Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/100f507e-0c94-3771-8478-ef1cd124245a.roa
File:                     100f507e-0c94-3771-8478-ef1cd124245a.roa (raw, json)
Hash identifier:          o/UHxc3lKtPf1sR+TJm10ouLz8RNae2PiORHELLlj+w=
Subject key identifier:   28:71:23:84:5F:FF:93:DB:AA:BA:5F:88:35:55:AF:19:A3:33:45:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C086B5EF641075B9A91FD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/100f507e-0c94-3771-8478-ef1cd124245a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.46.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:6b:5e:f6:41:07:5b:9a:91:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2e5c3d62-14a4-4912-a75e-786d08fe2c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:d8:58:bf:66:76:5e:e0:ca:0c:19:79:36:
                    35:9f:42:82:b7:40:68:8a:24:fd:83:50:8b:aa:c4:
                    c4:4a:d7:ef:65:8f:93:54:41:5f:cb:ff:1e:51:d5:
                    5b:44:04:06:d3:75:53:35:98:13:5c:1d:29:11:fb:
                    44:7f:38:e4:f4:b3:49:72:4a:92:6b:d9:e7:22:29:
                    ee:52:24:f4:4c:79:04:b0:81:0f:c1:4c:1f:26:03:
                    5a:0a:90:28:46:60:4d:6c:5e:5b:9a:74:30:f9:9e:
                    5d:09:0c:41:81:aa:00:ea:f4:e3:d9:13:5a:cd:d2:
                    30:de:9b:ec:33:1b:2e:1b:4f:4c:b0:5b:64:f3:6d:
                    ce:a9:f2:e7:ee:c5:d0:bd:a7:66:68:be:83:75:da:
                    e4:38:6d:04:b4:ab:12:f3:c7:68:1c:96:7b:64:c5:
                    2a:2b:98:6e:8e:65:c4:9e:a4:f8:df:00:84:ce:f5:
                    f2:0d:50:9f:35:44:de:7d:60:72:25:9b:c0:83:21:
                    90:9f:41:61:71:ef:88:2f:74:a9:88:3d:a2:73:2c:
                    0c:31:2b:65:22:44:85:eb:be:ed:18:cd:44:86:c1:
                    33:1b:ed:ca:f0:cb:cf:1d:0b:6e:16:19:bf:86:0e:
                    4c:ed:eb:e7:c6:c9:d3:ac:b0:05:cf:6c:63:c9:fd:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:71:23:84:5F:FF:93:DB:AA:BA:5F:88:35:55:AF:19:A3:33:45:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/100f507e-0c94-3771-8478-ef1cd124245a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cf:be:cd:0c:de:10:0c:20:b0:3c:ee:cf:10:e6:1b:df:64:
         85:40:f7:c3:c9:6b:af:9e:fd:ca:58:ca:95:d3:4e:eb:b6:c0:
         db:1b:f0:cc:bb:52:2d:59:e0:7d:28:21:2e:7f:7d:52:54:ba:
         98:94:fc:c5:60:4e:a0:2e:da:c2:0b:0b:db:95:15:af:ae:9d:
         6e:9c:65:78:e4:bb:f5:5f:05:4f:52:a9:fc:63:8c:16:3a:2a:
         ba:70:16:be:c2:24:36:11:7e:e8:64:ac:90:d5:7f:b9:8a:32:
         55:3c:25:92:97:7a:f2:2b:bc:89:c3:9e:72:f5:19:7e:a3:57:
         13:fd:09:37:a7:39:2b:ba:1a:18:7a:dc:bb:e1:41:a8:68:7f:
         d4:24:b7:b7:ad:75:b5:6c:38:60:69:c5:3c:0c:2f:ca:31:04:
         7e:33:97:e5:38:a0:d7:96:a5:4c:6e:16:09:50:de:2c:5c:9f:
         71:d6:a7:88:d8:25:d8:85:42:2d:19:4c:57:e7:c9:15:0c:ac:
         10:d0:90:ac:f0:4a:55:6a:07:9f:c8:84:d1:11:89:65:db:36:
         ed:73:f5:ed:bd:07:87:8a:2f:93:e3:cd:f7:56:c5:7c:fe:cd:
         4d:0f:a1:d3:1c:a4:52:43:c3:5a:c3:51:e1:3e:af:4b:62:35:
         5f:10:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:07:58 2025 by rpki-client