Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef781bc9-5b35-393d-b631-e395afab1608.roa
File:                     ef781bc9-5b35-393d-b631-e395afab1608.roa (raw, json)
Hash identifier:          RpRMdsyYhEmkHClJUkFYpnYAHNtf1m04auVxJ48RvGQ=
Subject key identifier:   07:7F:5D:FB:10:62:E4:70:48:EB:5B:CD:85:3B:6E:50:DD:00:A0:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B2697D013CA46AF329F889C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef781bc9-5b35-393d-b631-e395afab1608.roa
Signing time:             Tue 28 Jan 2025 17:53:19 +0000
ROA not before:           Tue 28 Jan 2025 17:53:19 +0000
ROA not after:            Mon 28 Apr 2025 16:53:19 +0000
asID:                     33651
IP address blocks:        98.45.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:69:7d:01:3c:a4:6a:f3:29:f8:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:53:19 2025 GMT
            Not After : Apr 28 16:53:19 2025 GMT
        Subject: CN=7af3bd8a-31e9-4d7d-be30-f83d8487eff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:ca:c1:01:0a:91:b2:50:a3:f6:25:5b:ae:
                    bb:1c:eb:2a:b5:9b:aa:78:14:c3:2d:ee:46:1c:88:
                    f9:eb:fb:6a:34:94:a4:fa:fe:92:86:66:c0:7f:cc:
                    1f:fc:1b:d1:20:f0:52:10:10:51:72:88:7b:78:ac:
                    87:ee:57:7c:9e:90:54:f1:1f:ab:50:8f:d1:27:87:
                    b5:e6:aa:9e:b8:16:94:af:4d:1f:99:84:48:e3:5e:
                    f7:18:90:6b:15:27:df:cf:eb:c8:77:b3:e8:7b:90:
                    25:0d:37:82:04:8c:4c:67:32:97:59:af:17:a3:ff:
                    6c:ff:8d:9f:3a:ac:67:ee:e7:cd:51:0c:03:db:5e:
                    6d:61:53:6a:51:6b:88:3f:85:1c:55:70:98:db:6f:
                    88:c7:a0:2f:18:2d:9d:be:90:c8:48:4b:08:eb:95:
                    aa:67:7a:8e:6e:84:e3:3a:35:2e:d2:6b:53:ba:98:
                    75:04:87:b7:b1:47:1c:74:4c:91:5d:3f:52:d6:a5:
                    ca:d6:42:7c:03:73:bf:3d:43:14:30:01:f5:35:4b:
                    84:95:71:36:4c:bb:e3:35:02:7d:95:74:20:f5:a6:
                    3d:22:2a:27:ab:13:68:fd:4d:ca:ca:b8:bd:f2:20:
                    d0:63:2a:b0:aa:3e:e6:c6:a1:97:8a:76:09:bc:b7:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:5D:FB:10:62:E4:70:48:EB:5B:CD:85:3B:6E:50:DD:00:A0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef781bc9-5b35-393d-b631-e395afab1608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:b9:74:79:bb:ed:e0:9f:bf:36:2e:68:f8:d0:fb:1d:c3:e9:
         0d:de:fe:0b:32:2c:59:9d:8e:5f:13:8c:57:a9:f8:3a:41:5e:
         22:41:53:52:b9:f4:af:48:42:19:3b:1c:e6:9a:9d:49:eb:b3:
         e2:d0:da:b3:fc:f1:a6:67:b4:8d:80:e1:bc:39:06:66:ea:43:
         d9:ed:09:99:cc:da:5b:63:fd:f7:15:4f:ff:6c:e8:e4:85:69:
         3a:29:08:72:cb:9e:59:22:c6:e2:1b:9f:78:a2:c0:cd:05:2f:
         20:17:ab:7e:1b:6d:65:ee:e3:e1:b2:ef:7f:3d:9e:91:0e:85:
         24:07:85:4f:a6:84:1b:51:f1:40:18:b7:dd:4d:46:02:3a:6b:
         86:e2:6e:9d:29:e6:59:50:f2:9f:8e:47:a3:3f:d4:ef:93:0b:
         ed:e4:f2:e0:54:43:ae:e3:1a:66:f1:a6:37:d9:c0:a8:15:11:
         d8:35:eb:2b:78:04:e5:0e:a6:5d:f3:b9:ec:45:8f:1b:09:a1:
         39:92:e9:58:97:74:81:14:93:8f:92:7a:8a:cd:8b:d1:58:fb:
         78:9f:2c:4f:c1:ba:e1:d3:59:da:56:c2:b9:3c:40:d5:6d:f1:
         43:58:34:dd:99:10:7a:c2:d2:18:67:62:b2:66:ff:f1:ca:77:
         48:37:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:41:19 2025 by rpki-client