Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9091a13-55a4-3537-a495-c84e25504b9e.roa
File:                     d9091a13-55a4-3537-a495-c84e25504b9e.roa (raw, json)
Hash identifier:          XYhMYHkGTadeDb68DTzSPIYsul7rKyjrjVfXJHmPZsw=
Subject key identifier:   21:41:12:B1:49:BA:6B:EB:F0:50:4B:68:12:63:4A:C1:13:9A:62:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F956BEC9B7DB1824162280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9091a13-55a4-3537-a495-c84e25504b9e.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.195.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:56:be:c9:b7:db:18:24:16:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=84b47f55-8805-4468-8111-54b7c5ebedaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:a7:e2:7e:31:fd:fe:09:54:a1:10:d1:43:
                    df:43:00:46:2a:0e:ab:62:b4:a2:63:94:3b:ea:9c:
                    ef:44:57:30:27:85:ba:9a:e8:57:c9:c5:57:c6:b3:
                    05:ee:05:02:92:66:e9:c3:62:0d:01:7b:fc:09:1d:
                    47:7a:b7:f9:41:9e:b4:70:21:0f:5d:c0:1b:06:67:
                    a6:97:47:60:39:73:fc:8f:aa:1c:c8:ba:ff:08:92:
                    60:ee:e6:52:13:12:7f:83:7d:d9:33:a9:c6:cb:a5:
                    a5:35:cc:f6:13:fa:36:75:86:80:0b:e0:c3:59:a6:
                    2d:e0:62:91:e4:f9:22:cb:c7:b4:b5:4c:78:7e:27:
                    d5:ab:f5:7a:f6:f1:55:69:65:08:ce:77:83:c5:44:
                    3d:0b:7a:74:cf:5a:cf:4a:09:73:1f:e1:cb:28:8f:
                    63:8d:fb:08:a2:e4:66:20:17:67:b1:3d:f2:cc:e2:
                    f3:86:62:ff:64:d6:83:bc:63:1e:6f:9c:61:30:04:
                    f1:8b:9c:00:ab:62:8c:fb:3f:8f:67:8a:d3:15:d8:
                    65:8f:76:e2:d3:b9:a9:eb:ef:55:ac:29:b4:9f:7c:
                    f7:60:08:3a:1c:10:14:ed:de:47:df:16:3e:f8:9b:
                    86:73:57:a0:21:61:e0:70:c1:13:d5:7f:d5:0c:9b:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:12:B1:49:BA:6B:EB:F0:50:4B:68:12:63:4A:C1:13:9A:62:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9091a13-55a4-3537-a495-c84e25504b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:bd:ea:40:bc:88:00:4d:51:0c:d2:b0:48:44:b7:4c:75:6f:
         50:3d:e6:c4:19:69:29:54:ce:ae:c1:63:bc:d5:f6:4b:bd:1a:
         9d:67:3a:ae:80:42:fb:d9:c6:11:fa:4d:6b:e3:f7:fe:9f:a4:
         46:2c:cc:b6:45:06:33:82:b4:01:be:7b:df:1f:04:15:05:d6:
         1d:33:01:11:c7:77:89:b5:56:d2:e5:72:4c:49:7a:9e:8b:e1:
         52:c6:42:b7:ac:a6:fb:a5:02:5a:9e:bb:13:6e:df:3f:16:25:
         50:70:2f:b6:fc:67:34:d1:3d:b0:11:7e:f8:f4:db:90:f1:cf:
         b5:8d:f4:0b:4c:14:14:30:7a:d4:91:2e:17:02:5b:b4:0d:1b:
         6d:0a:ba:72:88:9e:b8:fb:2f:34:d1:c6:51:b0:23:d5:16:6b:
         73:a4:7d:a7:dd:d4:cc:bf:f0:cf:9f:71:b9:24:47:e0:f9:eb:
         72:63:a0:c7:21:7d:a2:a0:21:97:1c:9d:3a:54:d9:0f:53:8b:
         3a:10:a2:0a:4e:17:23:c4:ea:d7:37:b4:87:d7:c2:af:e3:27:
         28:56:9e:57:b3:2a:08:0e:77:74:f9:81:0a:bc:33:ef:b8:fb:
         cb:54:05:88:50:4f:87:e6:fe:2e:36:52:c8:45:ec:6d:42:78:
         45:21:d2:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Va+ybfbGCQWIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ODRiNDdmNTUtODgwNS00NDY4LTgxMTEtNTRiN2M1ZWJlZGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFan4n4x/f4JVKEQ0UPfQwBGKg6rYrSiY5Q7
6pzvRFcwJ4W6muhXycVXxrMF7gUCkmbpw2INAXv8CR1Herf5QZ60cCEPXcAbBmem
l0dgOXP8j6ocyLr/CJJg7uZSExJ/g33ZM6nGy6WlNcz2E/o2dYaAC+DDWaYt4GKR
5Pkiy8e0tUx4fifVq/V69vFVaWUIzneDxUQ9C3p0z1rPSglzH+HLKI9jjfsIouRm
IBdnsT3yzOLzhmL/ZNaDvGMeb5xhMATxi5wAq2KM+z+PZ4rTFdhlj3bi07mp6+9V
rCm0n3z3YAg6HBAU7d5H3xY++JuGc1egIWHgcMET1X/VDJsnRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFBErFJumvr8FBLaBJjSsETmmIyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwOTFhMTMtNTVhNC0z
NTM3LWE0OTUtYzg0ZTI1NTA0YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsOpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALi96kC8iABNUQzSsEhEt0x1b1A95sQZaSlUzq7BY7zV9ku9Gp1nOq6A
QvvZxhH6TWvj9/6fpEYszLZFBjOCtAG+e98fBBUF1h0zARHHd4m1VtLlckxJep6L
4VLGQrespvulAlqeuxNu3z8WJVBwL7b8ZzTRPbARfvj025Dxz7WN9AtMFBQwetSR
LhcCW7QNG20KunKInrj7LzTRxlGwI9UWa3Okfafd1My/8M+fcbkkR+D563JjoMch
faKgIZccnTpU2Q9TizoQogpOFyPE6tc3tIfXwq/jJyhWnlezKggOd3T5gQq8M++4
+8tUBYhQT4fm/i42UshF7G1CeEUh0og=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:59 2025 by rpki-client