Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ab38b80-88c4-38ea-bd60-742fc4e07f02.roa
File:                     2ab38b80-88c4-38ea-bd60-742fc4e07f02.roa (raw, json)
Hash identifier:          SxZwUBCXyx6ak9VqS5FJeeELYnN2kBBHyzxPXWaCfA0=
Subject key identifier:   AF:31:63:F7:42:EB:54:0F:DB:55:18:27:1D:D2:DB:C4:41:D6:8F:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2216D8C7A7076AEFB6FDCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ab38b80-88c4-38ea-bd60-742fc4e07f02.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        98.50.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:6d:8c:7a:70:76:ae:fb:6f:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=7ceda9da-b18c-41be-9365-b8e413db41e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:8c:7c:45:7e:c9:f9:85:c4:7d:b1:65:b0:
                    dd:6e:05:63:b5:e0:8a:2f:7f:57:8e:54:3f:8b:99:
                    a0:0a:a7:99:e1:bb:5b:46:fc:34:13:d2:1b:25:f9:
                    ab:07:50:73:80:c9:1f:00:41:1f:f0:31:8c:fe:b5:
                    01:89:88:d2:8d:45:82:ed:49:7f:e3:ca:e4:eb:4f:
                    3e:cf:83:f3:48:3f:03:e2:ff:a2:67:cc:54:cf:10:
                    e1:04:23:b2:8a:0e:80:c9:88:fd:c3:5c:ee:51:aa:
                    b5:32:60:ed:c1:05:95:49:d6:ab:91:c0:ac:c3:bf:
                    b9:1f:7e:91:c2:a5:57:95:92:0b:66:5d:9a:a7:da:
                    18:33:47:ce:4b:f9:2e:a1:b7:47:cf:d4:1c:64:85:
                    f0:ac:f4:51:e3:cd:40:c8:3b:df:d5:cb:e0:fe:15:
                    58:78:73:13:dd:bb:93:cf:5a:7c:e1:ab:70:e5:b9:
                    6c:4f:0a:a8:5a:48:0f:33:f8:bf:0f:7f:04:ce:a8:
                    f9:ac:1d:1c:76:61:c0:5d:60:96:43:1f:48:28:24:
                    6d:30:33:44:27:d5:59:65:89:a2:76:f9:23:f9:72:
                    b8:06:1e:45:88:42:3d:86:d5:64:fb:bf:f6:3d:08:
                    de:4a:d9:f1:9d:95:5f:b3:c5:31:a1:a8:89:06:4a:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:63:F7:42:EB:54:0F:DB:55:18:27:1D:D2:DB:C4:41:D6:8F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ab38b80-88c4-38ea-bd60-742fc4e07f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.50.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:59:a5:95:b9:fe:64:cd:d2:63:de:b9:b8:14:6d:00:43:88:
         19:0e:3d:16:8f:a5:c9:ef:aa:5d:75:c9:b8:22:b7:d9:ce:5e:
         35:3f:41:01:b3:18:cd:27:e0:22:fc:c7:dc:a2:01:be:f6:7e:
         4b:b8:bc:a5:9f:ac:3c:39:de:02:6c:0d:b9:a3:06:88:59:39:
         c8:de:da:ae:ac:64:0a:3e:1d:e3:0c:48:8b:4c:2f:34:5c:c7:
         1b:d5:fc:81:c7:96:88:1f:bb:84:20:06:e1:f9:d7:91:dc:98:
         cb:b6:8d:8c:be:dd:d7:29:4a:b8:85:31:7d:65:5a:c7:29:a0:
         08:fa:37:14:a6:15:73:eb:aa:be:2e:c4:35:c1:1c:b6:cc:6c:
         cd:f0:9c:70:0d:21:f6:63:11:0d:b6:67:eb:5d:19:ca:f4:30:
         85:6c:8c:41:5e:02:68:2d:54:04:ba:38:82:37:33:26:e2:79:
         33:d8:1c:49:04:0a:49:dd:9c:32:4f:53:d8:b3:b7:a2:ad:52:
         c3:54:39:b3:3c:39:92:c0:5e:b5:20:6b:b3:81:e4:23:96:86:
         64:ec:ca:4b:75:db:31:ec:6a:66:0a:f0:60:7e:45:1b:f4:62:
         f9:d2:ed:97:21:ae:0d:02:7f:31:eb:47:c1:ae:18:df:d8:79:
         47:2f:bb:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIW2MenB2rvtv3MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
N2NlZGE5ZGEtYjE4Yy00MWJlLTkzNjUtYjhlNDEzZGI0MWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggCMfEV+yfmFxH2xZbDdbgVjteCKL39XjlQ/
i5mgCqeZ4btbRvw0E9IbJfmrB1BzgMkfAEEf8DGM/rUBiYjSjUWC7Ul/48rk608+
z4PzSD8D4v+iZ8xUzxDhBCOyig6AyYj9w1zuUaq1MmDtwQWVSdarkcCsw7+5H36R
wqVXlZILZl2ap9oYM0fOS/kuobdHz9QcZIXwrPRR481AyDvf1cvg/hVYeHMT3buT
z1p84atw5blsTwqoWkgPM/i/D38Ezqj5rB0cdmHAXWCWQx9IKCRtMDNEJ9VZZYmi
dvkj+XK4Bh5FiEI9htVk+7/2PQjeStnxnZVfs8UxoaiJBko35wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8xY/dC61QP21UYJx3S28RB1o9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFiMzhiODAtODhjNC0z
OGVhLWJkNjAtNzQyZmM0ZTA3ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYjKCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFZpZW5/mTN0mPeubgUbQBDiBkOPRaPpcnvql11ybgit9nOXjU/QQGz
GM0n4CL8x9yiAb72fku4vKWfrDw53gJsDbmjBohZOcje2q6sZAo+HeMMSItMLzRc
xxvV/IHHlogfu4QgBuH515HcmMu2jYy+3dcpSriFMX1lWscpoAj6NxSmFXPrqr4u
xDXBHLbMbM3wnHANIfZjEQ22Z+tdGcr0MIVsjEFeAmgtVAS6OII3MybieTPYHEkE
CkndnDJPU9izt6KtUsNUObM8OZLAXrUga7OB5COWhmTsykt12zHsamYK8GB+RRv0
YvnS7Zchrg0CfzHrR8GuGN/YeUcvu/Y=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:23:29 2025 by rpki-client