Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c29d150-ad51-36dd-9629-605bdb54774f.roa
File:                     6c29d150-ad51-36dd-9629-605bdb54774f.roa (raw, json)
Hash identifier:          x6BV5AHt4hAy+3pKdrgFpkOTI0rlK3m8/69tjxM2m1c=
Subject key identifier:   BA:9B:F9:75:FA:D4:24:D4:ED:1C:73:5C:C3:12:3D:56:87:40:C9:69
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AC5A50161BC255A9949A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c29d150-ad51-36dd-9629-605bdb54774f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        98.28.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:c5:a5:01:61:bc:25:5a:99:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=88ec906c-2fa5-46ff-bb4e-7f3b6c6ea411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:8d:83:e1:00:a8:d0:05:08:ea:60:ed:0b:
                    72:2a:ed:aa:50:39:7e:94:1f:89:64:2f:f1:06:bb:
                    71:40:a2:e3:2c:41:02:fa:2e:84:d4:4a:4e:5a:ad:
                    e2:5a:22:55:72:42:6e:fd:f6:f1:c1:59:26:41:2b:
                    86:d8:de:4f:5b:ed:15:04:e5:3e:df:57:26:dc:a4:
                    6f:88:7c:3e:d9:f1:57:20:67:63:53:32:76:7e:9b:
                    a9:92:fd:a9:06:af:23:9e:4b:57:22:1b:8a:a8:f8:
                    0a:f5:4b:fd:20:f3:74:10:35:c7:e6:26:6b:e9:eb:
                    05:f3:d1:53:f7:ad:e2:7a:8a:e5:af:52:4a:5e:d4:
                    e4:52:51:d8:ed:22:87:57:03:e9:fe:3d:50:51:ba:
                    f0:9b:83:5b:97:a2:90:9e:e7:a6:bf:28:ee:a2:ad:
                    24:19:07:ff:93:5c:48:4c:d1:aa:da:4f:4a:64:62:
                    51:c9:b5:ad:72:76:c4:95:96:c3:83:a2:5f:b2:00:
                    db:a2:ac:64:11:64:77:a7:d2:ce:af:42:9c:19:a8:
                    29:94:69:eb:4f:f9:6b:32:40:7b:fc:de:9d:52:2e:
                    cb:68:a0:00:eb:e0:49:be:13:6b:04:d0:02:2d:d6:
                    94:56:1f:0c:ba:8e:8f:5f:02:b1:3b:23:98:69:b5:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:F9:75:FA:D4:24:D4:ED:1C:73:5C:C3:12:3D:56:87:40:C9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c29d150-ad51-36dd-9629-605bdb54774f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.28.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:cb:5f:3f:1f:15:2f:b5:b3:41:11:b1:d5:16:db:16:a1:
         66:3b:5c:eb:2d:c8:e0:70:21:ce:57:46:f5:48:34:f9:ec:50:
         b1:53:93:88:4f:56:a0:66:a6:a5:b0:95:9b:70:a5:bd:6e:4d:
         49:24:8d:fa:00:a3:2a:db:25:4c:a2:86:d3:f1:b5:13:97:9a:
         14:14:d3:c3:bf:b3:55:8d:f5:51:62:01:a4:51:cd:a9:e4:16:
         14:43:88:08:2a:e0:0c:ae:fa:91:b8:d2:2b:77:a8:f7:15:40:
         23:5b:4e:ce:22:c8:cd:26:cc:fa:d9:5e:2e:4d:a5:dc:1f:82:
         ea:14:26:97:d5:62:c4:4a:9d:9a:1f:05:b5:ea:ea:0e:07:7d:
         2d:f4:fd:a6:51:6b:58:5d:a0:3e:07:f6:51:31:b8:26:70:1d:
         ab:d3:aa:cf:21:93:fe:04:60:5d:6f:64:ba:64:39:de:ce:c3:
         2a:16:36:c9:23:3c:cd:fc:fc:0f:7e:9d:a1:47:80:59:b4:50:
         ab:b6:77:73:d1:26:4a:58:29:c6:6c:7f:f2:f6:0c:62:d8:63:
         ee:5a:16:54:22:c2:87:1e:80:a0:cc:a4:68:b5:92:e2:97:c7:
         7e:72:71:68:d6:23:de:36:4e:83:8f:25:20:66:00:e7:2d:c7:
         5e:f4:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:17:02 2025 by rpki-client