Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7596039b-3313-3074-8a6c-4d1d9fec1a92.roa
File:                     7596039b-3313-3074-8a6c-4d1d9fec1a92.roa (raw, json)
Hash identifier:          6tiN7RiwFp8ULBPNoXR3EFl7vdMOI1RxqnElcfsu5JQ=
Subject key identifier:   52:6A:8F:A9:E3:CE:50:3A:17:05:9B:F2:D3:05:90:B2:FF:A7:63:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43287F25E646DB90F71F280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7596039b-3313-3074-8a6c-4d1d9fec1a92.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.57.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:87:f2:5e:64:6d:b9:0f:71:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=38bdfb42-ccb3-4ec9-9908-e14270ac71de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:7e:0d:6f:f9:20:a7:ba:36:3e:f7:de:3c:
                    70:f3:dc:e1:13:6c:d2:10:84:b9:11:6d:47:5c:6a:
                    63:e4:dc:f6:ba:44:da:24:50:90:a4:2f:23:ca:df:
                    f5:85:73:f3:c3:74:2b:18:04:de:51:09:28:ad:9a:
                    1c:2d:99:6a:a8:ae:7c:2a:76:f0:93:6a:30:82:2c:
                    b7:19:60:d4:10:35:1f:83:ed:cf:bd:1f:1a:90:47:
                    f6:da:87:44:90:7b:1e:a3:94:cd:fc:0d:7e:e8:d7:
                    6c:c4:16:72:28:f2:42:d4:90:62:a0:1b:e3:ba:34:
                    8a:5b:a0:b0:28:3e:63:41:8e:29:66:4e:a2:fe:f9:
                    b6:15:b4:76:79:a4:10:51:ff:80:3d:2f:2c:77:5b:
                    f2:b2:ed:c0:b4:42:b5:99:c1:57:4d:5e:eb:4c:34:
                    05:3e:3c:12:1b:9d:a9:b8:c1:17:a0:ed:d1:21:db:
                    60:87:fa:76:05:ee:06:35:26:9d:9a:e3:27:bb:e4:
                    6b:10:bf:8f:31:fc:38:7d:28:ea:80:e3:06:0f:11:
                    13:68:39:29:4c:83:df:40:75:bf:1b:9c:a8:91:d8:
                    19:ff:c8:8f:e7:f4:df:f5:15:f7:8e:a9:5f:01:28:
                    61:0a:66:8b:fb:35:01:2f:0f:89:b2:df:a0:55:c4:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6A:8F:A9:E3:CE:50:3A:17:05:9B:F2:D3:05:90:B2:FF:A7:63:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7596039b-3313-3074-8a6c-4d1d9fec1a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:66:6c:f7:cc:44:8e:67:4a:25:1a:0e:01:61:36:87:4e:f3:
         1a:08:f7:c3:90:a8:b7:a8:71:6a:b8:c4:a6:82:12:5a:cd:60:
         92:af:4a:29:e3:62:00:cd:a6:b0:bf:33:b4:7d:3a:b4:c4:86:
         dd:78:61:14:2d:a4:f5:ee:c5:74:27:a5:0f:98:de:2e:eb:d7:
         a6:da:9a:ee:62:fa:21:05:aa:17:53:18:0f:3d:d7:1b:81:92:
         f1:e0:43:f3:4b:f7:6d:23:d1:e7:f2:fa:a2:e9:08:44:ae:89:
         b5:74:4a:f3:dd:1e:d2:f3:72:d1:9b:bc:4a:67:d3:eb:53:16:
         5a:d3:2a:58:b4:ca:55:e5:a1:d0:9b:e1:4a:69:44:38:87:5b:
         06:fe:05:ac:79:95:2d:85:94:38:92:56:5e:29:3d:61:e9:70:
         fd:81:79:82:ce:a7:b7:5f:a2:72:ce:d3:7f:c4:ba:50:7c:5d:
         6b:38:96:89:7e:6b:c7:00:d5:96:d1:e9:87:9f:fd:d0:db:9d:
         6b:ea:02:0c:15:56:ff:a5:c7:a8:b3:01:47:0b:7a:c5:d3:a5:
         ad:50:72:99:be:64:98:9b:ee:0f:2b:db:04:6d:46:e4:0b:fc:
         12:9b:1b:51:63:1c:34:4a:a5:39:4a:17:1a:81:f4:b4:ca:97:
         05:50:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:36:39 2025 by rpki-client