Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7796a98-5611-3bd3-aecd-ad70d2f663fb.roa
File:                     f7796a98-5611-3bd3-aecd-ad70d2f663fb.roa (raw, json)
Hash identifier:          O85jjHa4ALyBRuhroG5dicQ+P0hV2ojdk8L0PZuZItU=
Subject key identifier:   91:2A:40:46:FF:83:AC:D8:A9:BB:0B:8C:02:B2:AC:8D:89:9F:45:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8194D7B3CC40156675C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7796a98-5611-3bd3-aecd-ad70d2f663fb.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.44.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:19:4d:7b:3c:c4:01:56:67:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=7c31b710-777f-4b51-9222-325d581b03ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:77:36:51:8f:c0:97:8f:69:3c:50:85:4d:
                    71:6b:dc:37:df:f9:a3:22:c0:3d:22:a1:b9:b1:61:
                    90:c0:9f:b2:61:56:ef:8d:5e:be:99:78:d8:a8:f7:
                    ec:25:d1:14:6f:8c:bc:8d:df:b8:6d:e1:fb:13:bc:
                    02:86:78:7c:88:8c:23:3b:fa:1c:5c:d0:e6:4b:87:
                    18:2a:47:b8:3c:f8:f1:08:5a:51:83:91:ec:d8:37:
                    c9:52:9a:bd:7e:00:bf:95:86:02:9c:72:9d:ba:28:
                    57:9a:c7:f1:5c:ba:e2:15:8e:dc:2c:69:5d:e1:78:
                    e5:0a:b8:ac:9f:d3:11:c2:90:5f:88:46:00:96:18:
                    25:4b:ba:61:57:f7:ba:45:86:f2:27:34:e5:8d:99:
                    e9:db:f4:58:6d:96:60:96:38:ef:fa:c3:41:2f:95:
                    26:a8:8c:8d:10:3d:44:5f:4c:92:e4:02:25:64:c3:
                    6e:b5:33:8d:bf:c0:e1:01:34:f1:e5:72:6c:05:0a:
                    3f:d0:20:c8:5c:31:b3:7d:89:c9:66:95:a8:84:c8:
                    96:74:bc:c7:f8:ba:f3:21:37:d9:75:5a:95:83:f8:
                    0e:79:d2:bb:b8:6c:2a:a0:01:bf:bb:13:2c:09:77:
                    cc:59:dd:84:25:5f:92:22:28:3d:34:4a:d6:36:6e:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2A:40:46:FF:83:AC:D8:A9:BB:0B:8C:02:B2:AC:8D:89:9F:45:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7796a98-5611-3bd3-aecd-ad70d2f663fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0a:14:82:4f:e4:a1:a1:e8:e5:a3:50:d4:ed:de:0e:1e:b4:
         49:28:24:38:85:b8:49:74:18:73:79:d8:33:92:b2:40:4b:6d:
         4b:18:97:3b:b5:cf:6e:8d:a4:ed:2a:e9:0f:58:86:1f:0a:83:
         3f:24:c9:76:73:f4:23:cc:6e:a9:36:73:2d:98:68:8b:af:01:
         bc:85:cf:c3:83:ff:46:8d:cf:3e:3f:9c:cf:b4:a5:76:7b:e6:
         99:80:01:9b:ee:70:b0:f4:ff:bf:2b:90:c0:0d:f2:f9:6d:39:
         2c:0e:2e:41:d6:e0:57:8d:3a:e2:79:bc:82:89:d6:b3:87:02:
         54:39:b1:d5:f5:09:aa:af:ea:a4:5e:4f:64:4f:af:f4:cb:c6:
         7b:08:3f:00:3e:a2:26:8b:22:d6:cd:7f:11:9c:b3:32:64:b4:
         98:57:88:b2:e9:44:0e:24:04:b2:f3:6f:de:3e:70:48:35:6f:
         c9:a3:b6:b2:bc:2e:14:b8:1d:24:0e:b2:e3:9f:be:a7:60:f9:
         70:d8:8a:fc:07:93:15:44:41:cd:75:a5:28:c1:b0:8f:0d:04:
         2a:a0:af:4c:ca:b9:12:7f:bb:49:14:38:af:a4:f3:69:29:8d:
         88:d0:0c:54:d0:fe:7e:61:0d:75:fa:29:87:44:84:8e:76:62:
         34:8e:f5:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+BlNezzEAVZnXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
N2MzMWI3MTAtNzc3Zi00YjUxLTkyMjItMzI1ZDU4MWIwM2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKZ3NlGPwJePaTxQhU1xa9w33/mjIsA9IqG5
sWGQwJ+yYVbvjV6+mXjYqPfsJdEUb4y8jd+4beH7E7wChnh8iIwjO/ocXNDmS4cY
Kke4PPjxCFpRg5Hs2DfJUpq9fgC/lYYCnHKduihXmsfxXLriFY7cLGld4XjlCris
n9MRwpBfiEYAlhglS7phV/e6RYbyJzTljZnp2/RYbZZgljjv+sNBL5UmqIyNED1E
X0yS5AIlZMNutTONv8DhATTx5XJsBQo/0CDIXDGzfYnJZpWohMiWdLzH+LrzITfZ
dVqVg/gOedK7uGwqoAG/uxMsCXfMWd2EJV+SIig9NErWNm45qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEqQEb/g6zYqbsLjAKyrI2Jn0WjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc3OTZhOTgtNTYxMS0z
YmQzLWFlY2QtYWQ3MGQyZjY2M2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYizqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJIKFIJP5KGh6OWjUNTt3g4etEkoJDiFuEl0GHN52DOSskBLbUsYlzu1
z26NpO0q6Q9Yhh8Kgz8kyXZz9CPMbqk2cy2YaIuvAbyFz8OD/0aNzz4/nM+0pXZ7
5pmAAZvucLD0/78rkMAN8vltOSwOLkHW4FeNOuJ5vIKJ1rOHAlQ5sdX1Caqv6qRe
T2RPr/TLxnsIPwA+oiaLItbNfxGcszJktJhXiLLpRA4kBLLzb94+cEg1b8mjtrK8
LhS4HSQOsuOfvqdg+XDYivwHkxVEQc11pSjBsI8NBCqgr0zKuRJ/u0kUOK+k82kp
jYjQDFTQ/n5hDXX6KYdEhI52YjSO9SY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:13 2025 by rpki-client