Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645e872c-3058-329b-b860-fd2cba64ffcb.roa
File:                     645e872c-3058-329b-b860-fd2cba64ffcb.roa (raw, json)
Hash identifier:          oXWVox6GTI3PZdtAjC7qrLGsExmSK8kbefRCy7l+zjw=
Subject key identifier:   EC:7D:08:CD:68:E8:26:73:25:20:A5:2F:CF:1F:73:75:6A:08:A4:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED357354F6364B18116C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645e872c-3058-329b-b860-fd2cba64ffcb.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.200.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:35:73:54:f6:36:4b:18:11:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=745141b8-a74e-4ce5-8aa7-ee1b9d371f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:ba:9f:2c:5e:b5:29:db:93:ed:f0:6b:1d:
                    fe:06:d4:c7:ed:25:78:5e:47:05:e8:e7:e4:cb:19:
                    e6:b4:2a:f6:7d:c6:ef:81:7c:03:56:fe:3c:ea:a6:
                    1f:8e:b7:2b:4f:90:39:88:75:0d:b7:c7:d0:87:82:
                    c3:92:87:c0:90:bd:19:b1:f0:26:00:07:12:16:21:
                    9b:34:16:a6:10:6f:16:24:05:58:dc:26:8e:27:24:
                    c5:af:f6:13:ea:90:28:6e:3f:2b:02:f2:6f:29:db:
                    c0:12:72:c0:af:b6:f3:8f:19:a8:c5:77:ed:30:70:
                    d8:03:44:48:b7:91:35:ee:f4:38:81:1c:68:3e:54:
                    7d:62:f9:de:8d:09:92:66:ae:80:18:44:ae:81:56:
                    3d:89:f4:f0:86:53:fe:8d:9c:9c:61:c6:3b:33:43:
                    d4:df:da:6b:bc:2c:1e:b8:e0:c5:06:29:1b:9c:d5:
                    4b:fb:68:a5:8b:36:91:c6:18:c2:e8:61:65:9f:90:
                    7f:ed:0f:c4:4f:08:ed:bf:4a:6b:86:39:31:fc:b8:
                    2e:01:98:2b:94:22:1d:09:53:9c:57:fb:cc:f5:49:
                    22:07:3e:d1:2c:77:a0:3f:43:92:86:98:ed:3a:10:
                    86:27:11:11:47:98:3a:1f:5b:cc:fd:7c:d8:8e:cb:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7D:08:CD:68:E8:26:73:25:20:A5:2F:CF:1F:73:75:6A:08:A4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645e872c-3058-329b-b860-fd2cba64ffcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:86:7b:f7:54:dd:b2:aa:78:e9:84:61:1d:eb:45:4e:0a:
         9a:1f:a4:f1:5b:97:4b:6f:8f:bb:cb:2d:26:08:07:94:f2:cc:
         0a:ca:74:33:38:a3:73:ca:c3:b1:57:67:bd:cf:ff:ee:1b:37:
         11:69:7d:ce:29:90:a5:fb:51:56:81:d7:f0:38:31:1d:99:07:
         e1:9e:14:f1:87:df:75:82:fa:a1:f0:fe:ba:97:c3:03:77:05:
         6f:ca:9e:74:47:86:b5:1b:5a:d3:7a:fa:c6:1b:6d:55:cd:3e:
         95:2d:ed:d8:fb:f9:30:0d:c5:7d:56:dc:3e:6b:55:cc:36:08:
         c5:5c:41:be:f0:55:fe:09:1e:00:13:ba:2f:31:70:be:b5:fb:
         ad:4f:d4:3b:0b:c1:c7:29:e3:fe:13:ee:9d:cc:d9:ab:ed:f4:
         e4:85:53:3e:9f:7c:36:17:90:6a:90:a3:21:32:19:3b:ff:cf:
         df:00:de:de:09:04:06:c7:97:45:70:12:63:5c:af:1f:d8:be:
         25:9f:f4:53:42:1d:77:12:b1:6a:99:27:e2:d3:47:91:99:20:
         bb:50:d5:f3:fa:1c:43:aa:87:3d:65:5a:f7:18:de:1a:af:f0:
         d9:90:0d:44:07:98:0c:2e:f2:69:6c:80:70:2c:90:ea:2d:73:
         e6:6b:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:25:10 2025 by rpki-client