Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d839420-08bd-3ab0-b9bb-1cc534cba5ff.roa
File:                     8d839420-08bd-3ab0-b9bb-1cc534cba5ff.roa (raw, json)
Hash identifier:          4V19uSK55YHAmLWfn5U+seJBsp6GywJdLQWpifThIwo=
Subject key identifier:   05:99:E9:22:82:5F:0A:12:7A:BB:55:AD:43:D8:D8:A8:98:37:1C:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43270DE957037524CBFFC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d839420-08bd-3ab0-b9bb-1cc534cba5ff.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.196.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:70:de:95:70:37:52:4c:bf:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=1a0386d0-4831-493a-ac2c-7c585e4b9d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:e1:bc:d7:93:8b:7f:b1:5c:b0:44:6b:1b:
                    7d:c1:65:98:92:c4:25:54:93:f7:d8:b5:c1:14:82:
                    0c:9c:7c:ef:0a:fb:c1:87:94:24:42:a4:e2:b1:16:
                    78:90:f7:0c:7f:7a:d9:18:5b:bf:5c:9f:6d:65:7e:
                    2b:41:b7:b4:78:d9:79:fb:56:94:d5:cb:7c:f0:30:
                    4d:3e:4e:0e:61:24:fc:9e:ba:5c:74:12:d7:1a:91:
                    19:28:cf:4e:94:f4:5e:ba:08:a8:4c:19:c2:51:be:
                    83:5c:58:47:ae:a1:92:b8:c6:d4:5d:b6:dd:aa:b3:
                    c5:4b:20:5c:84:1f:84:d7:3e:46:65:80:75:33:8d:
                    5f:25:21:a5:87:c2:5b:39:a2:2c:3c:08:4c:aa:89:
                    3c:99:f3:da:c3:f9:39:12:95:4e:22:97:72:8d:45:
                    11:69:ec:47:13:50:70:1d:39:aa:39:b3:2f:0e:3b:
                    73:8b:28:df:f0:1d:80:82:38:cb:8f:65:05:91:0b:
                    9f:d6:ec:1b:a2:13:c5:1e:c1:d9:47:d7:3d:b0:9f:
                    07:a4:ab:e5:c3:7f:83:18:bf:9a:0d:04:92:9a:3e:
                    84:e3:7f:b9:08:c9:1f:0d:ca:98:56:a1:4c:25:6a:
                    0b:87:c3:b3:3c:75:63:ad:ff:45:8a:cb:09:11:75:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:E9:22:82:5F:0A:12:7A:BB:55:AD:43:D8:D8:A8:98:37:1C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d839420-08bd-3ab0-b9bb-1cc534cba5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f4:c4:2e:4d:8b:8a:77:5b:ef:fd:73:56:c9:5f:dd:03:c5:
         2d:29:e6:28:ec:d1:61:50:fc:a4:88:52:d3:bd:24:24:aa:d3:
         b1:79:1a:15:39:ae:46:c2:e0:96:ac:f4:60:39:41:60:54:b7:
         19:49:69:b4:39:71:4a:10:42:ff:50:2e:c8:fb:b8:77:77:21:
         a6:27:ce:ef:60:68:a6:57:39:ca:6c:dc:6b:dc:c3:50:b8:fa:
         1d:35:d3:04:4f:67:30:00:f4:b4:04:f8:e5:a9:a4:c2:12:34:
         49:c0:cc:cb:86:8d:bc:f5:44:14:d7:4d:4f:74:18:5a:18:c3:
         84:24:96:e0:f6:dd:cc:1b:84:d2:bc:13:7c:21:f5:3d:50:94:
         fa:44:c6:74:0e:06:b3:29:77:be:82:78:65:b2:63:6e:53:20:
         fd:a1:c8:95:00:d2:cd:54:0e:01:a6:bb:56:7f:0c:3a:90:bb:
         c9:3a:35:3a:25:af:04:8a:da:eb:6f:89:65:ba:4d:a5:3b:95:
         03:a3:6e:67:b0:6b:96:e5:7a:4e:72:ee:e6:c7:eb:da:53:e9:
         d1:3a:68:9d:fa:b7:97:dd:e5:f8:6d:6d:db:a4:95:26:60:15:
         a0:8c:73:e8:b7:8d:59:ef:48:d2:03:40:8d:31:20:c2:88:df:
         ff:d7:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:24:29 2025 by rpki-client