd:6a:f2:31:e3:5f:fc:b2:2a:c1:2d:43:59:2d:
                    dd:ee:89:f1:f0:3c:2c:29:00:67:c4:d5:cb:c8:7d:
                    01:0e:23:98:a0:b0:f3:c4:77:13:a5:b9:39:96:16:
                    60:53:95:bd:d8:0e:5b:87:ce:91:ae:5a:e3:d8:00:
                    bb:be:34:3f:08:b7:00:56:35:50:bd:f8:60:bd:13:
                    83:91:23:39:d7:9f:45:0b:86:c1:33:e4:5c:52:69:
                    16:25:64:ca:7b:8f:ad:26:98:3c:4a:c2:72:70:38:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:CE:45:E5:3B:06:66:A0:CB:D1:09:22:78:81:63:41:79:0B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67dfd27b-73a6-305f-a085-e5d5ff385476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:96:bc:26:c1:a3:78:3e:dc:ac:86:40:2b:92:6c:7c:f3:f3:
         b8:09:06:e1:1c:9e:11:c8:47:b6:54:47:20:f4:e5:c0:7a:26:
         8a:27:26:07:f5:af:49:67:80:7c:3e:27:57:96:f4:7c:b9:e9:
         d6:2a:5c:10:12:79:93:c3:3a:6c:74:5f:27:ce:86:f2:db:4e:
         b3:23:73:aa:1b:f9:34:92:2c:1b:75:fb:91:c9:80:e7:2a:9d:
         cd:4c:43:e4:37:cf:ca:c7:d4:c7:47:b6:ed:4a:40:cc:ca:d0:
         16:a4:f2:cb:9a:f0:a5:dc:4c:6e:a6:e3:79:90:6a:d5:8c:a1:
         b4:a9:24:fc:3f:ea:70:13:e5:8d:5d:b1:ce:c4:40:b0:c8:6e:
         f9:d7:fb:ad:bc:24:65:7f:d2:13:10:56:2e:f5:e1:c4:50:15:
         db:f7:b9:d0:77:b4:e7:cc:cd:fa:af:70:42:e4:db:81:f8:fd:
         e4:6e:ef:bb:18:d2:21:12:eb:da:ec:92:5e:14:10:78:6f:79:
         fa:5b:fe:8c:5d:60:94:eb:fa:2c:48:d9:ce:6f:d8:bd:00:f0:
         d3:e8:92:aa:ae:d5:fc:9a:32:5c:3c:11:a9:49:5f:06:ca:3a:
         fa:93:0b:61:d2:8f:33:42:70:07:e9:a6:ca:7a:ba:c7:d8:35:
         92:ef:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:45:45 2025 by rpki-client