Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffc7021-2fe8-3b38-b130-1f43ee5e4498.roa
File:                     dffc7021-2fe8-3b38-b130-1f43ee5e4498.roa (raw, json)
Hash identifier:          nJxu/F6ztcA6ryrEhZLY+Hf5wRJChrTwXewLkGw0M5s=
Subject key identifier:   9B:5C:64:70:12:FF:B9:61:CD:24:5F:ED:69:49:B6:65:92:53:CF:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C086473EF7322E05ADAD480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffc7021-2fe8-3b38-b130-1f43ee5e4498.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.227.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:64:73:ef:73:22:e0:5a:da:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=9f05e9a9-d06c-4a31-997b-35102d2e5af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:28:f9:54:46:82:5c:63:c2:93:95:d8:1a:
                    1c:35:84:aa:96:fb:a7:ec:15:56:e3:10:7d:49:5a:
                    0e:22:83:8d:b2:f7:17:49:28:5b:58:ea:eb:69:51:
                    60:39:49:41:fd:4e:e4:ab:ed:8b:78:6e:29:20:e5:
                    80:59:31:ec:54:ee:70:72:72:dc:ee:af:ba:7d:c1:
                    f7:5d:5c:94:ce:49:83:21:c9:3a:c3:8b:5d:16:99:
                    fa:62:f9:37:10:0b:6b:2d:6d:8a:7b:61:07:6f:15:
                    f1:0a:bc:c6:92:e2:ba:34:3f:77:02:1a:88:34:53:
                    c3:bc:68:1a:3f:6e:98:1d:7c:b9:4a:85:0f:9c:6f:
                    c7:8e:49:36:d3:59:8a:7b:fa:67:f1:18:cd:ea:10:
                    23:35:24:1d:b9:ca:f3:eb:a6:9a:51:e6:4d:7b:b7:
                    c1:24:d4:bb:64:f5:c7:50:a7:bb:3e:b3:aa:4a:5a:
                    0a:6d:4f:1a:fa:67:c4:70:8d:55:dc:98:1d:ef:e4:
                    bd:ab:d2:04:a3:4f:da:b3:65:16:18:45:3a:13:dd:
                    fd:4a:c9:29:c9:4d:31:dd:b4:1e:bc:cf:2c:fc:eb:
                    a7:ba:a4:04:03:57:07:61:9c:37:f7:0e:52:c1:02:
                    b2:8f:cb:7d:86:60:30:66:9a:0a:c3:21:9f:d1:11:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5C:64:70:12:FF:B9:61:CD:24:5F:ED:69:49:B6:65:92:53:CF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffc7021-2fe8-3b38-b130-1f43ee5e4498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.227.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:74:89:d1:ad:bf:aa:34:e3:e9:5e:86:b0:32:4c:8b:30:
         da:23:70:17:dc:19:b8:0f:75:27:d2:ed:32:e8:d3:a0:e2:59:
         91:3c:2c:3a:59:d4:63:67:2a:9e:2c:6d:f4:a2:d8:0e:76:e0:
         57:06:0c:ae:b0:e1:48:c0:53:05:59:9e:90:23:1b:01:10:75:
         44:74:fd:6e:26:19:7e:57:0f:a9:00:39:31:5a:7c:d1:46:5c:
         77:0a:42:dd:29:ac:f5:f8:f9:a7:ea:51:6f:99:3e:1c:6f:e8:
         bd:f8:16:10:f3:95:2c:90:7d:69:f6:62:ec:65:ba:9c:44:f1:
         10:fb:12:90:12:ba:6a:bc:0c:29:73:43:61:74:60:b3:27:48:
         d4:d2:0a:de:b8:57:66:18:80:52:88:95:9a:65:86:9c:93:65:
         b7:ad:68:19:b2:d1:b5:ec:e1:ad:92:62:2e:55:2a:54:04:76:
         ed:21:ce:63:d9:0c:e2:c9:45:71:9c:67:25:56:be:a5:61:d9:
         63:f2:38:65:0d:b6:b3:a8:9d:61:02:05:07:d7:22:1c:6f:8c:
         2e:28:1a:bb:4b:c0:80:c7:77:ba:a5:f2:ae:d2:f5:0e:b4:23:
         69:06:0e:87:10:eb:22:3a:1c:10:48:11:0f:5a:36:d9:9c:b0:
         1d:b3:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:34:56 2025 by rpki-client