Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ce8acc4-5fd2-3bdb-a986-863a6d058b79.roa
File:                     7ce8acc4-5fd2-3bdb-a986-863a6d058b79.roa (raw, json)
Hash identifier:          uUdi0cIqYo5iX9PH7FJBjsZuCHgYsYlJunpc45rEZF4=
Subject key identifier:   68:0D:5E:26:F7:1B:BD:07:FA:6D:50:C5:44:61:D5:CE:DA:3E:32:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75D7ECE5D4451656583200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ce8acc4-5fd2-3bdb-a986-863a6d058b79.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.62.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:d7:ec:e5:d4:45:16:56:58:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=2759caf3-2360-4a01-843f-1ef1ae65849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:f9:f6:1a:99:b7:3d:84:f3:85:b3:41:6f:
                    dd:a9:17:ae:f9:b1:c0:a0:05:f3:f3:34:03:48:42:
                    64:2f:b3:2a:7b:5c:bb:2b:a4:20:e3:a9:0a:b5:26:
                    22:5e:f4:cc:c3:bd:82:45:56:cb:57:f7:5c:7e:5d:
                    bc:f5:01:b9:f2:85:d1:cb:34:b8:20:cf:8d:b4:03:
                    b3:62:35:b2:dc:18:5b:33:49:6f:7d:74:4d:bd:69:
                    57:fd:1f:43:ba:23:d8:c4:2a:14:d5:a5:94:9c:4b:
                    c0:56:e5:3c:11:df:3a:df:2a:65:cd:79:b9:84:cf:
                    e8:35:a9:1b:3d:fb:66:b7:26:7c:00:ea:a0:2b:e8:
                    dd:3d:8e:68:84:5f:d8:5f:17:8e:76:b0:30:2b:d4:
                    fa:fe:63:71:36:e4:36:d2:7c:79:36:e7:80:be:12:
                    2c:e4:d9:74:76:04:b0:4f:ec:a4:5e:78:01:1c:8e:
                    69:2a:be:16:97:74:6e:0c:4e:10:e3:ce:67:fd:5f:
                    dd:26:0d:45:95:92:03:b8:14:70:ac:63:3d:aa:02:
                    c8:b2:84:88:f4:cc:bf:a9:05:b7:a0:22:8e:d8:1e:
                    f5:a4:fe:09:c5:22:45:1d:19:5e:d0:66:ae:1e:67:
                    a1:e8:80:9f:81:5a:bc:9f:7f:c3:a8:e1:aa:2f:fb:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0D:5E:26:F7:1B:BD:07:FA:6D:50:C5:44:61:D5:CE:DA:3E:32:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ce8acc4-5fd2-3bdb-a986-863a6d058b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0c:84:fb:27:55:d3:c4:bb:6f:e3:e0:c5:8e:c8:ad:5a:a4:
         02:42:3e:2d:3d:9a:e5:94:0d:86:91:ae:e5:05:33:5c:48:f8:
         ee:4d:df:66:29:5b:03:eb:49:4d:69:35:16:2d:46:c4:09:d0:
         ed:fe:2a:c2:54:91:ab:5f:23:9a:34:f2:1e:2b:f0:ae:90:f5:
         55:7f:9e:70:b0:86:ce:83:6e:c7:92:93:cd:5d:ea:1e:f7:8a:
         f7:41:f6:4f:cb:a0:6f:6f:8f:7e:a8:b3:07:a5:06:71:99:ed:
         71:c8:b3:8f:41:22:c5:d1:97:7c:05:9d:9d:f0:d8:57:0c:5d:
         da:18:1e:9d:ba:59:78:41:40:94:ba:0a:98:e3:48:9e:c7:70:
         fa:25:c2:bd:4c:10:2a:e2:08:e9:76:89:2d:e1:ae:2f:a2:dd:
         97:61:a2:42:b7:a2:30:33:2e:9e:0b:01:6a:61:0f:93:c1:45:
         8e:31:3a:98:0b:24:7c:8c:4b:2f:d1:9e:80:30:21:76:8b:c9:
         e8:1f:f6:48:73:a3:e7:fc:8b:08:2d:2a:8a:c0:74:a3:66:4b:
         57:52:1e:08:f3:8e:bc:6b:8d:b1:be:52:1c:e8:29:4c:c5:55:
         f9:02:b4:61:e3:8f:69:1c:58:b0:d1:1f:09:ae:34:9d:54:10:
         9f:22:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:01:46 2025 by rpki-client