Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b131d0f0-be0e-3ad0-a835-b65f66fefd4b.roa
File:                     b131d0f0-be0e-3ad0-a835-b65f66fefd4b.roa (raw, json)
Hash identifier:          sRoOLk5wFYM3dnqNFcnaN3MV/xXf/V5rLh5cmICNOSI=
Subject key identifier:   2E:1A:1D:1F:03:EE:87:D1:AC:7D:83:7C:F1:51:2F:C2:65:30:5F:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992949667315B66FAD9413400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b131d0f0-be0e-3ad0-a835-b65f66fefd4b.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        98.210.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:96:67:31:5b:66:fa:d9:41:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=75a59a57-8e0c-45ee-b22a-fc92868195b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:06:39:35:56:bc:b4:3e:5e:35:ab:90:ba:
                    7b:4a:5c:0f:2a:8a:5a:d6:b2:99:14:89:60:65:cd:
                    5d:c6:cd:d7:e4:02:2d:84:27:c6:86:c2:ed:75:bc:
                    00:c4:8f:d8:14:d5:87:1d:bd:e3:b7:1e:0b:f6:1b:
                    8d:5b:e5:ca:1f:c2:85:ea:0a:66:38:06:a1:29:7a:
                    b1:4e:99:1a:2a:c6:86:54:e0:8d:1d:1a:7e:fe:96:
                    df:38:36:30:d8:46:ff:ac:36:85:6a:e7:1e:cd:e9:
                    9d:d3:d2:b1:85:cb:10:9a:7b:a5:a5:3d:86:a3:c7:
                    cf:62:0d:80:5e:b4:01:6c:83:fc:dc:cb:92:d7:7d:
                    68:38:b0:7f:31:34:67:6d:db:97:25:17:af:fd:55:
                    3e:ca:07:89:52:b8:58:36:79:39:a6:71:bc:08:3b:
                    7e:1d:1c:c1:96:d1:21:69:2a:db:23:73:42:f9:06:
                    47:63:ac:43:79:82:9e:db:96:13:34:58:bb:24:2d:
                    f2:b7:a5:50:85:0c:30:96:da:62:28:2c:c1:83:cf:
                    87:f0:bc:7c:93:68:51:48:7a:d9:fa:76:28:4a:4a:
                    5f:7a:8e:4e:00:fd:f9:3e:9d:f7:33:ca:6f:34:e6:
                    a0:88:ab:18:3e:75:c7:d5:1c:19:66:16:27:74:aa:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1A:1D:1F:03:EE:87:D1:AC:7D:83:7C:F1:51:2F:C2:65:30:5F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b131d0f0-be0e-3ad0-a835-b65f66fefd4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.210.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:7b:86:86:96:c1:cd:2c:83:8f:79:41:fe:00:37:51:50:
         86:d9:ed:d4:9c:33:df:01:0b:a3:0d:40:bd:2b:13:4a:04:7c:
         ca:30:13:78:ae:02:d7:a7:6f:f6:2b:75:90:1b:07:c4:1a:7a:
         a6:c6:40:09:1d:99:06:a5:25:1e:60:ee:33:95:15:ad:fc:29:
         3f:1c:84:75:03:93:dc:a4:de:aa:17:03:1c:cf:63:8e:44:b3:
         9e:8c:8d:2b:0b:0a:ef:be:71:dc:d2:68:c7:eb:3a:28:98:4c:
         64:44:40:99:bf:f6:ba:0c:f3:70:fc:c1:b8:8d:8f:63:5c:b8:
         4d:32:01:ea:9e:2f:fe:4d:cf:ce:b9:1c:45:5a:0a:8a:52:4d:
         43:1f:46:a0:62:e9:c3:e2:83:7f:96:39:f1:21:da:82:5e:8a:
         ad:00:b0:42:05:96:e0:54:bc:6a:da:22:7d:b0:b7:d5:9a:78:
         cf:33:d6:76:13:26:88:d1:6f:52:fc:a6:e4:48:6f:9e:75:b4:
         5f:ff:1f:bb:df:73:7e:02:3c:c6:50:99:1a:b2:44:2f:87:8b:
         82:e9:fd:b7:e8:3a:37:f0:46:3b:b6:a4:67:b2:5d:07:2b:d8:
         96:52:13:20:3c:b4:5f:28:4a:4a:95:bd:d0:2d:3f:c3:28:ce:
         d7:74:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:19 2025 by rpki-client