Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ac3c6b1-8577-3036-8732-33debfb1595d.roa
File:                     7ac3c6b1-8577-3036-8732-33debfb1595d.roa (raw, json)
Hash identifier:          LSZ8ePLe5j/RAaYCYA4QEmL945KK80uY2Q2CLekITZ0=
Subject key identifier:   A4:F9:AB:17:AE:26:0B:A0:FC:33:11:B7:E1:89:FC:D6:49:E2:B5:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD7C92EF2850C22BDF7080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ac3c6b1-8577-3036-8732-33debfb1595d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        98.59.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:7c:92:ef:28:50:c2:2b:df:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ba293fde-11fb-473a-8517-38f656af5c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e3:b8:78:a9:77:4e:a3:3b:7e:7e:c5:27:20:
                    9f:64:b9:a9:42:67:b1:0f:10:ec:de:f2:46:74:4e:
                    46:5f:ba:12:d8:c1:07:b9:73:8d:95:72:aa:75:c6:
                    72:82:0b:78:de:e3:ca:c9:31:3b:90:54:39:84:06:
                    79:56:1f:ba:74:aa:51:f0:85:f4:88:49:ba:2b:7d:
                    71:dc:9f:32:1c:91:90:8a:65:2c:db:f8:13:01:2d:
                    fd:22:ce:bf:ae:4c:79:39:de:f8:0e:15:04:bf:a1:
                    a1:55:01:cf:58:8c:35:6d:d2:e4:72:13:ca:5a:b7:
                    47:db:49:4c:70:13:05:18:2b:3b:44:e7:d8:8a:55:
                    0a:e9:8b:66:b0:97:bb:3f:b1:a3:7f:6c:f8:be:f4:
                    20:51:d0:86:ee:9c:e2:ff:ab:62:0f:53:1c:a1:17:
                    61:66:75:09:11:bf:f6:7a:f5:33:24:ec:70:7f:e9:
                    d7:3f:eb:9e:b1:c0:7f:9d:7c:07:0f:36:62:aa:5b:
                    e1:bf:c0:84:88:38:8f:e7:df:cb:0e:52:b0:b4:99:
                    60:9f:9f:f6:1d:85:75:fe:e0:1d:50:35:47:64:d5:
                    3a:ab:18:c4:76:e2:50:4b:1f:9b:87:50:8f:ec:d1:
                    2d:b4:23:48:c3:f4:6d:30:0a:b6:1a:35:8d:81:38:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:AB:17:AE:26:0B:A0:FC:33:11:B7:E1:89:FC:D6:49:E2:B5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ac3c6b1-8577-3036-8732-33debfb1595d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.59.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:7a:e9:49:93:a4:e3:6d:5a:d7:86:18:0e:c5:f2:dd:44:
         bb:98:b7:d4:6c:cd:05:b9:48:ef:90:31:58:58:e1:5d:26:f2:
         88:94:a9:d7:cf:6d:72:fe:2c:5b:54:8e:9b:eb:2b:0a:66:33:
         28:6e:d2:e8:8e:e5:98:9b:11:e6:91:67:8b:f7:42:0c:99:a7:
         bb:11:db:54:fd:b5:e1:c2:0e:d4:be:3e:6b:27:14:e1:31:d1:
         88:25:f6:ab:47:b2:cf:40:14:b6:5e:65:3c:37:64:ad:ac:f9:
         41:36:ae:eb:5a:b3:32:06:f6:5f:81:39:6a:e9:ed:15:3d:8f:
         29:16:a4:23:37:d8:f2:51:35:5d:02:86:d0:84:b0:76:a4:82:
         c7:36:57:07:7f:fd:4c:12:e9:4a:94:4a:c1:cf:12:fa:27:b0:
         3d:7e:34:2c:a8:f8:06:99:95:e5:ea:4e:e9:c0:f8:94:11:fc:
         f0:61:ce:c5:cb:45:f0:ad:74:a4:67:20:15:9b:41:da:0e:da:
         9c:bc:74:c6:ad:c5:2d:5e:20:11:bd:2d:b1:a6:64:74:70:ad:
         c0:9a:c6:d3:6c:02:95:a3:91:d1:8a:4d:9d:fb:6e:91:6b:8a:
         a3:d4:a9:86:90:e9:23:d7:2d:7f:f2:24:08:2c:83:6d:c0:92:
         c0:1d:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:41:16 2025 by rpki-client