Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c00873-df64-335b-96ab-b379c69e8433.roa
File:                     d3c00873-df64-335b-96ab-b379c69e8433.roa (raw, json)
Hash identifier:          xkuFGYfwyyyXeZtq6k5XNUcjzjXIX+VVmxS+D+6lSv4=
Subject key identifier:   78:0C:D9:E5:CA:A6:D3:67:D7:57:F5:21:63:DF:77:0F:FC:FF:7E:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6E4267E77E17D44B21490
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c00873-df64-335b-96ab-b379c69e8433.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        98.246.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:e4:26:7e:77:e1:7d:44:b2:14:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=0b9b8371-1c0a-4707-85b7-0f3c457730c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:d8:1e:58:51:76:f6:21:be:63:0d:32:76:
                    ef:77:4d:5a:0e:03:fc:a1:42:b5:55:b5:d1:43:3c:
                    a2:36:d6:f4:46:d9:cb:b1:ff:92:cf:ae:23:75:b2:
                    9e:db:a5:90:14:60:e0:89:6b:55:a7:6b:2d:2e:f4:
                    2d:01:53:ed:7e:1a:aa:b6:8f:90:6c:57:4b:7d:f4:
                    64:c7:b4:22:23:f3:df:0a:d1:66:f2:ed:b7:4b:78:
                    d0:99:fa:ed:e6:68:6e:0c:52:f4:85:35:ac:6a:9f:
                    23:ef:2b:e3:54:79:18:85:0d:4a:77:d3:06:4a:f6:
                    82:6a:c6:74:f6:ff:06:ee:2f:39:2f:26:4c:e2:e6:
                    bb:5e:8e:c9:a1:d1:70:07:cb:6a:12:be:5e:60:83:
                    d5:82:cb:98:af:3b:4b:b0:92:ae:88:62:50:99:15:
                    2b:9f:9e:41:11:bb:cb:aa:db:cd:28:b4:16:16:78:
                    92:ef:2f:f1:54:53:6a:3e:03:12:36:8a:74:f2:e5:
                    54:38:b9:91:cc:54:c1:11:d8:d8:4d:39:1b:51:50:
                    e1:93:8c:1a:d1:13:9e:dd:65:8d:f2:af:36:39:a8:
                    41:e7:d5:e8:f7:6d:d2:43:33:6a:73:b4:89:7f:8d:
                    6f:d5:1e:ae:e7:c7:91:5a:89:ec:f5:b1:51:64:de:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0C:D9:E5:CA:A6:D3:67:D7:57:F5:21:63:DF:77:0F:FC:FF:7E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c00873-df64-335b-96ab-b379c69e8433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:5c:fd:d7:ed:70:12:69:fa:9a:39:8a:f3:cd:61:2d:c1:
         81:0c:99:3a:aa:f9:78:20:a7:8d:19:fe:12:21:bc:cc:dd:71:
         01:af:ed:78:a6:c2:2f:4e:0e:9a:92:ce:93:93:87:a8:94:ad:
         d5:f0:4e:6a:57:32:fd:1d:ad:4f:b6:c8:1c:9a:57:3e:eb:60:
         30:c5:73:95:fe:5d:e6:61:7b:bf:7c:9d:69:b2:cf:56:1f:86:
         fc:b2:95:da:5f:1f:34:27:f9:9b:92:ad:68:9a:28:fe:0e:a4:
         26:9e:a7:87:de:3e:4e:0a:26:c1:47:78:71:94:dc:fc:8d:17:
         b3:4f:97:53:65:4f:33:b4:28:2d:75:b6:2b:3d:25:bd:d8:47:
         a8:35:0e:90:e6:c0:d5:aa:bd:77:5a:88:3f:e4:6c:e3:69:fa:
         f1:ad:63:90:63:be:40:b7:00:63:ce:9d:f4:db:76:71:8f:7c:
         56:5a:0c:99:72:0f:df:c2:b0:6a:e0:14:db:74:71:bd:93:e7:
         38:cd:1e:4a:4e:17:63:8c:eb:c2:f2:f9:48:3c:ac:f9:05:1e:
         78:0f:c5:9f:f3:6d:14:4e:25:c6:72:78:13:44:fa:50:76:db:
         1e:95:f8:d7:d4:1a:fe:d0:54:74:08:56:e8:77:7b:6c:4e:a7:
         d8:82:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:33:58 2025 by rpki-client