Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34ce48bf-27fd-38fa-9a97-1228a57a9b24.roa
File:                     34ce48bf-27fd-38fa-9a97-1228a57a9b24.roa (raw, json)
Hash identifier:          0c51RYEoJjIDB4G6d1Rx34YLNqg3gFvlvbxWVv0cHzk=
Subject key identifier:   E9:B7:F3:FC:82:A7:B8:99:16:E3:E2:85:EF:14:AB:5C:F9:FD:EA:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3529EFE5F605EEFFC5880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34ce48bf-27fd-38fa-9a97-1228a57a9b24.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.47.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:52:9e:fe:5f:60:5e:ef:fc:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=448a244d-a3a7-4d4d-a67a-2ee9de7cef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c0:93:cf:74:2e:ec:ca:1a:63:1f:8d:6f:ce:
                    9a:ff:4c:b4:45:2d:7f:bf:5d:bb:2e:89:b0:0c:af:
                    75:43:35:8b:fe:65:66:07:60:79:09:2e:67:1f:84:
                    d1:17:f0:f4:a6:cd:17:59:67:7e:dd:2a:f3:11:96:
                    fd:15:0a:16:be:fd:40:7d:25:fb:86:f0:0b:c7:13:
                    53:08:ee:55:78:35:fe:ca:a9:d9:a2:ff:9e:cd:cc:
                    7f:72:c0:8a:d7:55:62:92:31:f6:28:fd:e3:3e:36:
                    af:21:1c:a3:5d:41:3a:a8:6b:74:b3:4d:57:9e:78:
                    38:00:0c:af:ab:7f:0a:2a:80:ab:93:66:d0:7d:9a:
                    74:f0:c4:1d:0d:4f:04:09:40:ad:86:1a:9b:2c:27:
                    58:85:12:23:5e:41:1a:46:3e:76:a5:ca:13:03:8d:
                    d0:00:d2:05:31:33:64:25:42:85:f0:7f:cc:fc:36:
                    19:5d:e1:84:85:0a:30:ce:86:35:3a:09:58:00:95:
                    63:e2:53:a4:15:4a:71:e0:09:a3:77:7f:ef:9b:d4:
                    f6:ad:55:c8:ea:c9:31:5f:77:a2:c5:d2:ce:f3:26:
                    c2:83:2a:3c:51:66:bc:c7:47:b1:98:04:66:89:c0:
                    3e:c9:ff:73:85:1c:8c:9e:30:f8:25:a4:40:95:00:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B7:F3:FC:82:A7:B8:99:16:E3:E2:85:EF:14:AB:5C:F9:FD:EA:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34ce48bf-27fd-38fa-9a97-1228a57a9b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:06:28:1a:26:43:53:bb:c5:24:e1:77:07:ae:eb:80:da:f3:
         f1:4f:9d:8d:c0:5c:d7:fa:03:49:f1:22:e1:a7:56:c8:bb:b8:
         c9:c2:94:d5:fd:e2:d7:50:09:e9:c5:f5:ba:ea:12:5c:84:37:
         eb:0b:9b:0f:a1:81:9d:ba:6b:56:2f:92:2f:1a:d9:d0:0a:dc:
         38:9c:93:d2:e8:84:9a:ba:ae:9b:b4:94:3b:c0:87:41:00:bf:
         4f:39:ad:c0:39:40:a8:e5:97:c8:0b:54:f8:2d:78:c5:23:5b:
         6c:39:1b:9a:13:82:aa:6c:04:f5:e2:be:6e:f4:13:b8:20:7e:
         b9:4f:0f:57:0a:6b:d9:f5:30:1a:39:7b:bc:99:ec:6f:79:94:
         9e:b9:4f:86:78:da:a5:52:c2:fa:25:6a:5f:77:a0:6b:7d:9a:
         cb:e6:90:35:d1:b3:3f:be:52:c7:75:4f:42:0e:a0:9d:c0:e8:
         2d:d1:a6:1c:e1:98:f2:1c:d4:37:ba:8c:2f:3a:6f:cf:c4:84:
         9e:9c:4a:14:3e:25:0a:02:dd:4b:18:41:f6:63:bf:ae:3d:50:
         33:76:ae:78:36:03:56:84:2e:bb:4e:58:48:c5:e0:9a:2d:4d:
         0b:2d:a4:9b:63:d2:c4:bc:30:62:52:8b:c8:ee:3d:71:fe:57:
         b4:1a:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:30:38 2025 by rpki-client