Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/730d0db1-66fa-3c5f-ad00-5707a3a72f36.roa
File:                     730d0db1-66fa-3c5f-ad00-5707a3a72f36.roa (raw, json)
Hash identifier:          cbMsIM1vLYe6Xb1h53ayXAj55wHXZCf6F+91Xysz1Iw=
Subject key identifier:   AD:01:99:91:CB:E7:57:B7:A1:66:74:A0:D0:04:6F:D2:B5:C5:BD:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F96E412C432FCD8BFE7EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/730d0db1-66fa-3c5f-ad00-5707a3a72f36.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.44.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:6e:41:2c:43:2f:cd:8b:fe:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f36c7629-ab3c-43de-b6fd-176030361110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:ae:73:cd:04:11:95:c3:2c:49:7f:f8:d2:
                    47:fe:c8:58:b9:61:34:0a:6c:8a:fa:be:1d:0f:64:
                    5f:bc:17:fa:aa:8b:25:f4:e8:91:ae:c2:89:5d:c9:
                    b9:e6:d2:d7:15:14:50:95:77:28:4b:e5:63:9b:ef:
                    ab:ea:47:8e:ad:17:62:56:3c:7c:5e:3a:02:c7:7c:
                    05:8e:bf:4a:94:2f:7a:11:a4:cd:f9:ef:0c:18:2b:
                    8b:5a:83:06:9f:61:b6:f3:2e:6f:3a:98:64:a7:4f:
                    c7:03:cb:8f:31:04:c0:62:41:07:1f:7b:d5:b4:3b:
                    c2:ee:f3:2e:48:73:aa:cd:94:16:59:ca:c0:6b:98:
                    be:33:36:c7:06:cd:ce:6d:45:d9:92:70:2e:ce:66:
                    58:f4:39:dc:a5:e0:be:a2:50:f2:74:23:d4:24:ed:
                    0b:b0:45:dc:d7:03:ec:35:4e:d1:71:93:dc:31:6c:
                    54:e2:80:8f:97:3f:3c:b4:00:ad:ff:8b:68:b0:6b:
                    95:65:64:7c:b7:22:72:38:0a:64:30:0b:35:c6:72:
                    bb:51:d7:92:68:d8:15:d1:36:4a:42:cb:e7:77:a7:
                    10:79:a4:d1:e1:a6:ea:f1:61:e4:e8:ff:6f:69:b8:
                    0b:f1:14:a2:8e:60:b1:ea:01:35:fc:0c:c0:9b:69:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:99:91:CB:E7:57:B7:A1:66:74:A0:D0:04:6F:D2:B5:C5:BD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/730d0db1-66fa-3c5f-ad00-5707a3a72f36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:0d:80:8e:0f:ac:ac:82:b0:2f:af:d0:61:84:21:c3:8e:
         cf:fd:fa:75:97:50:e2:b0:95:20:54:aa:32:63:4d:b1:4a:fe:
         64:14:ff:60:bf:9f:26:3d:9a:7d:81:c4:06:8d:60:76:18:02:
         f6:2c:82:70:cf:c2:d8:87:cb:18:5c:2f:6f:66:0f:9b:3b:90:
         0f:2e:59:d2:87:59:79:d7:25:9d:2b:55:2b:4f:81:85:30:f4:
         06:a4:8e:e3:05:df:c3:2e:d4:c0:35:a1:57:88:d8:ed:cd:11:
         6e:69:e9:76:09:ff:33:3d:8f:60:a3:84:69:bc:db:34:8f:01:
         24:ca:bf:ce:9f:63:a8:32:2a:0e:7e:24:1f:c3:b2:3b:87:84:
         70:f3:6d:26:f6:f6:39:01:06:21:f4:d1:04:bd:01:0a:2b:fe:
         c1:71:93:c8:89:9b:9b:d9:65:9d:f2:ce:34:f2:2b:75:82:51:
         b6:31:9d:ec:7e:89:9b:44:21:66:f8:54:96:0a:c4:c0:fc:6c:
         0d:9d:66:f3:ca:70:0c:72:4a:b9:d4:00:8b:20:6f:eb:07:2e:
         b5:bb:51:25:10:be:01:ac:80:d5:b7:ae:30:28:46:ee:ac:6b:
         7b:68:d3:77:8f:98:94:0f:3b:2e:57:47:5e:d6:d2:06:98:c8:
         7e:3b:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:40 2025 by rpki-client