Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fe5da81-71a4-3055-b329-f51393f988b8.roa
File:                     1fe5da81-71a4-3055-b329-f51393f988b8.roa (raw, json)
Hash identifier:          hznwsCocmHkYYFkDVBEdA4sbK62QBISYEkcxoq/+wws=
Subject key identifier:   91:0F:F0:14:9C:90:BC:CD:5D:FF:73:E7:F1:27:D1:D6:35:07:AD:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEF0A42A87CA8A005507E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fe5da81-71a4-3055-b329-f51393f988b8.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.201.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:f0:a4:2a:87:ca:8a:00:55:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=3dec25b0-88e5-4922-9e0f-b716317f8cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:ea:f7:b3:96:f1:89:b5:36:c9:cc:4d:5c:
                    c9:e0:c5:70:8e:4a:df:d6:d5:79:dd:70:75:4c:4a:
                    4e:df:5b:74:a2:f4:80:d6:25:76:8f:ce:31:b0:a9:
                    bf:e1:c4:3b:59:e5:62:56:a3:87:43:33:66:17:be:
                    87:a3:24:05:24:7c:90:0f:31:a5:a8:55:dd:fa:e0:
                    8c:03:12:eb:b6:f6:0a:ca:30:01:81:19:2a:38:9c:
                    fc:11:3f:8d:98:68:e5:03:7d:db:09:ef:b1:a3:ea:
                    0c:9d:ba:3d:9e:aa:01:6d:3e:d6:77:ac:62:b4:d6:
                    fc:18:23:76:82:36:7e:4c:3c:a1:10:3c:4f:43:1b:
                    a2:39:58:5c:fd:39:53:c8:ef:6d:0c:fd:b6:6f:39:
                    60:9b:1d:35:22:41:bb:a1:ef:a8:ef:52:af:3a:e5:
                    e8:ee:83:1a:61:50:a7:37:ff:26:e4:99:3d:a5:34:
                    ac:9f:da:88:60:35:d1:93:9f:1d:6e:2e:4d:a5:84:
                    0c:cf:bd:41:87:35:25:6b:71:a4:92:e1:7f:e7:5b:
                    ab:15:9f:c3:4d:4e:6c:c4:39:de:4f:93:a2:d2:83:
                    07:cf:52:d2:b7:fc:cb:09:82:22:4b:8a:68:c8:96:
                    b1:73:e5:89:3d:c6:b1:2d:4c:ef:03:ef:ca:69:89:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0F:F0:14:9C:90:BC:CD:5D:FF:73:E7:F1:27:D1:D6:35:07:AD:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fe5da81-71a4-3055-b329-f51393f988b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.201.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:19:96:1f:1d:49:7e:e6:e7:43:b9:dd:66:ea:c5:c5:f4:4c:
         7f:d2:46:9d:40:25:b1:91:37:7f:82:da:ac:60:3c:06:d3:a3:
         4c:69:fd:e5:0a:16:b4:f8:cf:dc:46:4d:d6:52:b9:cb:03:c5:
         93:9a:e3:62:25:8a:a1:e1:84:e3:de:07:36:5a:bd:02:ac:29:
         ee:87:6f:5a:19:47:61:96:8b:ef:b9:81:9a:cd:28:3a:72:94:
         8f:a4:73:b9:6b:01:e2:e3:6c:4d:ca:b4:3e:a8:67:c8:b7:d4:
         3d:d7:7e:ec:9d:3b:b3:20:32:f2:9f:a5:7e:a4:de:df:08:64:
         93:49:da:1a:d4:49:26:e4:33:9e:9f:f5:2b:aa:20:24:51:a8:
         bb:c5:e4:7b:30:92:99:50:bb:e4:d1:98:20:b4:2c:98:cc:4c:
         22:5b:d6:21:34:85:22:97:f7:75:f2:74:4f:3b:83:83:f0:42:
         b0:bf:95:b0:5c:d6:a3:61:90:ee:75:19:ea:60:0d:5b:45:c8:
         2c:aa:f6:14:48:33:a8:d9:ff:f8:9a:ee:89:06:db:10:5a:18:
         47:b6:15:37:dc:b3:b1:86:b6:2b:6b:53:41:ce:79:59:ac:6a:
         61:95:31:6e:e6:0d:05:80:ce:ac:d3:de:3f:f2:28:0f:df:63:
         cd:45:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:30:03 2025 by rpki-client