Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4886e627-f754-300f-a139-b0409146ac4c.roa
File:                     4886e627-f754-300f-a139-b0409146ac4c.roa (raw, json)
Hash identifier:          xbrkKUvYj1lQW9kkGmBxqztQIXHSzZ6J64Sseshl+Wo=
Subject key identifier:   F0:C0:41:96:3B:AB:3A:98:FE:DB:20:AA:0A:20:98:9B:30:61:A0:FF
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584988CF328B08B61FFED6D915B0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4886e627-f754-300f-a139-b0409146ac4c.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     53667
IP address blocks:        199.195.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:32:8b:08:b6:1f:fe:d6:d9:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=04ddb9ce-e95a-4b21-ac13-2fe37fb9598d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:28:69:39:de:4c:01:f7:8c:f3:bd:ec:91:
                    3e:9d:79:09:cd:a3:63:9b:4a:97:e8:e8:57:16:dc:
                    5c:11:6d:36:2e:40:c9:32:d6:63:d5:ef:2a:ad:85:
                    37:9f:3d:74:46:8b:89:9e:86:44:b6:67:46:28:6c:
                    01:44:c6:3a:15:16:36:73:07:ef:65:d7:a9:cd:cb:
                    b9:56:a2:bd:d3:44:c3:b9:f2:b7:6d:2c:6b:5c:1d:
                    00:32:a3:cf:f2:d8:0e:ef:b1:75:3f:c2:0c:5f:4b:
                    f9:f3:78:a1:a3:af:b4:ac:73:6a:ba:5f:2c:0c:97:
                    fb:ef:1b:27:04:7a:43:4f:fe:61:f9:57:07:f6:06:
                    24:ef:76:15:c2:0b:05:25:9b:71:0d:6b:f4:24:c3:
                    9e:1b:40:84:f5:93:56:c1:a5:ab:ca:24:9a:8a:35:
                    e3:5e:21:39:c5:99:f9:16:42:32:0f:55:32:d4:6b:
                    59:69:e4:fe:7d:3f:6c:4b:de:ea:ec:33:d4:f5:2e:
                    2f:a0:9c:1b:81:76:fa:c7:1e:e1:24:2d:ac:df:ab:
                    cf:9c:36:25:d3:32:1a:32:05:83:d3:e3:c8:95:0e:
                    95:e2:e5:7c:3d:4c:ec:a9:a6:05:07:d6:0a:67:7e:
                    84:ce:d5:90:e0:7e:95:35:45:95:ea:d5:3e:4f:d6:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C0:41:96:3B:AB:3A:98:FE:DB:20:AA:0A:20:98:9B:30:61:A0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4886e627-f754-300f-a139-b0409146ac4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:3a:51:53:56:f7:b6:25:cd:01:4c:46:c8:b6:6e:e5:89:
         21:97:ac:1b:90:6b:db:99:01:32:a0:1a:92:cd:17:3f:c2:6f:
         44:4e:3f:b6:13:40:23:63:28:7e:71:79:68:11:e1:7c:44:a7:
         c9:2f:25:c3:dd:cd:c0:b2:eb:db:0f:41:d1:a7:9c:5a:90:06:
         60:aa:d2:35:f8:59:bc:7c:8e:8d:07:ba:1d:a7:4c:cc:69:01:
         ca:e7:ce:88:f0:08:45:27:5f:73:e6:28:1b:68:12:d2:27:88:
         b7:19:24:77:fc:ff:e0:db:a9:2f:2c:2c:95:fb:95:be:ec:c3:
         2a:8c:87:23:b3:e1:46:32:9d:25:d6:61:75:f1:01:4c:a0:f1:
         f8:ca:5e:7e:13:a1:42:a4:0b:ef:4b:95:20:96:74:7f:c5:cf:
         a1:f6:5e:ef:4d:36:62:d4:ae:3d:47:07:3e:65:18:c4:98:ff:
         41:95:e6:ae:df:2f:96:04:69:2d:46:75:bd:3f:03:75:eb:44:
         a8:d6:c2:fe:d6:f3:8c:b8:1b:66:db:ad:1f:4f:fe:fe:28:d3:
         5d:94:d9:6e:38:73:81:7b:3b:e2:59:7a:d9:57:e8:c4:47:13:
         53:a9:ad:d9:f8:6e:18:f0:c2:12:38:d3:e7:d0:5d:69:05:6d:
         56:6b:63:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:46:34 2025 by rpki-client