Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9b581d-171f-363e-9427-97333741ac8f.roa
File:                     6b9b581d-171f-363e-9427-97333741ac8f.roa (raw, json)
Hash identifier:          dDu+hd2VDaH1Y8CfMy47m5FXtjq9rjHagW7sqoIttKk=
Subject key identifier:   4A:DD:BF:1F:3E:6B:44:BB:E1:9E:76:EF:23:8C:BE:D6:8C:E7:A4:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75D0CDC4C82AAEBCA716E2
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9b581d-171f-363e-9427-97333741ac8f.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.192.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:d0:cd:c4:c8:2a:ae:bc:a7:16:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=c5b55497-fad3-4f56-b94d-cdd46abd61c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:bb:67:a8:4b:55:57:ef:53:1a:9a:14:55:
                    98:89:a0:ba:80:46:de:cc:06:58:81:4a:3d:ff:66:
                    b1:76:8e:a0:bf:f6:a2:90:4e:a3:d2:81:58:16:52:
                    c2:4f:ab:45:01:7c:05:60:92:3e:0e:c8:27:02:5b:
                    22:0e:c2:27:c9:d1:33:5a:18:b9:a7:be:d3:7d:bd:
                    50:c0:7d:6a:6c:c8:b3:b0:60:6b:00:4d:4e:d2:0b:
                    10:f0:a2:5c:0c:45:91:f6:bf:a8:06:44:07:de:5a:
                    74:08:76:fe:28:c6:db:21:36:c5:7e:18:43:38:1b:
                    16:b0:66:6f:6f:45:c6:98:a9:d9:2b:2a:ba:c9:78:
                    57:59:11:66:fc:68:3b:07:15:57:0d:f7:ea:79:ed:
                    d5:0d:de:09:f0:4c:dc:01:fc:e6:be:c9:c5:18:82:
                    57:85:39:34:7a:40:43:27:aa:44:28:ef:fd:1c:90:
                    39:c3:c2:de:32:e1:84:b3:c2:44:13:f6:27:96:7e:
                    21:d9:b5:5f:cb:fa:56:75:de:e1:24:0e:89:7f:43:
                    cf:1a:44:52:df:48:ef:70:53:07:75:5b:f0:5e:87:
                    8e:e8:4d:ea:53:10:30:8e:31:f7:87:bb:73:5e:e9:
                    3c:00:61:52:9b:81:75:d5:39:09:38:2f:e6:37:a0:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:BF:1F:3E:6B:44:BB:E1:9E:76:EF:23:8C:BE:D6:8C:E7:A4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9b581d-171f-363e-9427-97333741ac8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.192.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ba:d6:28:86:67:e8:e1:7e:7e:c9:7f:79:a2:03:81:04:fc:
         5f:f2:05:4a:55:a8:39:51:c8:b0:6a:06:19:f4:d9:36:5d:66:
         52:4b:b5:ca:b3:d2:a4:6c:09:6c:94:4e:97:1f:91:04:cb:d8:
         db:2a:fa:eb:ea:0d:03:1e:61:6a:ad:11:83:fa:9d:13:2a:3e:
         1d:e3:e9:9c:c3:7c:28:fb:34:c2:2e:72:a4:12:1d:2c:d5:4f:
         2e:79:2d:86:1c:4b:f2:10:d7:bd:f4:7f:30:46:ac:9e:2c:65:
         bb:20:e8:1b:bd:a2:7b:bd:ce:a0:84:09:b9:44:d9:ac:ef:b9:
         af:82:56:ed:12:bb:66:66:03:46:45:76:18:bd:75:53:3b:0e:
         8d:38:0b:8e:43:a2:cb:0c:b7:b8:97:59:b9:59:a3:2c:60:8f:
         dd:60:35:d9:e4:5d:01:3a:43:1f:7b:ef:69:c7:41:92:6c:56:
         67:55:e4:a4:5f:7a:fa:08:1e:ca:c1:88:56:5d:33:d5:e9:20:
         0d:35:c8:f8:1d:cd:ca:1e:f3:82:8a:63:cc:ac:ba:f0:22:66:
         75:87:57:79:ee:45:c3:66:76:04:19:a6:b3:72:3a:39:41:8d:
         10:a6:73:47:22:ed:35:70:eb:49:43:b2:f2:88:de:90:5c:69:
         87:5e:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:06 2025 by rpki-client