Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86b693b0-c799-33e5-a272-ff6633e16224.roa
File:                     86b693b0-c799-33e5-a272-ff6633e16224.roa (raw, json)
Hash identifier:          +X+WH0cmODGrHNUBfH1DUZ2UegOeoS3S1ePZMPdHTxY=
Subject key identifier:   A2:89:93:3E:6B:98:F5:A8:81:01:3D:C4:51:32:89:23:49:38:2A:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1FCDE8F54CF8C106F1680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86b693b0-c799-33e5-a272-ff6633e16224.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.47.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:fc:de:8f:54:cf:8c:10:6f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ccf98479-9df7-4b49-8b5b-6652692270cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:03:4b:f0:0c:d9:68:6c:b1:6f:5d:5c:7d:
                    85:11:30:16:46:5b:c1:18:5d:65:20:59:cf:0b:ac:
                    bc:a1:63:f1:42:a1:1c:3c:57:da:b7:0d:82:71:cc:
                    66:7a:59:12:00:8d:92:5c:39:9c:eb:99:11:e1:08:
                    8f:28:32:5b:d6:46:a1:20:82:ef:a1:00:53:f6:5f:
                    ef:4a:9a:55:e0:e5:6b:bd:b4:e7:ce:7f:e4:bd:ae:
                    66:c3:48:e3:9a:41:c2:d7:e2:08:5c:d7:bd:e2:a1:
                    04:77:46:48:3a:35:30:50:0c:d1:f4:20:83:f2:0a:
                    19:eb:e6:77:39:ab:76:75:39:98:e3:ed:5a:1c:63:
                    bd:07:41:0a:f1:51:9f:d4:8b:b4:51:43:53:30:48:
                    69:01:46:76:b2:cb:f1:ec:0e:c3:e7:d7:dc:50:cf:
                    20:93:4a:4c:4a:e1:eb:73:d6:d3:79:2e:3d:39:33:
                    9e:f3:21:a0:d5:c9:5b:14:7c:fa:7d:11:52:8f:44:
                    20:1e:59:85:14:57:cb:9d:e2:0b:c9:86:ec:48:52:
                    74:92:c7:a6:e3:89:9f:b9:25:b5:e5:20:15:6b:37:
                    12:ee:0e:f0:d6:6b:5b:8d:1c:78:88:64:83:08:91:
                    cf:6c:59:42:0f:77:25:9d:d4:d1:2b:54:29:3b:40:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:93:3E:6B:98:F5:A8:81:01:3D:C4:51:32:89:23:49:38:2A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86b693b0-c799-33e5-a272-ff6633e16224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:9c:a4:fa:c8:2c:26:05:cd:ce:fc:6e:26:b8:8f:34:93:
         85:85:93:f9:56:bd:18:cf:43:a6:0c:6a:22:19:d9:fe:2c:29:
         d3:a0:d5:ba:59:d8:f9:fb:85:0b:97:4e:d0:41:26:cc:b5:bc:
         73:a7:2d:76:a7:26:fd:d5:d7:7c:b8:b1:05:a8:c5:92:0c:17:
         0c:68:e1:3c:01:86:88:02:62:62:f9:e1:7b:d4:f1:88:ea:82:
         a4:cd:38:cd:ac:4e:1c:52:42:59:8b:45:cd:77:91:b2:c6:4a:
         c5:f1:ca:57:ac:92:5d:39:77:ee:33:d1:4d:bc:71:65:5b:16:
         37:d4:ec:0b:a8:41:86:e7:0c:fe:51:71:6c:a1:fd:2d:d4:9f:
         4a:27:7f:82:0e:8c:19:13:9d:3e:e1:0a:04:95:80:be:be:34:
         c0:27:0a:88:97:20:d9:5b:e0:57:e3:37:a2:c9:d8:67:ac:63:
         7b:7f:4d:f6:dd:d3:2e:aa:4f:35:44:9b:6b:b8:fc:ce:59:cf:
         f5:bd:d7:e4:67:a0:86:46:d1:80:1f:a7:f8:82:4d:45:e8:37:
         3a:f8:1b:b2:80:0d:b2:7d:63:4b:60:52:7a:b2:bc:7c:21:3d:
         7f:21:fe:5f:5c:1c:4c:3f:c9:c6:b1:37:09:42:04:c3:3e:f6:
         13:05:c8:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssfzej1TPjBBvFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2NmOTg0NzktOWRmNy00YjQ5LThiNWItNjY1MjY5MjI3MGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/8DS/AM2WhssW9dXH2FETAWRlvBGF1lIFnP
C6y8oWPxQqEcPFfatw2CccxmelkSAI2SXDmc65kR4QiPKDJb1kahIILvoQBT9l/v
SppV4OVrvbTnzn/kva5mw0jjmkHC1+IIXNe94qEEd0ZIOjUwUAzR9CCD8goZ6+Z3
Oat2dTmY4+1aHGO9B0EK8VGf1Iu0UUNTMEhpAUZ2ssvx7A7D59fcUM8gk0pMSuHr
c9bTeS49OTOe8yGg1clbFHz6fRFSj0QgHlmFFFfLneILyYbsSFJ0ksem44mfuSW1
5SAVazcS7g7w1mtbjRx4iGSDCJHPbFlCD3clndTRK1QpO0D4xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKJkz5rmPWogQE9xFEyiSNJOCrgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZiNjkzYjAtYzc5OS0z
M2U1LWEyNzItZmY2NjMzZTE2MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYi+yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ7nKT6yCwmBc3O/G4muI80k4WFk/lWvRjPQ6YMaiIZ2f4sKdOg1bpZ
2Pn7hQuXTtBBJsy1vHOnLXanJv3V13y4sQWoxZIMFwxo4TwBhogCYmL54XvU8Yjq
gqTNOM2sThxSQlmLRc13kbLGSsXxyleskl05d+4z0U28cWVbFjfU7AuoQYbnDP5R
cWyh/S3Un0onf4IOjBkTnT7hCgSVgL6+NMAnCoiXINlb4FfjN6LJ2GesY3t/Tfbd
0y6qTzVEm2u4/M5Zz/W91+RnoIZG0YAfp/iCTUXoNzr4G7KADbJ9Y0tgUnqyvHwh
PX8h/l9cHEw/ycaxNwlCBMM+9hMFyC8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:33 2025 by rpki-client