Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1407dab5-957e-324f-bcc8-85c976cfb330.roa
File:                     1407dab5-957e-324f-bcc8-85c976cfb330.roa (raw, json)
Hash identifier:          +SAxzSE9jusC7skANHWaOXxIhYBtxvnWNZzBZnP17cs=
Subject key identifier:   09:9D:5E:4B:D8:92:C5:31:E1:4F:AA:1A:67:E6:5C:67:7F:22:E9:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06A99C7B8C1B91D0655C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1407dab5-957e-324f-bcc8-85c976cfb330.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.193.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:a9:9c:7b:8c:1b:91:d0:65:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=40318a69-761e-4c0d-87d8-d02f29bc58b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:84:d0:92:29:88:6c:87:c4:55:28:bc:c9:
                    fe:49:69:5c:19:91:e2:8f:37:e1:bd:54:0f:74:25:
                    e1:1a:3d:e5:e5:cc:0f:b6:1c:ce:7b:28:5b:b0:37:
                    b5:39:ee:07:3f:83:02:c6:22:1f:27:1c:3c:de:f7:
                    6c:2a:f6:5d:9c:19:96:1d:1b:03:3b:1b:c7:7c:89:
                    19:1d:a4:15:ee:f5:46:9f:f7:5e:e2:1d:bf:bd:7f:
                    e4:2b:2f:cc:44:a6:f7:1f:1d:03:bd:22:5f:c2:5b:
                    0d:d3:02:8b:d1:3e:e5:e6:64:3c:9f:59:fd:83:f9:
                    c1:18:69:75:39:84:f4:94:53:f5:fa:0a:fd:d3:9c:
                    5c:08:af:53:cf:79:32:bf:56:ba:4b:31:6a:e8:04:
                    0c:a3:a5:e4:69:53:0d:c4:4f:1b:fb:21:54:35:4b:
                    66:af:0d:16:07:b2:5d:7e:f5:96:0e:31:e0:90:63:
                    36:92:59:b0:78:1a:fd:78:ce:49:f7:fd:97:a4:fb:
                    4a:72:33:05:13:82:54:e5:0e:9f:78:77:6f:66:01:
                    f8:95:a6:e4:0a:de:bd:cf:41:64:e2:ad:83:e2:3d:
                    b0:27:48:3d:df:13:74:7a:50:fe:6d:59:54:8b:49:
                    0b:21:ca:58:e2:66:97:9d:71:25:0c:f2:73:73:ca:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9D:5E:4B:D8:92:C5:31:E1:4F:AA:1A:67:E6:5C:67:7F:22:E9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1407dab5-957e-324f-bcc8-85c976cfb330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:13:19:7a:62:a8:7b:16:9c:ec:16:c5:56:9d:d8:03:ed:32:
         78:cd:67:7c:64:fa:70:5a:f9:61:52:64:a7:cc:c4:b2:cf:ef:
         1a:ca:81:41:22:a8:a7:a9:6b:4c:77:6a:75:aa:17:12:99:44:
         b5:f0:a2:9f:9b:f5:26:b1:05:7b:55:80:45:dd:6d:f2:a2:f3:
         ff:7e:bf:f2:be:4d:db:58:de:c6:f0:0b:85:ad:cd:7b:e1:22:
         75:28:3d:15:da:a7:6b:88:ab:da:c4:e3:81:25:50:57:c2:f2:
         bb:fd:b9:9f:f4:05:a0:65:72:d2:5f:cf:53:7a:a2:be:e9:b7:
         cd:21:09:87:49:8a:3d:f0:27:57:f4:38:e4:eb:17:36:2b:18:
         9d:f0:f8:93:b3:23:bb:77:45:3b:d3:d8:86:b3:2a:49:e0:14:
         5e:db:8f:0e:a5:bf:dc:f1:0d:85:22:d8:a5:b6:a5:7b:5e:cd:
         ad:8f:8c:e9:f5:24:f9:b4:e0:85:25:c8:d9:97:5d:d6:63:b8:
         65:ee:c3:7d:e0:31:ed:8f:ce:53:d5:73:f4:d3:3f:de:af:03:
         84:7e:5c:a9:0f:d9:39:fb:ae:af:70:65:e1:99:30:6c:5e:7f:
         93:a2:af:ec:2c:83:31:f8:10:93:81:b5:5e:b0:ae:50:73:22:
         f2:3e:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:43 2025 by rpki-client