Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7918b8-f28f-345a-a386-c2cc49fd1404.roa
File:                     be7918b8-f28f-345a-a386-c2cc49fd1404.roa (raw, json)
Hash identifier:          yvrOYf9mmx52fb77Ek4HGycp4W5hn5JtgiVozTm36bQ=
Subject key identifier:   EB:E9:AC:69:A9:B1:28:B3:7D:CE:D9:A3:6B:0D:5D:DC:57:2D:76:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4327F1EED6FB471EF39A780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7918b8-f28f-345a-a386-c2cc49fd1404.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.34.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:7f:1e:ed:6f:b4:71:ef:39:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=628100d4-8f4f-4d61-bf90-498c69782e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:c3:57:c0:e2:74:dd:c1:92:12:07:4f:30:
                    b2:30:6c:a0:da:f7:53:70:d2:da:1a:88:19:8c:7e:
                    3a:b3:45:af:e1:9e:d6:fe:40:65:b7:0a:ea:a0:be:
                    de:60:e2:35:9d:06:c3:68:79:dd:1c:a6:1c:3a:64:
                    b3:74:d8:ea:5f:67:4e:b3:97:4a:ae:73:9f:c5:43:
                    ab:f3:dc:28:0e:df:e8:16:ec:59:ae:1d:4f:b3:87:
                    29:b5:8c:34:07:bf:e4:39:fb:af:59:ca:47:50:e7:
                    ad:15:dc:be:40:f6:c2:bd:76:70:96:b6:b5:42:c3:
                    63:2f:52:dc:7b:bd:76:b6:c7:5f:3a:d1:8d:82:76:
                    92:26:03:6a:76:a1:1a:91:e0:2c:20:d8:42:2d:f0:
                    c7:47:3f:f7:b6:02:62:e7:f9:c8:8a:c1:15:b4:73:
                    89:ea:e2:f9:2b:9d:45:a9:59:4d:72:27:63:ae:ff:
                    c6:3c:e8:66:a2:39:28:91:d3:7a:8f:6f:1c:55:40:
                    3a:49:93:d6:4e:ed:7e:9a:72:cd:79:ff:ff:2b:4f:
                    9e:4d:80:14:d2:d1:db:08:5d:52:b5:2a:db:b3:65:
                    7e:41:b5:9c:f4:17:b1:a5:46:62:5d:45:07:17:ab:
                    57:9f:29:77:67:f1:ab:89:74:d5:53:36:92:53:e0:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:AC:69:A9:B1:28:B3:7D:CE:D9:A3:6B:0D:5D:DC:57:2D:76:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7918b8-f28f-345a-a386-c2cc49fd1404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:d8:57:e9:2a:80:a5:87:85:23:5b:39:4a:bf:2f:8d:c5:
         44:63:ff:4e:85:05:25:1e:35:6a:98:77:9d:e2:13:dc:8e:59:
         6a:39:a9:5a:5b:56:04:a4:fd:a2:09:a5:22:4e:68:f3:a6:d9:
         89:ff:bf:b9:15:f0:9d:b8:36:ce:82:01:de:97:ad:91:ef:85:
         a2:f1:14:66:68:a7:a9:6d:a9:8c:1c:d4:65:7a:03:a9:5a:ff:
         75:0e:e2:6d:a0:fc:e8:d3:1b:5a:3d:d2:b2:3d:48:70:db:53:
         4d:9e:cb:10:ad:38:46:bf:b4:f5:59:0f:fc:0b:db:f2:d8:3c:
         b2:c8:58:71:92:0b:11:55:83:1e:08:ac:75:12:df:88:f1:c8:
         99:dc:bd:32:a7:3a:93:6e:63:47:d6:3b:c9:44:a8:dc:d9:c3:
         1e:74:21:93:12:00:43:ff:0d:b5:dc:fe:98:bb:b5:ee:6a:05:
         ae:72:3c:cd:44:56:a3:d3:d4:0f:2e:9f:76:34:11:1e:76:96:
         ab:ff:50:f4:09:e3:db:cf:bc:d6:bb:cf:81:16:3b:66:c6:9e:
         62:6e:18:7c:08:7d:19:d6:20:a6:5a:6b:f0:62:04:c6:95:97:
         6b:b9:6a:f9:b7:28:49:ac:82:de:13:7f:7e:76:39:cf:b1:56:
         ff:45:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:17:41 2025 by rpki-client