Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f108e1-02a7-34ee-8ddc-ff04e0f99e24.roa
File:                     80f108e1-02a7-34ee-8ddc-ff04e0f99e24.roa (raw, json)
Hash identifier:          K9eqYHWifmUPGrztPBtWNSx7S9XUWumbO9grNwOtF98=
Subject key identifier:   F1:AB:03:78:40:16:88:D1:10:65:4D:72:E9:A3:CF:9A:D4:AE:7B:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06B67D8E9F5167F5293F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f108e1-02a7-34ee-8ddc-ff04e0f99e24.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.226.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:b6:7d:8e:9f:51:67:f5:29:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b277f86f-3fcd-4118-8770-8cb23e223f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:4b:9c:c0:4d:7b:f4:d7:d5:8a:c6:0d:0e:
                    99:ed:51:9c:7d:2b:99:6e:55:26:23:92:df:1b:ed:
                    8b:f1:c2:50:ce:dc:d0:39:ba:ef:5e:67:88:f7:1e:
                    b5:16:0e:38:22:4e:a3:69:8d:11:3d:84:01:ca:ea:
                    cd:50:2f:c0:cc:29:f2:6d:ac:5c:41:cc:e6:05:ae:
                    f8:5a:d1:43:f4:6e:db:96:1e:c8:90:58:70:b0:a4:
                    a6:01:b9:1b:fb:34:55:2d:c9:92:78:8b:aa:f2:01:
                    11:c3:2f:ac:01:30:96:64:ec:e9:1a:20:ad:45:17:
                    22:a9:b0:77:e7:61:3a:1d:f7:35:29:0f:6c:47:9e:
                    a3:f4:49:24:d4:95:09:02:64:50:34:4f:c5:ef:0d:
                    95:b9:ae:01:17:3b:4a:22:d1:e2:4e:8d:97:c6:8a:
                    59:61:e0:0e:70:cf:02:ab:ac:e4:86:e2:46:5e:74:
                    35:fd:7c:8c:20:d0:ee:f3:28:b1:10:0c:24:6a:df:
                    5a:07:a6:ea:f5:23:c4:65:65:a9:6d:9a:c8:8a:4e:
                    f1:64:ab:da:98:d7:d3:a2:ce:f3:58:19:21:1b:47:
                    e4:ad:46:1f:b4:42:aa:1c:09:f1:28:df:67:25:9f:
                    fd:92:01:33:26:88:c2:b8:b9:48:3e:94:75:64:a4:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AB:03:78:40:16:88:D1:10:65:4D:72:E9:A3:CF:9A:D4:AE:7B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f108e1-02a7-34ee-8ddc-ff04e0f99e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.226.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:f9:f8:d8:05:e8:39:6e:12:3e:54:c0:8d:e2:a3:3d:20:5d:
         75:db:93:01:80:8e:17:bf:1e:ed:4a:18:39:a0:68:50:25:7c:
         ca:9e:01:1e:2f:74:22:cf:f2:f2:98:bb:e3:d6:12:65:03:ed:
         de:ec:0f:3a:60:7a:4c:3a:76:e4:56:bf:ae:18:29:09:15:f0:
         29:90:1c:a0:ca:ae:88:f0:be:9a:2e:99:47:6f:66:c1:90:e0:
         3b:cd:6f:3a:80:b9:0c:58:57:67:9f:f2:ff:64:03:f7:13:6f:
         74:54:c4:ff:5f:14:98:11:43:05:e5:04:a3:d6:d9:23:1c:dd:
         e4:12:ed:28:c4:05:3b:ef:03:eb:21:bb:78:22:b2:1f:33:7c:
         ae:b4:28:8d:d7:09:8b:73:cf:6f:1d:c1:fe:1a:50:5f:f1:69:
         a6:a0:55:0d:4d:28:db:15:cf:bb:2f:7e:cf:a6:b0:d6:43:c9:
         d3:3a:df:44:e8:c4:de:2c:dc:5c:03:57:1d:b9:a6:9f:2b:90:
         b8:0b:3e:52:b9:74:4c:90:a4:f2:3d:72:7d:16:24:e4:af:59:
         f4:91:e6:50:c4:b7:3b:c4:19:48:62:f1:e3:a0:1b:8f:6c:f6:
         82:a8:25:55:cc:f1:e5:1b:58:9c:76:6f:5c:d1:80:54:89:78:
         0f:c1:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:58:50 2025 by rpki-client