Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa
File:                     0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa (raw, json)
Hash identifier:          59vcmV4EipVHfiu3Mz9r1PVjSPa+Ix5DVqw7iWqTYM0=
Subject key identifier:   78:3D:2C:21:B2:F1:29:25:8E:22:13:A7:BD:BD:82:AC:3D:F4:82:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849929496C7ACBBC4DE0F966FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        98.35.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:96:c7:ac:bb:c4:de:0f:96:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=a923e99a-eff9-4f6d-af6f-9851c873065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:96:5c:0b:98:62:48:31:b7:fc:fd:eb:7c:
                    c9:d6:f3:ad:d6:9e:84:8a:63:7a:e1:61:93:9d:56:
                    40:50:fa:d6:39:e1:84:1f:1c:9a:cb:b1:b2:e8:c7:
                    ed:a3:86:1f:57:94:fc:75:54:25:9e:a1:d4:a2:c3:
                    a3:fe:3e:59:d7:81:aa:cf:b8:f0:16:f3:19:07:bb:
                    d0:5e:30:e2:e8:82:ef:ff:6b:e5:c6:19:51:a3:89:
                    ac:b4:bd:0c:ae:d1:33:e8:0d:0e:d2:b8:d6:d1:67:
                    ca:4c:c7:1d:66:1a:dc:16:b8:66:92:c0:ed:85:35:
                    16:fa:6c:78:55:ec:d0:29:73:25:9c:9d:8c:2b:24:
                    aa:1e:0c:b7:a3:ac:3a:d9:32:be:d4:53:6a:1b:16:
                    bc:c2:84:a4:e0:5e:7b:45:a1:ce:74:58:82:d2:46:
                    fe:29:b8:d7:c8:26:9b:d5:58:e8:50:79:c9:97:68:
                    6b:65:c9:06:49:5a:53:fa:de:c9:48:42:14:9a:ae:
                    be:d8:5e:c8:e8:91:95:94:5d:2f:92:8a:63:df:5b:
                    44:da:25:9c:bf:13:67:21:3b:e0:c9:f6:e5:7f:5a:
                    46:36:04:34:3c:7e:aa:89:f2:ea:44:ad:9b:ad:f0:
                    0b:8a:58:aa:fd:24:c7:9f:72:53:2d:7b:91:79:b6:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3D:2C:21:B2:F1:29:25:8E:22:13:A7:BD:BD:82:AC:3D:F4:82:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.35.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:e9:19:4a:fe:e9:31:c3:f2:8f:a8:59:a1:81:9f:20:75:
         57:26:12:91:5d:fd:7c:9c:8a:2a:59:e7:1c:d5:8d:ad:09:51:
         4f:98:08:74:93:87:c0:93:0c:b6:d5:d9:25:2f:4e:2f:f8:0c:
         e8:64:09:e4:28:9a:c6:55:ef:cc:b3:d1:f2:26:b2:e9:59:76:
         8c:7f:0b:46:a1:45:34:c0:1f:12:d3:8a:00:cc:93:a8:81:f7:
         f9:35:0c:ff:9d:47:bd:12:d4:09:12:c4:65:60:2d:4e:7e:8f:
         b6:6a:0b:d6:3d:f3:1e:64:49:c6:1f:3c:22:99:45:98:70:52:
         09:01:1f:9b:73:5a:1e:91:59:47:bc:6d:be:42:33:ce:c1:f3:
         07:eb:43:db:86:da:86:88:f7:9f:48:ac:19:93:db:7a:1a:80:
         84:fc:c2:29:61:ff:4e:fd:e0:04:f1:80:0b:07:2f:c9:31:0a:
         f3:3d:06:4c:f0:fc:41:e7:48:0d:e1:20:06:84:b2:fd:9f:87:
         ee:ec:4b:2e:1b:f7:d0:cb:5e:1a:91:bb:9e:75:a7:f9:5d:b0:
         cd:01:d0:30:6e:15:22:41:6f:80:f3:fd:19:41:fe:49:a5:5b:
         88:6d:ee:83:d9:ea:20:59:45:df:d6:2a:ff:bc:62:03:3e:8e:
         43:83:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:04:14 2025 by rpki-client