Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82fb1fa6-a297-3953-8a90-472cc5013197.roa
File:                     82fb1fa6-a297-3953-8a90-472cc5013197.roa (raw, json)
Hash identifier:          1HqMDVF8G/fCB+act7BT+KIGU6H89UQw+NWmT6cyQAQ=
Subject key identifier:   4A:76:78:CD:76:5C:BB:38:14:34:D8:15:D5:64:7A:22:98:86:F1:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C086DB00A41BC5E48F16280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82fb1fa6-a297-3953-8a90-472cc5013197.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.52.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:6d:b0:0a:41:bc:5e:48:f1:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=643c0874-7543-4fd5-a00a-00bd4e2c004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:f5:bd:e5:87:bb:91:c9:c4:cc:c2:34:8c:
                    7f:47:7d:24:62:8b:9f:8b:40:ba:38:c6:69:7b:83:
                    d9:6a:ee:75:8b:0f:24:d7:29:10:1c:51:c4:89:ea:
                    3d:de:9b:94:8b:77:06:4e:0e:dc:9c:1d:71:01:6c:
                    b0:db:ac:b6:33:54:ee:ea:68:05:0f:52:00:66:47:
                    40:ce:f3:39:02:e2:73:c4:8c:bf:6c:45:f3:53:2b:
                    94:21:d5:93:d7:35:45:13:66:c9:8b:1c:a2:32:6b:
                    b5:37:41:d5:19:76:95:f7:dc:24:4d:2c:e5:6d:6b:
                    a3:ba:3b:e2:db:c9:aa:6d:fc:6c:0d:e6:2b:40:b0:
                    48:c8:30:99:3e:bc:96:0e:29:82:11:ca:d7:27:0f:
                    fd:77:2f:81:87:4b:60:c9:b5:e0:66:38:78:0f:db:
                    92:64:7c:57:f4:5c:93:23:68:25:48:66:a3:13:8b:
                    ab:a8:91:7f:91:f3:dd:c5:59:5d:65:4c:e5:4d:4d:
                    67:bb:27:e2:b8:f2:0b:ed:5d:47:fb:8a:e1:fb:5f:
                    8f:38:83:8f:d4:bf:95:d9:68:a1:6e:8b:61:7c:a0:
                    e3:04:57:98:6a:55:cb:3c:12:cf:1e:13:e8:49:b1:
                    7e:65:9e:c6:14:9c:2d:29:bf:77:98:1b:a6:39:4e:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:78:CD:76:5C:BB:38:14:34:D8:15:D5:64:7A:22:98:86:F1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82fb1fa6-a297-3953-8a90-472cc5013197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:0f:22:f0:49:a3:e2:2d:6b:b0:a8:cf:19:aa:3b:f4:67:
         d0:dc:5a:b5:b9:42:9a:18:a0:b4:16:6e:73:c9:45:3b:c4:fc:
         8d:aa:68:b8:e2:e0:34:1f:60:fe:e3:45:42:7d:72:c4:91:76:
         87:a0:39:19:ed:e0:8f:37:4a:25:09:f0:11:a8:c2:8f:db:d7:
         55:da:c7:f9:60:27:42:ad:ba:fa:28:18:5c:dd:04:6a:79:73:
         00:8e:93:b5:aa:47:55:1e:c7:60:cc:68:a9:d3:fb:e0:57:4b:
         12:bb:50:94:b5:07:80:63:27:86:b8:94:c4:f9:30:62:95:e1:
         63:9b:09:b9:38:17:4d:5d:f5:a5:0a:6f:5e:b8:bf:a4:29:e6:
         fb:31:58:4e:a1:56:d5:1e:97:fc:28:33:b8:a9:71:7b:b1:60:
         0b:6b:a1:49:ec:33:79:c8:e2:37:90:7e:72:89:b7:be:e7:d6:
         b8:f4:1f:ba:5a:37:2c:bf:34:08:4c:a9:86:73:06:13:da:64:
         9f:fd:08:00:1a:da:7c:95:98:ff:31:9b:a0:dd:67:35:48:de:
         18:51:67:27:81:a1:53:fd:03:6e:75:08:b3:60:89:1d:b4:b5:
         d9:54:86:08:31:72:85:dd:62:ca:24:ec:31:13:0d:ce:38:8f:
         eb:7a:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:48:25 2025 by rpki-client