Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73edda37-f9d0-3903-a33d-48afdf82df41.roa
File:                     73edda37-f9d0-3903-a33d-48afdf82df41.roa (raw, json)
Hash identifier:          XMJ+KdTD9CtNigBNdunEonczMVIqVE0cCc+UKcNnI/M=
Subject key identifier:   14:CC:09:B4:6F:EE:B4:93:BE:6E:13:D4:F1:46:A0:5D:18:B1:EF:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEEAEF3B47B519820D6A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73edda37-f9d0-3903-a33d-48afdf82df41.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.199.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:ea:ef:3b:47:b5:19:82:0d:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8356ffb2-61ff-44b6-9261-f5a18bd61aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:5a:8b:af:18:0a:ca:ea:ff:0c:6c:57:55:
                    55:04:f4:bf:f1:8d:bc:62:1b:7b:c9:2c:40:b5:fb:
                    ef:14:8c:d4:48:e9:50:67:48:2d:49:b5:2e:88:74:
                    8b:a2:34:45:e2:30:2a:29:fa:ce:8b:d9:5f:69:ca:
                    7f:f8:b0:c5:99:82:61:24:0d:92:8a:a7:5d:53:bb:
                    60:35:cf:e6:ec:23:9a:60:41:3e:eb:b4:ba:9a:07:
                    29:26:70:03:bf:23:7b:0f:9c:53:28:79:88:0a:f3:
                    f6:0a:79:95:6b:99:55:cd:55:b1:0a:c2:aa:65:c7:
                    c4:50:55:fa:40:19:21:5f:55:83:1e:39:06:3b:4f:
                    84:bb:6d:1e:74:69:ae:24:de:1d:b6:e3:67:00:08:
                    38:60:47:e2:78:77:c7:8b:3f:f4:b8:aa:4b:00:97:
                    91:62:86:f0:d5:78:46:6a:20:8a:d6:e9:5c:83:e4:
                    63:ec:aa:00:ec:dd:43:6b:87:d5:43:22:2d:dd:7c:
                    39:3f:c6:25:99:26:09:0c:ae:c0:6f:a8:72:13:a1:
                    0e:9b:7e:cb:37:5a:6c:98:eb:e2:31:9e:d2:07:90:
                    29:8f:bb:2a:ef:27:ce:81:52:48:76:9c:e4:ec:6d:
                    19:6f:b0:4b:f3:6e:6f:29:9d:fd:8d:62:e1:c2:8f:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:09:B4:6F:EE:B4:93:BE:6E:13:D4:F1:46:A0:5D:18:B1:EF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73edda37-f9d0-3903-a33d-48afdf82df41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:03:bd:c8:aa:4c:c8:ce:aa:eb:b2:6d:e5:5c:27:2b:e5:
         b4:7f:df:07:23:4b:c0:0b:0e:8b:33:b2:09:87:b7:0e:64:d8:
         31:d1:3a:d5:b8:c8:5e:c5:be:c7:ef:a6:be:0b:ac:0b:14:b1:
         a0:58:36:6c:83:80:af:9b:39:06:ae:37:7a:2a:93:95:3a:2c:
         79:19:e4:ec:b8:e8:4d:8e:02:08:8f:87:ce:97:ec:f1:2a:e1:
         76:15:bd:0d:17:3b:35:e7:58:6b:21:ce:48:cc:78:4f:74:10:
         42:0a:67:67:05:ad:8c:d6:b7:4e:51:f6:0d:35:9b:5a:90:03:
         2e:14:af:a0:64:02:85:2a:37:6b:2c:74:3d:85:61:4a:19:77:
         00:46:ff:30:d0:6d:9e:91:71:f5:06:9e:7f:73:a4:c8:ab:fe:
         e9:e0:eb:0b:90:f4:46:e4:2c:90:66:d1:a5:04:9a:af:9d:69:
         56:0e:fe:af:0e:fd:ee:30:72:5d:0a:43:c0:a3:9b:b4:73:9a:
         3f:70:05:27:52:df:1e:1c:d4:a8:e2:4b:5d:8a:89:eb:47:8c:
         52:63:71:a4:22:e1:5a:4a:66:14:1a:6d:a6:80:0c:bd:6e:19:
         3a:01:22:03:b8:7e:02:7b:de:3b:b2:37:21:93:e6:ad:90:2e:
         44:13:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:46:21 2025 by rpki-client