Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c96afcc9-70de-37bc-91ba-a568cc9149bc.roa
File:                     c96afcc9-70de-37bc-91ba-a568cc9149bc.roa (raw, json)
Hash identifier:          EtU0cB6rNAKgWOs33AS/8ai2sjAfm2LpATi+Lyy46rM=
Subject key identifier:   86:22:A9:E2:AC:2F:0F:31:81:D6:46:3E:82:8F:B2:08:FD:47:6A:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1624BDD1476B47CA35740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c96afcc9-70de-37bc-91ba-a568cc9149bc.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.46.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:62:4b:dd:14:76:b4:7c:a3:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=528dae19-101f-4958-be09-fdf342f1c1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:48:1b:bf:73:8f:cf:ad:b1:d7:8b:e4:3f:
                    97:4d:06:b2:24:e4:ff:14:ee:e5:43:ec:ad:6c:ab:
                    77:ba:0a:8a:6f:f8:8b:62:f2:7d:dc:81:4c:69:93:
                    da:28:72:a3:30:76:37:00:a0:f5:8a:46:9b:f8:60:
                    58:eb:6d:9f:57:b3:de:96:ce:59:a7:16:17:cb:d5:
                    49:d6:67:bf:66:de:bc:63:17:51:6d:57:64:76:50:
                    78:93:61:62:bc:24:56:62:0b:a4:1c:52:0e:7d:69:
                    b2:35:f8:26:8d:04:d0:3d:88:e9:d9:63:06:ee:30:
                    1a:db:d2:d6:e5:c6:9b:37:e3:fb:23:a1:7a:88:1b:
                    3c:e4:2e:00:cf:04:8d:0f:2d:37:4f:27:fb:a8:b8:
                    06:9e:46:97:a1:58:70:6d:ce:32:0e:5f:d6:fe:c6:
                    a7:27:8f:60:ba:d6:28:1e:e1:b1:5a:f9:a9:7a:8c:
                    8d:b2:44:a8:24:60:f2:eb:a2:0d:2a:cf:19:78:d5:
                    a3:4a:21:12:50:55:22:c8:3f:aa:f6:b7:6d:39:0d:
                    f0:e6:36:52:75:c5:90:d4:ef:fd:60:15:31:2d:fc:
                    2e:f7:bb:c6:a6:a5:b8:38:3e:88:25:3e:1e:00:f8:
                    5e:93:75:6f:da:87:f2:fb:02:cc:91:0b:5f:13:87:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:A9:E2:AC:2F:0F:31:81:D6:46:3E:82:8F:B2:08:FD:47:6A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c96afcc9-70de-37bc-91ba-a568cc9149bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:58:e2:f0:4c:21:4e:ee:4a:db:81:fc:dd:6b:f8:a8:d0:e0:
         c7:bc:af:a7:13:d5:55:1f:a8:32:3b:8e:0d:cb:60:f4:03:2e:
         df:f2:e1:d0:8d:b0:a7:16:67:1d:59:8c:a9:b3:a5:e9:37:cd:
         9a:c6:ce:f5:f1:7d:0b:2d:d2:86:d3:bc:dd:78:d3:92:11:d9:
         c1:65:70:fe:bb:d1:45:ca:fe:98:83:f0:60:4c:2c:cc:37:06:
         2f:96:3e:be:59:1e:35:4e:33:fc:24:e9:ec:f0:66:e8:69:c4:
         86:29:ba:0f:93:73:68:55:ac:98:2d:96:29:78:50:2e:b3:80:
         6a:79:5a:8a:90:74:87:d6:ff:d3:3b:2b:3a:c1:e6:d4:67:c2:
         c2:44:6c:49:ca:6d:81:62:ca:9e:23:b3:f8:58:8c:fe:dc:93:
         3e:37:5e:75:33:07:b9:f6:79:80:b5:d8:52:0b:5f:fa:08:30:
         34:38:e5:3e:73:4a:0d:f7:db:25:f1:1f:f6:b4:b6:00:c6:7a:
         b8:5c:13:45:5d:45:78:52:b8:6a:2b:35:40:0c:bb:dd:89:35:
         a8:45:51:d8:b0:b5:90:08:9f:da:58:ec:54:e1:c7:61:f3:ae:
         e5:37:62:bc:79:f2:a0:c7:b1:80:70:ba:a9:f6:1e:4c:2a:20:
         e8:26:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:29 2025 by rpki-client