Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcd73f35-9985-31e0-9b23-e67e9e4735af.roa
File:                     bcd73f35-9985-31e0-9b23-e67e9e4735af.roa (raw, json)
Hash identifier:          DPMtKkDWyLbG+PCqvSAiMgz8+m440iM8xNIju0JXPyg=
Subject key identifier:   1E:F6:9A:D1:6A:0D:1C:AE:7F:E2:9E:8F:40:B4:C1:42:B9:86:7D:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4326DB392D2680B66AEF3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcd73f35-9985-31e0-9b23-e67e9e4735af.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.195.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:6d:b3:92:d2:68:0b:66:ae:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=45e1053b-810b-43bd-9014-78fdaab84092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:09:7b:ff:f8:b3:a8:88:b6:91:fe:68:02:
                    51:2c:6f:6f:d4:25:14:2f:02:5d:73:f8:eb:43:13:
                    4f:83:6e:cc:38:6a:e4:5b:4a:fd:83:0c:3e:bb:9e:
                    a3:9c:9f:1b:6f:4a:14:ed:7f:a4:fd:6c:45:c7:3c:
                    ec:5a:2a:71:6b:b8:39:cc:56:ee:f1:36:e4:b3:84:
                    6c:4b:ae:74:2d:ad:a4:7a:07:73:e2:99:bd:49:53:
                    83:03:2e:b0:12:28:0d:f7:3c:58:7b:b6:35:e4:66:
                    2b:13:b9:59:a5:05:c6:91:67:e3:36:61:63:81:55:
                    e9:40:d8:97:76:f0:b1:9b:0a:15:6d:ab:35:a1:6f:
                    b2:89:58:7e:35:c4:82:4b:d0:49:7a:2d:1f:28:7f:
                    ac:0a:5b:b6:6a:d5:b0:56:35:5d:87:3a:55:47:0d:
                    f3:0a:55:27:16:67:e9:87:bd:1c:03:65:bb:04:79:
                    9c:6c:3f:2c:7b:d6:7b:2f:cc:7f:28:48:79:07:df:
                    1c:77:d0:33:9a:a8:0b:a7:1f:16:f5:72:51:27:02:
                    5e:2d:c0:ac:53:04:5f:cb:77:b5:f3:98:27:5d:a7:
                    e0:01:da:d1:2b:5d:c9:8a:9a:2d:98:fa:6c:d6:29:
                    5e:78:e5:03:8a:95:4f:a3:d0:b0:90:20:f3:79:ad:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:9A:D1:6A:0D:1C:AE:7F:E2:9E:8F:40:B4:C1:42:B9:86:7D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcd73f35-9985-31e0-9b23-e67e9e4735af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4d:89:47:18:2e:74:4e:9b:0e:26:69:ae:26:44:43:3d:f5:
         2e:ab:66:ad:d1:15:12:37:dd:ba:5c:e6:af:b9:f2:88:ff:9b:
         f9:6b:fb:ca:2d:72:c3:f8:b3:05:79:84:8d:4d:5a:67:a3:77:
         21:72:7a:e8:b9:03:a5:9d:db:c0:1a:3c:2c:c0:5e:80:b8:a7:
         e2:44:93:c7:ba:e9:2a:83:3c:01:0d:d6:f2:7b:61:50:a8:cd:
         e0:2e:89:b9:8b:ae:05:e9:5b:3c:09:01:1e:10:9a:17:fe:26:
         78:d1:fc:0a:2e:ea:2c:69:c6:f5:49:98:e6:61:13:ef:e5:b6:
         0b:23:8b:84:41:82:f3:4b:c4:6c:a2:3c:b7:5b:ed:c0:76:8d:
         dd:06:6d:1a:92:0c:a5:8f:b7:6f:4b:11:27:75:69:41:8a:38:
         f0:b7:c1:63:fd:e8:07:bc:f0:12:4c:d5:4b:56:c2:e3:c3:a7:
         f9:5b:3c:d6:43:c2:15:32:5c:fc:f8:5b:52:18:ab:d4:a4:e0:
         3b:3a:d5:59:88:3e:70:da:2e:d2:89:cf:fa:b6:ca:ea:c7:92:
         15:23:66:64:a1:cd:09:5c:7c:90:44:fd:b9:07:fd:ef:7b:0d:
         d8:3f:65:c1:54:b1:ad:22:04:c3:dd:22:be:63:95:97:a2:21:
         6d:4c:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:36:30 2025 by rpki-client