Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa
File:                     e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa (raw, json)
Hash identifier:          AF4/UzE5UbVks7fZ/PxHHHUA9aqKX/LH6wzDBHS+h+U=
Subject key identifier:   35:41:60:FA:27:1C:17:C9:91:C8:C6:36:D2:24:05:A6:FA:A1:A0:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C071FA1F6CBAEB4A28C5A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.47.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:1f:a1:f6:cb:ae:b4:a2:8c:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ecad1c60-7d60-41bf-bf6b-dda44a26bec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:47:ae:d3:db:1b:c4:88:5c:29:11:3d:2a:
                    f0:e6:82:fc:ba:29:d7:a2:f4:2f:71:75:6f:e7:c7:
                    f2:17:10:7e:da:0f:7a:a5:d7:30:7f:35:d6:b9:cf:
                    2a:9c:b8:fc:cc:00:b1:ab:49:8a:82:3a:03:fc:7b:
                    c5:db:1f:02:3f:d1:27:0d:60:32:94:a0:90:d0:3c:
                    3b:af:e9:ae:d7:9c:0c:cc:fb:f6:a7:f8:32:b6:84:
                    00:da:74:52:d7:a0:4a:16:92:d6:45:bf:0d:c1:48:
                    02:2a:f0:d6:c1:7d:f0:ca:de:62:e5:5b:c3:9c:78:
                    cc:79:12:f9:a9:11:74:f6:23:9a:c6:e1:50:57:10:
                    38:eb:a6:c3:12:0c:5b:57:ea:04:28:f5:d2:64:cc:
                    fd:35:f4:71:79:68:70:7b:44:eb:be:8e:45:9e:3a:
                    9d:77:1e:c1:5b:95:d2:31:9a:d6:d5:13:d7:2e:40:
                    ec:83:db:1c:a0:00:a6:72:83:fd:05:60:31:d4:22:
                    99:ef:9d:ed:e4:f3:02:ed:d1:f9:cf:99:c3:81:72:
                    50:41:78:af:77:4d:f7:fb:16:15:e5:97:5a:a7:35:
                    cf:b1:d2:c0:1b:97:a5:59:3d:37:4f:48:1b:af:76:
                    31:7f:34:ef:db:7e:ba:28:48:0a:8f:31:23:c9:33:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:60:FA:27:1C:17:C9:91:C8:C6:36:D2:24:05:A6:FA:A1:A0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:52:6d:96:83:60:29:ef:99:90:6b:28:b5:c6:a7:d3:29:
         1d:e7:76:d0:ac:29:3f:35:72:a9:14:f9:9c:5f:3c:6f:01:81:
         77:97:19:59:05:74:8f:5f:1d:4b:c8:62:e4:a5:31:09:75:76:
         3e:a1:3f:e6:0d:ee:be:f8:fd:37:4e:4b:18:06:b8:ab:b4:62:
         80:05:ef:6e:5e:bc:14:e9:2c:19:6a:81:c5:42:a0:4d:7a:2d:
         48:43:27:df:48:97:01:08:a8:c4:aa:9a:c1:0b:4b:75:10:04:
         c3:48:31:f7:c7:2a:3b:b0:68:82:06:03:8d:b6:ca:de:0c:31:
         22:31:97:c6:1a:1a:49:9f:fd:88:b4:15:3d:79:1b:4a:a1:6c:
         6b:c7:e3:2b:c9:ba:f5:d9:73:b8:e5:b2:b4:cf:70:ea:eb:eb:
         7b:0b:a8:48:c2:6d:54:74:f6:a3:ee:c8:69:08:d9:a3:aa:1b:
         65:94:97:58:7f:9a:58:3e:ee:ac:b6:6b:e1:34:59:49:d0:6b:
         80:ed:d8:fc:b5:ec:22:db:d2:56:93:52:4d:3f:98:16:eb:3c:
         e6:2b:d7:5a:88:6d:5a:2d:10:77:9e:5b:fb:52:d8:4a:d7:bf:
         98:63:5f:c3:9f:a5:0b:60:e2:da:6d:33:e5:00:66:df:4e:57:
         86:d2:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:50:58 2025 by rpki-client