Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6851500-cde2-3f84-91c1-c30df79756b6.roa
File:                     f6851500-cde2-3f84-91c1-c30df79756b6.roa (raw, json)
Hash identifier:          AEHSvtJT6EDRiGEpumDWgp6J8Cb5uP4WndKryyzALAc=
Subject key identifier:   CC:BB:4F:3F:18:03:7B:75:F3:6A:3C:28:5A:26:3F:A1:C8:A4:77:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2216B767DEA2532EC31B3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6851500-cde2-3f84-91c1-c30df79756b6.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        98.239.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:6b:76:7d:ea:25:32:ec:31:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=62a848e7-3d0f-4712-beec-f5f1e10be16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:9d:80:9e:a3:d9:dd:51:7e:62:dc:d6:63:
                    79:75:4c:4f:e5:43:03:a9:49:ac:37:a4:be:48:5c:
                    ed:9f:af:c0:29:3a:83:fb:ce:b9:9a:db:d5:a6:c4:
                    f1:a7:96:ba:46:13:f9:49:2c:ee:c9:f6:87:32:0c:
                    74:77:11:56:83:2e:73:4a:26:23:ea:49:e2:26:1d:
                    eb:aa:4a:83:b8:70:79:b2:b4:43:0e:ec:df:8d:db:
                    6e:56:85:8e:35:4e:2a:e6:25:db:08:3d:ba:f8:ec:
                    af:2a:d9:b8:96:6d:46:bf:d7:9a:1b:7c:d8:eb:9d:
                    d0:49:95:dc:c4:ac:01:f0:c1:ff:68:74:50:fa:d3:
                    4f:7d:fa:95:9c:47:3b:e6:24:f4:8c:32:f1:0f:3f:
                    d2:e3:f0:32:ac:8b:81:c5:65:8a:99:e4:75:15:b1:
                    1b:3a:cf:a3:97:84:ee:90:ac:99:19:80:7e:aa:9f:
                    e4:73:2a:35:dd:ca:d1:d0:e8:ea:c8:bf:83:02:bb:
                    2e:a1:d1:b7:7f:3c:ec:b5:c9:8f:46:96:3b:74:0a:
                    1a:e2:70:92:ab:f8:21:43:ba:18:44:9b:21:bb:ee:
                    cd:43:b3:3a:42:69:6f:30:ab:a9:a2:6e:d3:7e:2b:
                    80:08:64:02:67:7f:0a:c2:62:07:d3:5f:69:a9:90:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BB:4F:3F:18:03:7B:75:F3:6A:3C:28:5A:26:3F:A1:C8:A4:77:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6851500-cde2-3f84-91c1-c30df79756b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.239.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:36:96:49:66:51:95:23:a7:80:e6:c8:d1:2f:dd:f4:1e:79:
         a9:49:37:ad:91:7b:f4:81:d1:c1:47:55:f0:be:54:77:9c:cf:
         f2:ab:e3:05:a2:4c:5a:21:8d:3c:0a:06:76:9e:36:62:11:fb:
         5a:48:64:72:2c:20:4c:d3:aa:19:b7:f0:b6:25:10:ab:20:08:
         7c:90:05:64:d5:d1:f2:b7:24:a3:ef:5d:e5:35:af:32:81:86:
         c6:f4:16:2e:db:7c:f8:1f:87:fd:60:a8:8c:e0:53:d6:2a:1a:
         9c:cf:7d:87:19:f8:b7:8e:84:be:23:02:12:4b:e9:c4:0a:8b:
         b0:fd:2f:21:19:3e:5a:c3:88:e8:fd:17:ce:b4:bd:e3:6e:76:
         ce:81:16:c9:54:d1:df:29:e6:6e:bf:5e:e0:4d:80:a1:5e:f8:
         7c:53:e0:03:61:6e:94:99:2f:d0:74:d8:48:bb:18:88:06:50:
         02:cc:ea:80:36:90:f9:6b:c1:f0:0c:bb:a1:da:e3:de:1b:a0:
         d1:04:1a:71:28:ee:37:ba:33:c9:9b:b2:10:55:0f:ad:c0:c4:
         fe:ee:17:57:04:d8:a8:6a:03:81:56:51:34:b0:ce:77:6b:b7:
         cf:03:05:71:6e:73:d9:f4:c4:4c:0f:e0:bd:7a:3b:e3:3c:c4:
         d6:d3:02:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIWt2feolMuwxs8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjJhODQ4ZTctM2QwZi00NzEyLWJlZWMtZjVmMWUxMGJlMTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6WdgJ6j2d1RfmLc1mN5dUxP5UMDqUmsN6S+
SFztn6/AKTqD+865mtvVpsTxp5a6RhP5SSzuyfaHMgx0dxFWgy5zSiYj6kniJh3r
qkqDuHB5srRDDuzfjdtuVoWONU4q5iXbCD26+OyvKtm4lm1Gv9eaG3zY653QSZXc
xKwB8MH/aHRQ+tNPffqVnEc75iT0jDLxDz/S4/AyrIuBxWWKmeR1FbEbOs+jl4Tu
kKyZGYB+qp/kcyo13crR0OjqyL+DArsuodG3fzzstcmPRpY7dAoa4nCSq/ghQ7oY
RJshu+7NQ7M6QmlvMKupom7TfiuACGQCZ38KwmIH019pqZCABwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMy7Tz8YA3t182o8KFomP6HIpHebMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjY4NTE1MDAtY2RlMi0z
Zjg0LTkxYzEtYzMwZGY3OTc1NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYu8FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANI2lklmUZUjp4DmyNEv3fQeealJN62Re/SB0cFHVfC+VHecz/Kr4wWi
TFohjTwKBnaeNmIR+1pIZHIsIEzTqhm38LYlEKsgCHyQBWTV0fK3JKPvXeU1rzKB
hsb0Fi7bfPgfh/1gqIzgU9YqGpzPfYcZ+LeOhL4jAhJL6cQKi7D9LyEZPlrDiOj9
F860veNuds6BFslU0d8p5m6/XuBNgKFe+HxT4ANhbpSZL9B02Ei7GIgGUALM6oA2
kPlrwfAMu6Ha494boNEEGnEo7je6M8mbshBVD63AxP7uF1cE2KhqA4FWUTSwzndr
t88DBXFuc9n0xEwP4L16O+M8xNbTAio=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:02 2025 by rpki-client