Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43a441c2-70f7-3800-ae9a-ce3ff8bea122.roa
File:                     43a441c2-70f7-3800-ae9a-ce3ff8bea122.roa (raw, json)
Hash identifier:          oIGbSzkDCjM+HaDl2OJy8vFzt/8OE6UEyErhQhqhsHI=
Subject key identifier:   FB:B9:BC:A5:69:E5:6F:88:90:F1:E9:A8:18:60:3B:08:E6:61:BB:F9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4E992EAC8A33CABC7E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43a441c2-70f7-3800-ae9a-ce3ff8bea122.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        98.15.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4e:99:2e:ac:8a:33:ca:bc:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=aefcdc4f-9d64-405d-9df3-0ba12268c58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:44:e2:a1:ee:50:77:74:81:b5:65:9a:d6:
                    81:58:23:5a:1c:0e:9b:ac:18:0f:a2:9a:ca:0b:23:
                    b8:67:b9:50:84:12:b7:0a:2d:4b:47:cc:0b:4a:ab:
                    ae:a6:37:ba:d6:2b:a7:6c:db:03:88:44:16:4e:d6:
                    7c:9a:3c:cc:91:63:c3:7b:12:c6:9e:60:43:90:2f:
                    a3:66:9d:30:6c:24:3c:3a:bd:96:61:20:5e:80:83:
                    26:7a:a4:da:45:97:37:73:51:65:71:a9:b8:a7:9b:
                    2c:6e:a1:d5:35:42:a9:db:f8:c8:1c:45:a9:9c:fe:
                    bf:e1:65:dd:62:31:8a:a0:06:3a:d1:2c:5e:20:f3:
                    0c:f7:1e:33:d4:94:85:82:7b:09:12:c2:47:98:a0:
                    20:67:e1:bf:48:db:bd:61:22:10:dd:f5:a5:23:55:
                    af:a1:76:02:99:0b:c7:7b:f8:2b:29:b3:69:8f:0a:
                    38:6a:1d:12:68:e5:10:28:dc:19:4b:ce:72:b6:e2:
                    da:8b:a3:c6:80:cf:4a:5d:02:53:d3:81:97:c4:07:
                    83:87:af:4e:44:23:e6:4e:b1:12:8d:f2:14:67:78:
                    83:ed:da:46:f6:05:d1:78:f9:99:ad:6c:47:7c:b1:
                    61:00:59:7c:6d:68:e2:e5:38:f3:c6:5b:8a:f9:5f:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:BC:A5:69:E5:6F:88:90:F1:E9:A8:18:60:3B:08:E6:61:BB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43a441c2-70f7-3800-ae9a-ce3ff8bea122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.15.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:af:8a:a1:fe:fa:05:79:8f:3c:de:20:c9:fd:32:e1:49:9c:
         f3:0b:89:fe:50:82:d2:d2:40:ec:25:8d:17:b0:82:40:f0:51:
         b6:f2:e7:7a:d6:26:0a:fa:ea:52:1d:40:bf:61:81:0c:99:51:
         18:bc:16:c6:df:86:53:84:0d:61:8d:ee:77:af:ad:bf:93:55:
         0b:87:06:40:2b:01:c6:91:35:53:79:14:17:fe:e7:42:48:78:
         fc:52:36:4f:52:c7:fa:a8:be:c3:27:55:7a:1f:43:87:b0:03:
         76:1e:29:ce:1d:e7:e7:7d:49:61:df:f5:b4:65:00:b2:66:df:
         6e:b8:ae:b8:26:aa:ab:10:43:a3:6a:7b:f1:92:21:50:26:10:
         86:56:d7:51:c1:f5:e5:29:10:ef:e9:d0:40:1e:f7:92:c9:d7:
         8c:1e:66:18:c5:6e:f0:a0:b3:87:ba:be:f8:2e:eb:6f:e9:5e:
         ad:9f:81:4a:a6:c9:ee:c1:61:35:1a:68:85:0b:6e:66:ea:be:
         c6:03:65:a7:55:5b:67:37:3f:3e:f4:84:66:73:75:83:9a:b5:
         6b:4b:14:34:e3:ce:63:68:b0:ad:72:e9:73:6b:ef:ff:67:36:
         86:fb:50:1d:2e:7a:a7:54:3b:79:dd:cb:7f:85:19:8c:8c:48:
         dc:82:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:49:46 2025 by rpki-client