Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bf27cb7-0265-3478-a104-118cf117e701.roa
File:                     0bf27cb7-0265-3478-a104-118cf117e701.roa (raw, json)
Hash identifier:          cakG0KZzZbbLwOY6CUVD/1epGateaKKa0KcJ4r6IkLg=
Subject key identifier:   90:AB:8C:30:6C:84:D0:A8:01:0A:5C:16:B1:57:AE:F4:C4:60:66:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC57326ABD478A6DEFDDB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bf27cb7-0265-3478-a104-118cf117e701.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.35.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:73:26:ab:d4:78:a6:de:fd:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=6b450b65-00d3-4c78-bbbb-c97cacd05369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:b6:c2:15:11:2e:33:f3:a8:56:df:84:c6:
                    12:17:85:26:49:ef:00:29:be:c8:bd:eb:59:ae:8d:
                    e6:00:f5:6f:ed:ba:cf:77:af:48:e3:92:86:4f:1f:
                    62:1d:86:86:70:07:8c:60:84:fc:cd:4b:29:5d:57:
                    d2:59:e4:6a:bb:12:4f:61:60:ab:45:08:86:93:9e:
                    99:90:85:ef:39:2f:3f:0a:8f:a7:ac:bc:dc:ae:78:
                    83:b8:59:b4:54:c6:d3:6a:27:31:d1:2d:10:4f:0c:
                    8d:4d:c2:a1:f8:0e:d7:9d:41:f9:da:64:1a:6e:bd:
                    19:bf:89:e9:15:66:ec:e5:2c:7e:43:03:13:0f:63:
                    75:d9:77:b9:92:81:87:5e:df:5f:99:58:b0:e4:c5:
                    4d:ea:24:6f:49:ce:1d:37:4f:b3:81:6d:d4:f8:db:
                    bb:2e:c2:8c:3b:b3:28:a1:71:8e:8c:25:af:c9:18:
                    52:f7:ce:77:36:4a:b3:b9:c1:d3:30:3c:c5:19:3a:
                    39:01:44:1f:57:cf:4d:55:c3:1c:d6:84:33:6b:95:
                    d2:28:36:10:d0:fb:2a:b9:08:92:8f:2b:a4:dc:d3:
                    9d:15:bb:a2:ab:68:10:05:f6:78:69:ca:98:78:62:
                    37:47:0f:83:c1:d7:47:8b:75:13:b0:f5:4f:2f:c7:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AB:8C:30:6C:84:D0:A8:01:0A:5C:16:B1:57:AE:F4:C4:60:66:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bf27cb7-0265-3478-a104-118cf117e701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.35.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:26:35:86:1d:fa:84:b2:cc:7e:21:bc:ac:85:1a:94:4f:ea:
         8a:88:ed:e5:75:c6:d8:c1:f5:0d:f4:77:18:60:f7:7e:95:34:
         bb:3d:dc:96:5b:91:87:1f:2d:fd:84:24:e6:c5:c7:ad:ea:8a:
         d2:f6:cc:8b:85:52:71:40:98:35:14:87:b9:e0:81:d8:08:15:
         19:e2:bb:36:b4:39:cb:f9:15:b7:c2:e1:02:a7:1c:11:e2:e7:
         f7:44:31:5b:75:10:23:bf:bd:a3:00:7a:d7:e3:af:5b:35:37:
         a7:20:80:c4:b6:5d:2d:41:e9:27:fc:02:c2:38:0d:ba:78:8d:
         52:15:20:00:d7:0d:cb:a2:da:f1:ec:19:c7:06:22:c8:b0:6c:
         e2:92:da:7d:09:35:ec:8c:6f:45:42:03:90:cb:c2:54:bf:a7:
         7c:b2:90:4c:3d:ec:ba:d7:d0:3a:b5:d4:2f:4f:f5:2d:64:0f:
         87:71:e8:15:5a:89:40:73:71:20:8e:ba:c3:b1:37:2d:aa:da:
         a1:be:ee:b6:06:15:41:43:da:79:b6:b8:28:07:cd:7a:76:3f:
         d9:19:53:95:f8:87:cc:83:55:ce:56:c4:a8:9a:78:e7:9b:b2:
         7f:5c:2a:62:8f:22:de:bc:b5:20:d4:0c:2f:4b:84:ac:c7:9c:
         3c:9f:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:59 2025 by rpki-client