Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d96530-3a21-33b0-b200-c2671c3ff246.roa
File:                     a7d96530-3a21-33b0-b200-c2671c3ff246.roa (raw, json)
Hash identifier:          Ya8Eqhp6MDIQNujdlpgio23bSvy0omYWlNj/p9pHM3I=
Subject key identifier:   81:CB:57:DE:BF:D7:07:76:16:1F:F5:DD:FE:FA:A0:8F:9B:12:1E:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF756B3A4FBC3D47ADDD3E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d96530-3a21-33b0-b200-c2671c3ff246.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.192.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:6b:3a:4f:bc:3d:47:ad:dd:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=364d794f-24bc-4554-8ada-b11ec4f8b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:8b:19:d8:20:62:7e:c0:7d:42:79:2f:59:
                    e0:2b:b5:1b:a3:2b:53:94:d9:da:16:a7:1a:3a:cf:
                    8c:32:30:d1:fc:13:df:26:13:33:e1:2d:8e:fe:6c:
                    85:4a:32:93:90:8a:89:82:73:0a:83:7f:67:a6:c6:
                    b1:a5:57:26:f9:18:2e:a8:6e:4c:d0:f7:e1:1b:f4:
                    a9:3c:ad:e6:2a:ba:78:a2:f2:a5:2b:b7:fe:09:3b:
                    44:32:a8:3b:f0:a7:0f:56:6e:43:eb:e4:82:23:92:
                    22:7b:12:b4:31:d6:17:48:2e:31:f1:ec:76:2f:25:
                    e6:4d:1a:bc:45:db:9b:3f:d8:8d:7a:c1:fe:6a:db:
                    e2:a0:6d:5e:33:5f:38:8d:71:1d:77:aa:aa:92:28:
                    c8:06:e7:bb:e3:b5:87:c7:0e:e6:eb:2f:a3:37:fa:
                    02:25:6f:f1:b1:3e:ba:8e:8e:b5:d5:8a:03:9f:3d:
                    bb:c3:40:55:2c:74:03:5e:f8:d1:d8:8a:36:a2:7a:
                    59:27:ac:05:22:f9:f7:4d:a6:26:df:fa:61:80:38:
                    77:aa:80:20:5a:42:05:d7:d1:9f:ca:2d:a3:93:b2:
                    8f:10:3e:f4:8f:5a:de:34:14:4c:fa:c2:3c:bc:1a:
                    cf:36:41:86:98:52:47:7f:ad:76:5e:c8:99:14:01:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:57:DE:BF:D7:07:76:16:1F:F5:DD:FE:FA:A0:8F:9B:12:1E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d96530-3a21-33b0-b200-c2671c3ff246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.192.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:7e:0a:bb:68:4b:a4:66:18:3c:0c:b2:e9:ca:af:4c:c2:4f:
         11:4e:63:36:ae:db:78:9c:f2:d8:7a:d6:b4:7a:f4:f7:77:41:
         34:dc:dd:41:e2:34:ce:66:92:2d:e0:91:03:cb:e8:bd:4e:f2:
         24:1c:17:e0:03:1e:5f:b9:d2:bc:cf:a7:bf:cf:54:34:78:06:
         13:04:13:98:5c:e3:3e:ec:28:94:f8:e2:c1:40:86:1b:25:e0:
         ee:7b:b3:8b:c7:f1:a8:73:96:78:ff:1c:a3:18:0a:78:57:43:
         9c:6e:35:ae:3d:5b:04:08:9a:c9:33:fe:8e:dc:3c:38:f5:e8:
         75:84:78:40:18:01:91:8b:02:cd:97:9a:5e:80:da:21:1b:7e:
         6b:34:63:7b:b3:8e:d7:c4:0c:88:2f:e3:f2:76:65:6a:ea:0c:
         da:ae:95:a8:91:75:10:ec:4f:7f:8e:72:8a:e0:f9:b1:83:d1:
         f2:ee:37:5b:a5:d5:22:e2:b9:3a:4e:83:2a:91:c6:4a:11:0e:
         5e:58:c9:90:b4:d7:fe:69:ca:70:18:b5:a7:9a:3b:8e:26:78:
         31:6a:87:b6:ec:15:b6:39:bc:fc:47:26:ed:df:09:09:c3:ce:
         72:71:02:6a:92:e3:26:97:a0:69:ed:91:8b:50:f1:ce:e5:a5:
         5e:e8:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:54 2025 by rpki-client