Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3673a7cf-3cea-3778-965c-b499e8cc6918.roa
File:                     3673a7cf-3cea-3778-965c-b499e8cc6918.roa (raw, json)
Hash identifier:          iAtJKu4rGvrD8QwbbFOVeJqpK9x79Jtq2FHRzL4B5E0=
Subject key identifier:   03:71:2C:CC:EC:F5:C0:C1:57:D3:BE:37:85:A1:E8:DE:D2:2D:07:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43272DB15C97251D892DF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3673a7cf-3cea-3778-965c-b499e8cc6918.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.197.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:72:db:15:c9:72:51:d8:92:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f09a5010-29d4-4d1a-b624-ff79d5d03aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:e3:f8:56:86:51:8f:d0:e7:00:d4:ae:96:
                    61:f4:6c:37:a5:cd:93:7f:d6:56:9a:56:d2:c9:6a:
                    46:90:21:f5:c1:35:15:cc:4e:16:35:1e:23:ee:d1:
                    2d:19:6f:5f:cd:3f:d1:78:1f:ab:86:f5:1f:81:8a:
                    a2:07:73:a7:85:01:94:ca:5d:2b:d1:e6:b0:6d:13:
                    65:19:7e:5c:79:80:db:0f:07:bd:5f:fa:c8:da:0f:
                    51:ca:a8:eb:3c:48:26:6d:8a:56:0f:4f:b0:7f:89:
                    18:ba:b9:fe:73:31:38:ff:cd:e3:f5:93:a0:de:8f:
                    7c:36:70:9c:c6:c6:39:f5:c6:f4:f8:b0:9f:33:8f:
                    3b:96:6c:4b:75:fc:49:eb:9f:22:8a:d8:b9:7e:4f:
                    39:6f:2d:81:c1:b7:01:d4:5a:19:3d:d4:9c:a0:1f:
                    42:4d:02:30:3c:bd:2e:12:4c:70:f7:07:b3:ff:51:
                    82:3d:23:18:9a:f8:04:b0:f1:8d:5a:46:61:23:1d:
                    2f:28:e5:ab:da:d1:82:39:2a:32:b0:6d:19:cc:af:
                    5d:db:bb:7f:bf:8c:b8:ba:96:4e:b5:9a:75:d7:b9:
                    3f:29:7b:68:68:9f:d1:74:71:f7:8f:32:5e:17:2a:
                    61:62:3b:e2:7d:cc:b1:51:66:08:81:80:99:3e:c8:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:2C:CC:EC:F5:C0:C1:57:D3:BE:37:85:A1:E8:DE:D2:2D:07:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3673a7cf-3cea-3778-965c-b499e8cc6918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:ce:f7:f3:e2:9a:72:ba:8b:79:30:4a:4f:c7:60:23:a6:71:
         99:bf:9b:21:12:33:f5:e2:39:8a:71:3b:09:ff:43:fd:31:3a:
         a0:02:18:14:81:9d:82:f8:5a:b0:09:2d:6a:ac:af:be:c6:a0:
         68:70:55:7a:bc:6b:eb:22:85:31:d5:84:ca:93:ef:70:f4:0b:
         f2:e6:0a:4f:4b:88:68:f1:df:de:a5:72:21:5b:a0:3e:18:91:
         16:c5:d3:4d:9b:23:cb:5d:23:37:8f:64:aa:41:ce:59:82:77:
         b8:9d:5e:40:2d:79:4b:80:72:65:d3:16:4c:c8:92:1d:02:e0:
         94:9e:81:3c:36:49:d8:a2:04:53:64:9f:5f:da:1b:47:2c:ab:
         94:e2:1f:bc:04:61:ec:bf:94:25:ee:23:c6:28:64:71:89:77:
         1d:1e:b9:26:13:a6:66:07:24:bc:55:bb:48:32:bd:d2:5a:de:
         39:33:12:8b:cb:90:26:c1:bc:b1:15:09:93:d8:b3:a9:c7:a4:
         5a:7c:c7:c9:bd:14:e4:81:31:7e:bf:13:51:bc:8c:dc:a1:ee:
         13:29:2f:c3:ac:e5:44:43:3c:a1:8d:9a:3f:a5:3a:5a:ea:bf:
         8b:d1:48:88:00:d3:ed:7a:28:fd:29:38:66:0d:19:05:3d:6f:
         17:31:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:36:34 2025 by rpki-client