Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a7e927-7b55-389c-b186-98bf3f73ef6d.roa
File:                     15a7e927-7b55-389c-b186-98bf3f73ef6d.roa (raw, json)
Hash identifier:          t8VUeJWfV7moLRdyFZ+ZIj2QriGLt6Lz8PuyUAVKM9Y=
Subject key identifier:   38:F4:9A:94:82:7E:51:2C:E2:AE:2C:CF:DF:4C:3F:57:02:2F:39:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB14FD6EA58F9882F08C300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a7e927-7b55-389c-b186-98bf3f73ef6d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.193.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:4f:d6:ea:58:f9:88:2f:08:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5917a4bc-1c7b-482a-86cb-8bef2eb384e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6c:ec:11:b0:ba:cf:ac:1d:ee:91:d2:1d:43:
                    3c:10:6f:21:ba:ea:f0:9a:2b:78:79:d1:50:1a:1c:
                    c7:dc:29:3b:62:20:6b:78:9e:29:1f:06:fa:38:66:
                    a2:a8:61:65:55:92:6f:c2:02:82:f5:0e:fd:43:07:
                    21:27:66:a2:37:a6:53:58:49:ca:f8:f9:40:9f:7a:
                    e3:24:d4:69:ee:b1:73:a7:44:d2:c4:85:a9:48:a7:
                    b2:4a:60:f6:8d:46:2d:df:da:7d:2b:6e:92:77:cf:
                    ae:85:35:eb:3c:af:29:07:00:c5:94:80:80:a1:1a:
                    93:4c:1c:eb:4c:cb:ec:50:35:44:27:36:e9:d2:c0:
                    ae:73:2a:e3:4c:11:97:92:4f:3a:29:6b:73:f4:48:
                    19:7b:4a:7e:91:6a:d3:a6:85:24:f6:d9:83:92:43:
                    d0:f7:59:6e:c5:3a:38:0b:df:fe:a2:f7:53:47:97:
                    3d:9e:44:7a:fb:10:fa:86:64:51:96:63:dc:4c:58:
                    36:07:46:a6:28:48:dc:55:18:d7:47:07:90:7d:82:
                    ed:dc:d0:62:e6:c9:86:11:f7:8b:f3:2b:05:48:71:
                    d0:14:86:90:09:f3:a9:0d:6f:82:06:90:58:f4:4d:
                    9e:cb:87:9c:75:fb:e9:45:0c:81:15:38:80:ee:21:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:9A:94:82:7E:51:2C:E2:AE:2C:CF:DF:4C:3F:57:02:2F:39:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a7e927-7b55-389c-b186-98bf3f73ef6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:0f:34:1b:5e:9d:7c:5e:23:a7:64:29:60:f2:2a:89:6f:
         71:86:84:a7:2c:b6:92:2f:b6:b1:9f:8c:03:25:8f:a0:0e:75:
         40:ce:01:c5:f9:4b:0c:a6:2f:be:0e:7e:64:f9:8b:72:e8:be:
         7e:5b:38:b9:fe:87:21:cd:89:03:b3:5d:40:06:1e:52:79:65:
         f1:a8:aa:ce:b3:95:ca:d9:f6:be:96:7f:1b:7d:08:8a:2a:71:
         38:ac:04:97:3b:c4:68:e4:30:08:0d:b3:b7:0f:c5:85:7a:ad:
         51:42:86:28:1f:a7:ab:8e:69:17:34:2e:e4:59:c2:01:d9:15:
         a2:8c:df:53:e9:75:ae:7e:f7:94:26:a8:0c:4b:6d:7d:12:d6:
         37:30:87:8b:70:99:07:00:9f:bc:ff:9a:c5:46:ec:f1:a7:c9:
         5b:a0:e5:28:4c:f8:73:a3:b5:ef:ee:04:48:a8:38:29:a4:8f:
         26:f7:7e:8e:38:bc:5c:6c:14:a6:0a:aa:87:8b:e0:dd:12:aa:
         3b:66:86:9a:07:53:1b:02:be:90:64:9b:eb:98:e0:74:1d:d0:
         a3:1c:34:73:7b:4d:22:65:85:2f:5e:c2:2e:4d:72:2a:ce:84:
         11:35:83:5f:cd:47:c2:3f:40:ea:65:3b:6b:62:06:dd:a1:94:
         54:1d:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:09 2025 by rpki-client