Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/826bfa68-7463-3f92-9624-ba94fd788222.roa
File:                     826bfa68-7463-3f92-9624-ba94fd788222.roa (raw, json)
Hash identifier:          960L00/LaOCTFiMclwEoHzTgZEnY7N2Yn0MkXDPrcKs=
Subject key identifier:   34:1D:F2:3B:D9:92:19:BC:55:6C:FF:40:25:11:F8:72:EE:24:95:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C086E4A008FBBACCA6E1580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/826bfa68-7463-3f92-9624-ba94fd788222.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.52.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:6e:4a:00:8f:bb:ac:ca:6e:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b9bfa753-9673-411b-a7c7-23bfdd77c905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:eb:84:6e:ec:d1:de:54:09:f9:f2:e0:08:
                    36:09:1d:cd:80:a1:49:5a:33:c1:57:24:e2:b5:ba:
                    e7:f2:b7:5c:09:33:77:6b:d9:37:41:d7:2e:3a:0d:
                    f4:c5:be:61:e6:c4:bd:50:8c:e5:eb:db:0f:a3:15:
                    e7:6e:b8:5d:56:4b:b4:6e:6e:89:8c:56:39:94:25:
                    ba:4a:39:f2:db:91:a9:6b:9e:33:07:4b:9f:47:b7:
                    d5:c4:57:ec:df:ac:f4:62:21:ef:a5:23:14:d9:64:
                    df:b1:23:12:98:38:5d:62:19:d8:8e:b1:a8:69:92:
                    34:bc:43:da:d2:05:31:f5:64:bc:ef:6a:cf:40:01:
                    44:ad:a9:fc:16:c2:0d:73:e8:88:f8:bb:c0:89:ef:
                    db:74:de:f0:73:8e:17:27:c9:f4:9f:1c:4c:11:1e:
                    88:99:30:40:00:55:93:c4:42:22:51:9e:81:4f:43:
                    53:8c:68:1e:63:02:a8:ae:07:8e:d4:e6:58:6c:a6:
                    36:29:86:3d:db:08:af:86:27:2a:e6:9a:bf:2b:ef:
                    41:db:53:2f:83:fe:d3:59:79:d8:67:cc:c5:c6:57:
                    ab:d0:ad:04:80:91:aa:3d:a4:a7:28:58:5c:cd:ef:
                    a9:11:b4:d9:b1:2e:f2:05:be:e1:42:61:b1:b2:5c:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1D:F2:3B:D9:92:19:BC:55:6C:FF:40:25:11:F8:72:EE:24:95:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/826bfa68-7463-3f92-9624-ba94fd788222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a8:07:b4:55:fb:b8:75:f7:9d:6c:30:a3:1e:24:14:fe:99:
         e3:74:55:48:26:e4:ff:c4:3f:e5:3d:0c:b6:22:a4:06:31:b6:
         9a:af:f0:10:bd:ba:a9:6b:5a:01:61:82:69:cd:b9:75:71:71:
         49:8b:b2:01:db:9d:d0:23:8c:70:05:d3:29:db:d7:b8:71:b2:
         87:6d:8b:24:4e:1f:9a:8c:91:b0:b4:13:c0:7a:4a:d3:fd:cc:
         89:8a:b8:81:b3:b7:85:29:a4:0b:57:58:08:9f:0f:97:4f:05:
         0f:a9:18:56:7e:ba:e8:b0:1d:b8:18:8c:bb:3f:ef:e7:84:f6:
         9b:13:d6:2d:1b:71:39:a0:e2:f8:ce:e6:cf:3a:7f:12:a1:ab:
         69:5b:9b:50:34:5c:16:c0:19:28:af:2a:b8:9f:a3:eb:d1:79:
         9b:01:c2:4c:37:2b:11:5c:8d:57:55:a6:6d:c3:18:1d:34:2e:
         ae:20:1d:9a:66:3e:a3:5e:7d:f4:d1:11:21:1b:fb:b6:a4:66:
         bd:97:05:3c:b6:1f:89:ff:d9:e0:5c:88:41:fb:76:cc:2d:ad:
         b5:3c:54:b5:2d:25:f6:23:bf:b0:01:0e:d4:ca:c1:d0:55:9d:
         5c:db:dd:c4:5e:93:c3:33:36:94:4e:c0:37:64:58:ae:89:fe:
         60:a1:a8:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCG5KAI+7rMpuFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
YjliZmE3NTMtOTY3My00MTFiLWE3YzctMjNiZmRkNzdjOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0/rhG7s0d5UCfny4Ag2CR3NgKFJWjPBVyTi
tbrn8rdcCTN3a9k3QdcuOg30xb5h5sS9UIzl69sPoxXnbrhdVku0bm6JjFY5lCW6
Sjny25Gpa54zB0ufR7fVxFfs36z0YiHvpSMU2WTfsSMSmDhdYhnYjrGoaZI0vEPa
0gUx9WS872rPQAFEran8FsINc+iI+LvAie/bdN7wc44XJ8n0nxxMER6ImTBAAFWT
xEIiUZ6BT0NTjGgeYwKorgeO1OZYbKY2KYY92wivhicq5pq/K+9B21Mvg/7TWXnY
Z8zFxler0K0EgJGqPaSnKFhcze+pEbTZsS7yBb7hQmGxslz/YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQd8jvZkhm8VWz/QCUR+HLuJJW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODI2YmZhNjgtNzQ2My0z
ZjkyLTk2MjQtYmE5NGZkNzg4MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjSUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaoB7RV+7h1951sMKMeJBT+meN0VUgm5P/EP+U9DLYipAYxtpqv8BC9
uqlrWgFhgmnNuXVxcUmLsgHbndAjjHAF0ynb17hxsodtiyROH5qMkbC0E8B6StP9
zImKuIGzt4UppAtXWAifD5dPBQ+pGFZ+uuiwHbgYjLs/7+eE9psT1i0bcTmg4vjO
5s86fxKhq2lbm1A0XBbAGSivKrifo+vReZsBwkw3KxFcjVdVpm3DGB00Lq4gHZpm
PqNeffTRESEb+7akZr2XBTy2H4n/2eBciEH7dswtrbU8VLUtJfYjv7ABDtTKwdBV
nVzb3cRek8MzNpROwDdkWK6J/mChqLg=
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:08:18 2025 by rpki-client