Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa
File:                     425a6408-7e87-3b89-9b62-98c8b27a4d93.roa (raw, json)
Hash identifier:          wO4H0bDxwP84Iw742UAraIpVQ8OC7yYLKOCJImWRnBw=
Subject key identifier:   61:31:AE:C3:AD:03:74:35:19:CC:D6:19:17:F6:B8:69:63:15:DD:8E
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584A480AE3A15D37A26BF5D54810
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     395886
IP address blocks:        98.158.28.0/24 maxlen: 24
                          98.158.29.0/24 maxlen: 24
                          98.158.30.0/24 maxlen: 24
                          98.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e3:a1:5d:37:a2:6b:f5:d5:48:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=7c787345-2515-4cf6-98d9-66a52fea64ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:60:05:9f:4c:86:f4:2e:9a:1b:7e:3a:89:
                    d9:cc:83:ef:c8:4b:c2:c8:15:4d:4e:c6:75:4f:be:
                    6d:88:5e:f5:26:c1:52:26:cf:cf:14:f6:37:10:fa:
                    1c:51:f6:f5:6b:2a:cf:5c:46:fe:cf:d4:33:46:c4:
                    c2:19:62:69:7f:45:b9:00:65:eb:fa:58:c4:dd:1e:
                    64:7d:7d:b1:f0:7d:20:d2:48:49:6e:b9:c1:fc:b5:
                    d1:fe:3e:e5:47:97:2e:86:56:53:62:98:16:f6:de:
                    ae:26:3f:47:f5:ef:2a:d4:aa:87:24:81:84:da:0d:
                    8e:ec:ab:0e:45:3a:2d:bd:aa:a0:48:5a:21:23:36:
                    71:70:de:c9:15:02:55:15:c0:e5:79:d9:4a:ce:4e:
                    0b:1a:3c:62:6e:ab:c2:45:96:d0:d6:3d:12:e5:14:
                    51:2e:1c:b4:8e:95:d3:70:f1:02:c5:21:92:ba:48:
                    46:e2:5d:0a:1a:28:49:3b:03:de:4c:d1:67:29:3d:
                    49:12:a2:e0:20:60:97:c5:98:3d:9b:91:4d:62:dd:
                    10:bb:28:d7:7a:f0:d7:23:0e:5c:88:f9:5d:5d:60:
                    d7:94:6d:8f:4d:83:fe:0b:f4:46:85:df:60:01:38:
                    fb:5c:4d:4e:59:25:37:39:85:97:dd:47:24:5a:b3:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:31:AE:C3:AD:03:74:35:19:CC:D6:19:17:F6:B8:69:63:15:DD:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:fc:6f:6d:cb:56:83:0b:7e:f6:6c:d6:0b:a1:b6:74:82:
         63:bc:3a:50:2d:61:90:25:53:02:cf:84:a8:af:25:f8:99:6b:
         dc:4c:7b:7e:e4:b0:d9:4d:99:f5:70:d8:3d:4a:ef:15:83:6c:
         56:e2:d3:8e:fc:66:38:57:45:19:fa:38:c3:56:d4:57:11:4f:
         40:40:43:5e:f5:cd:c8:8d:eb:f6:e1:71:98:93:33:7a:58:d9:
         25:3e:b4:97:de:89:d4:fd:f5:0c:aa:12:66:37:c8:6e:21:51:
         15:11:ec:26:87:12:5e:2e:3c:fd:d7:55:20:bd:5c:80:77:77:
         b0:10:68:03:ba:a3:97:9f:c0:d7:83:1b:1f:88:93:db:0c:fd:
         75:82:e6:74:65:72:a3:df:8f:d7:f1:78:0e:ee:e1:63:69:31:
         37:87:b2:95:31:94:55:39:76:6e:83:a4:c0:32:f9:82:b4:76:
         23:ba:c5:7f:41:0f:ad:38:86:a3:1b:b4:d2:aa:52:dd:6d:8f:
         54:b9:a3:4f:99:59:a4:08:65:83:7d:37:6d:fc:56:07:90:c7:
         94:4b:b7:41:b6:81:f0:d4:62:db:e7:74:01:bb:ce:66:b2:95:
         f6:19:07:9e:16:03:64:d5:8b:b9:1b:b5:e1:00:48:d6:dc:40:
         cb:e2:51:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuOhXTeia/XVSBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk
N2M3ODczNDUtMjUxNS00Y2Y2LTk4ZDktNjZhNTJmZWE2NGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXJgBZ9MhvQumht+OonZzIPvyEvCyBVNTsZ1
T75tiF71JsFSJs/PFPY3EPocUfb1ayrPXEb+z9QzRsTCGWJpf0W5AGXr+ljE3R5k
fX2x8H0g0khJbrnB/LXR/j7lR5cuhlZTYpgW9t6uJj9H9e8q1KqHJIGE2g2O7KsO
RTotvaqgSFohIzZxcN7JFQJVFcDledlKzk4LGjxibqvCRZbQ1j0S5RRRLhy0jpXT
cPECxSGSukhG4l0KGihJOwPeTNFnKT1JEqLgIGCXxZg9m5FNYt0QuyjXevDXIw5c
iPldXWDXlG2PTYP+C/RGhd9gATj7XE1OWSU3OYWX3UckWrPxKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGExrsOtA3Q1GczWGRf2uGljFd2OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvNDI1YTY0MDgtN2U4Ny0z
Yjg5LTliNjItOThjOGIyN2E0ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbZ/G9ty1aDC372bNYLobZ0gmO8OlAtYZAlUwLPhKivJfiZa9xMe37k
sNlNmfVw2D1K7xWDbFbi0478ZjhXRRn6OMNW1FcRT0BAQ171zciN6/bhcZiTM3pY
2SU+tJfeidT99QyqEmY3yG4hURUR7CaHEl4uPP3XVSC9XIB3d7AQaAO6o5efwNeD
Gx+Ik9sM/XWC5nRlcqPfj9fxeA7u4WNpMTeHspUxlFU5dm6DpMAy+YK0diO6xX9B
D604hqMbtNKqUt1tj1S5o0+ZWaQIZYN9N238VgeQx5RLt0G2gfDUYtvndAG7zmay
lfYZB54WA2TVi7kbteEASNbcQMviUbQ=
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:07:05 2025 by rpki-client