Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa
File:                     0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa (raw, json)
Hash identifier:          tQi4o+sEhqOXrWwex7Kws5iF0OmFzdWD6TDMvJQ1tWA=
Subject key identifier:   BC:65:8F:E9:DC:2A:40:AA:C3:4F:D0:34:34:A4:01:17:4C:4F:F7:33
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F5B2F24A037489A215EC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa
Signing time:             Thu 01 May 2025 17:10:11 +0000
ROA not before:           Thu 01 May 2025 17:10:11 +0000
ROA not after:            Wed 30 Jul 2025 17:10:11 +0000
asID:                     22773
IP address blocks:        98.161.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:b2:f2:4a:03:74:89:a2:15:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:10:11 2025 GMT
            Not After : Jul 30 17:10:11 2025 GMT
        Subject: CN=d7e2ecbf-6b68-435d-ba06-89373292cf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:f9:34:2d:cd:8b:8a:cd:c3:f8:0d:73:38:
                    29:00:0f:5f:74:86:02:7b:07:09:e1:90:fc:03:c4:
                    d5:9a:43:b4:f8:4b:1d:35:6c:7d:65:ab:70:62:b5:
                    31:aa:04:b5:1f:dd:8d:45:d6:04:24:64:54:27:f4:
                    ff:7c:0b:e8:c4:9b:ee:84:3c:f8:fb:12:1a:5b:6e:
                    5e:33:ae:fb:f9:6a:85:b3:0f:bf:82:b5:fb:84:c0:
                    f5:e2:1d:f4:ce:2f:29:fd:8b:4e:6b:0d:bd:1c:13:
                    f5:49:62:53:60:e2:e3:e4:40:d1:88:a8:96:19:4e:
                    e9:f9:e7:e1:01:e3:13:28:9b:e6:a0:22:93:7b:af:
                    4a:76:04:fb:42:b3:2f:cf:a6:27:5c:12:0e:69:be:
                    74:c7:94:01:2b:f8:61:d6:3d:43:8a:a1:f0:17:e9:
                    0a:5c:b9:dd:9c:c4:60:0f:46:d6:cc:ad:63:8c:0b:
                    e2:08:60:27:5b:b4:b5:de:76:db:03:0e:72:06:95:
                    f8:f2:cb:14:10:c4:5e:85:18:da:85:07:13:68:ca:
                    71:cc:09:68:ad:b5:2f:fa:a9:7b:45:df:f7:7a:cd:
                    58:12:27:81:9a:34:dc:32:8b:37:5d:1e:99:d1:d5:
                    2a:fd:45:cb:4f:e8:21:0e:08:6f:13:ad:c6:1a:82:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:65:8F:E9:DC:2A:40:AA:C3:4F:D0:34:34:A4:01:17:4C:4F:F7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:41:52:65:6d:5d:aa:f8:63:7c:fd:f3:49:10:74:42:9d:
         35:b6:30:ab:e3:d8:d1:28:df:6b:8f:15:d6:75:cd:ea:3b:cb:
         cd:36:9d:34:64:1e:eb:ec:28:70:38:29:2e:e1:2a:75:78:3d:
         16:87:16:05:16:c7:f1:96:ea:53:48:42:7d:8d:9b:c3:2f:1c:
         66:1c:3c:f7:50:a6:8f:49:f8:b1:6c:12:8d:d4:9f:aa:77:18:
         5d:2f:a3:fe:e0:f6:68:6d:91:b6:ee:51:ce:77:27:b8:58:28:
         ed:55:b9:8e:6b:0a:68:e0:d6:4b:60:dd:ca:9a:13:0d:87:3d:
         8b:50:b1:f6:28:f2:22:db:ce:1d:73:68:60:92:41:81:e6:09:
         5f:e7:cf:31:78:f0:0e:d9:87:68:03:db:07:90:c0:c8:c9:76:
         04:ea:e2:c8:46:26:75:c2:b2:a3:05:3e:3c:e1:f2:24:da:1c:
         75:37:b3:f4:f2:8d:ad:3d:c7:09:aa:06:20:05:70:32:83:57:
         62:6d:27:9e:f9:ba:2e:87:4d:15:b9:b9:8e:f1:bc:5d:a5:61:
         e6:af:7a:b4:bd:59:8a:8c:eb:0a:39:9e:61:ee:c9:6f:fe:df:
         54:fd:d1:0b:7a:3e:79:31:21:35:e8:8d:24:4f:a1:2d:ff:09:
         9e:da:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:08:34 2025 by rpki-client