Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fbe6c6f-a38f-345d-a377-26c8fc67d3c0.roa
File:                     6fbe6c6f-a38f-345d-a377-26c8fc67d3c0.roa (raw, json)
Hash identifier:          un5zaJ23BFm3DluD+6AfYuWvMYDqVrmnCgQOfCnwrHQ=
Subject key identifier:   E4:DD:51:56:E0:C9:71:66:3B:12:B1:33:0A:34:06:CF:DC:81:EE:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08693D113C08E71FD7C7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fbe6c6f-a38f-345d-a377-26c8fc67d3c0.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.32.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:69:3d:11:3c:08:e7:1f:d7:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ed20cf5b-f011-48fb-816e-2034555323aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:61:c0:3b:c7:0f:7b:8f:25:27:83:3b:08:
                    e5:4d:2e:ec:3e:a9:2d:86:54:fd:d0:da:c6:01:c8:
                    df:b6:9f:42:d5:46:27:a3:56:b3:88:b0:bd:75:6e:
                    11:98:1f:76:85:e8:8f:3e:fe:c0:1a:25:7d:67:3e:
                    0e:2d:b3:a3:63:01:88:fa:2d:0b:cc:1a:d5:f6:7f:
                    7e:b3:c8:f1:b4:49:fd:07:b2:fe:3a:6b:96:54:c8:
                    7e:92:05:96:aa:89:84:d2:15:5b:41:f8:c8:43:25:
                    3e:02:15:b4:0a:e1:d5:da:26:26:e2:f3:17:12:87:
                    d0:6d:75:4a:0c:91:9b:22:3f:d2:4e:9e:86:79:51:
                    15:82:d8:0b:fc:27:5f:4b:91:b1:25:af:d4:74:4f:
                    2a:ff:2e:29:59:7d:aa:4f:cc:09:0e:09:ed:16:68:
                    3e:85:db:77:6a:a6:6d:ac:4b:13:d7:07:cb:88:72:
                    cf:99:3a:9f:92:14:51:3c:6d:44:6d:2d:1e:3b:db:
                    b0:f9:7a:71:b4:2d:32:67:6a:ca:d1:e0:eb:e7:e1:
                    bc:16:90:f1:af:b8:70:7c:de:db:3b:e3:16:39:4f:
                    e0:f3:1f:aa:92:ec:60:53:c3:d9:8d:d7:72:d5:e3:
                    25:6f:56:2c:06:b4:67:e7:9e:39:61:f1:23:f0:5a:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DD:51:56:E0:C9:71:66:3B:12:B1:33:0A:34:06:CF:DC:81:EE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fbe6c6f-a38f-345d-a377-26c8fc67d3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.32.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:71:24:08:50:ff:74:7e:06:d1:d8:6b:ee:20:2d:b1:a3:
         63:cb:e2:0c:59:76:2e:fd:b5:45:cb:12:0a:04:ef:f3:ca:62:
         2e:b5:17:28:b2:42:c7:a6:05:72:62:ac:bd:ba:f4:57:9b:c8:
         61:47:53:52:9c:52:be:86:c1:23:75:0a:5f:51:aa:c5:b1:72:
         c0:34:0f:d2:e7:30:88:6b:ca:98:ed:de:c2:e8:f0:10:65:a8:
         33:94:cf:fc:7d:15:28:73:e7:3f:b7:0a:6e:44:99:64:50:96:
         3c:f4:47:2b:f5:51:b2:91:e5:d3:c9:3c:23:ee:38:e0:fc:21:
         d3:47:cc:15:40:f7:29:51:9e:0a:77:fd:19:2e:9b:ee:0d:19:
         4c:c1:0a:bd:f0:45:40:95:cb:63:fe:03:d2:de:18:e6:a5:09:
         af:49:ed:60:e7:8d:2c:31:7d:72:88:11:21:bb:a4:3b:14:d3:
         16:22:7c:4f:f9:f9:b4:d7:cd:fd:d0:80:71:b6:8e:a6:fa:b4:
         cf:49:85:a1:89:b6:c0:e8:93:9f:fa:ff:96:27:60:e2:3f:a4:
         57:77:66:ff:fd:36:a9:ae:92:5a:38:8e:6f:10:b7:05:d0:98:
         f5:57:45:67:05:22:9c:92:53:58:b7:b3:0e:14:d4:70:62:2a:
         23:ea:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:52:37 2025 by rpki-client