Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbc032d-a76a-31d4-aa10-cebee17fa434.roa
File:                     0bbc032d-a76a-31d4-aa10-cebee17fa434.roa (raw, json)
Hash identifier:          wtlaZvCiqqD7azC3uxkMS7T+EUtRrFIGEaeIHPjaNaY=
Subject key identifier:   71:17:AD:B6:E9:A0:D8:93:2F:F2:4A:5C:DD:04:16:A6:35:DA:6B:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08F1E253661D544EBB4280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbc032d-a76a-31d4-aa10-cebee17fa434.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.37.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:f1:e2:53:66:1d:54:4e:bb:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4197d3f7-640d-4e36-9495-7815b8b0a816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:20:b8:74:68:d7:97:27:f7:14:88:56:dd:
                    5a:14:e2:dd:87:24:15:bc:2f:4d:5c:19:dc:2d:45:
                    09:6d:4a:fa:61:20:2b:d0:45:a7:21:33:11:81:bc:
                    53:04:0e:66:95:78:94:3d:fc:ce:8b:67:89:30:6c:
                    d5:ba:06:46:1d:e6:9a:c7:b9:8d:ee:8a:6f:e8:ec:
                    87:10:61:74:bc:3f:7d:5e:65:89:08:9d:5f:82:14:
                    0d:13:11:3c:f7:91:62:83:f9:6f:fb:2b:3e:78:85:
                    f6:c5:47:b8:43:b8:08:44:2d:dd:82:ff:74:91:41:
                    8b:44:7d:52:03:c1:6f:44:b9:ef:10:cf:b0:e1:23:
                    27:6d:87:9f:2a:9b:a0:7b:62:43:94:88:0d:2e:fc:
                    06:87:7d:43:74:bd:1a:15:08:c7:86:b7:a0:c2:97:
                    6f:ea:fe:bb:5c:7b:b0:9d:35:0d:f2:02:32:e2:36:
                    9b:94:89:c2:08:2c:86:fb:85:b0:53:00:94:10:c5:
                    26:b8:f5:f7:66:35:e9:19:4a:25:17:bb:6f:7f:94:
                    31:63:3d:dc:c2:d6:f6:96:39:9d:48:91:ff:d3:74:
                    7b:7b:3e:1b:16:9b:b4:39:e8:37:6b:72:47:84:fc:
                    c2:3e:a6:13:cf:9f:7c:07:02:9d:d1:48:fb:fe:b0:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:AD:B6:E9:A0:D8:93:2F:F2:4A:5C:DD:04:16:A6:35:DA:6B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbc032d-a76a-31d4-aa10-cebee17fa434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:04:50:45:06:94:b0:2e:15:30:51:a2:be:04:12:00:bf:07:
         1c:ac:44:35:94:f7:15:81:a8:df:29:00:5c:93:4e:cf:a5:d9:
         35:13:a0:c0:15:b0:13:58:f8:00:40:10:ee:85:a0:75:eb:7b:
         fa:57:05:0b:1d:eb:a0:cf:ab:88:07:d3:fc:34:ee:66:ab:33:
         de:12:8e:50:33:bf:8d:a0:60:f8:80:2a:99:81:b6:10:20:db:
         65:bb:41:8b:c4:bc:07:de:d2:39:2d:34:32:b5:97:c9:52:24:
         8c:ba:0c:af:62:08:f8:fb:c2:5e:1e:f9:38:6a:9c:01:cb:9a:
         5e:c5:dd:2e:1f:43:ba:ad:1c:fc:a3:96:3a:68:14:cd:8f:99:
         4c:6d:f4:e9:85:15:7f:25:8c:0a:27:4b:60:38:a9:43:6e:53:
         b2:59:10:e5:9a:9e:8c:45:8b:f0:d2:12:56:d2:0b:e8:5a:92:
         8e:ea:78:57:be:9a:6f:16:f8:77:38:fd:7b:c3:40:c7:8e:2d:
         8c:bd:9b:17:28:c4:d3:84:c5:b1:88:15:26:18:6a:bc:75:f1:
         06:23:60:32:64:94:39:13:63:e7:2a:5e:eb:83:7f:61:1a:1d:
         98:96:09:f0:b0:64:de:b7:a4:61:96:bf:e8:36:d4:43:29:9d:
         d1:20:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:55:53 2025 by rpki-client