Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1afd340d-a74a-3e64-993a-958a9d93597e.roa
File:                     1afd340d-a74a-3e64-993a-958a9d93597e.roa (raw, json)
Hash identifier:          3rXM+i7FJu1QsOKui7Nkf9U46ORujFaDyT8Cu+OZgPA=
Subject key identifier:   09:DB:7B:8E:B0:B1:15:C1:F0:FA:5C:90:77:AC:72:52:45:9B:8A:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203CBCC85A8CFCF0B47FC080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1afd340d-a74a-3e64-993a-958a9d93597e.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.192.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:bc:c8:5a:8c:fc:f0:b4:7f:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=481f7a41-402e-4708-9531-a29184386a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:b5:ea:97:40:1c:44:ed:b6:f7:d3:6a:31:
                    e9:0a:66:a5:ef:fd:eb:e3:43:b4:a5:07:1b:86:e5:
                    9f:78:88:4c:a9:35:4d:2f:e2:52:b8:0e:68:f8:18:
                    cf:81:30:c1:39:b9:75:f2:76:65:d3:7d:86:91:1c:
                    28:18:80:50:66:29:bc:6f:72:59:1c:2d:71:2d:53:
                    8f:46:d0:83:92:00:14:a7:ef:19:56:73:14:6c:44:
                    97:09:9f:fa:92:fd:60:56:d7:57:64:09:13:3b:06:
                    fe:4a:61:45:a5:a1:e0:9d:3d:6c:fd:f1:0d:35:3c:
                    b7:80:e3:95:85:89:5b:1c:63:01:63:b5:47:8f:2a:
                    66:8f:ef:af:95:20:09:fe:45:c7:42:d7:24:bc:fe:
                    ee:67:c4:15:19:de:66:b8:d0:85:86:f0:c9:f4:40:
                    10:b2:8e:7a:c7:a8:dd:36:fe:4a:61:87:f5:a1:1b:
                    f5:fa:3c:03:06:a0:5d:56:1e:82:af:9c:99:3e:bf:
                    88:1a:10:d5:ec:61:55:83:17:fc:7d:8c:87:41:21:
                    41:6d:02:fc:0f:38:97:ee:c0:99:80:37:16:ec:6e:
                    e2:93:6c:2d:44:36:4f:8a:5b:14:46:5a:65:72:cb:
                    08:dd:63:8d:b8:de:ba:26:8b:bb:9b:b7:b0:13:18:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DB:7B:8E:B0:B1:15:C1:F0:FA:5C:90:77:AC:72:52:45:9B:8A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1afd340d-a74a-3e64-993a-958a9d93597e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.192.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:ea:25:46:c9:b1:3a:29:75:b9:98:d6:b0:1c:91:ea:8f:
         f5:25:0a:1e:fd:42:50:70:4c:8f:91:f7:87:50:dd:17:f7:f2:
         5d:b0:72:9a:00:96:d9:65:3d:2f:fe:d4:61:d7:90:22:8a:28:
         fd:14:c1:4b:f0:7b:8d:0e:ed:03:a9:f2:e2:c2:ce:ed:f1:9d:
         97:11:2a:35:66:03:44:fe:69:76:dd:2c:b3:3e:1a:60:03:6a:
         f2:cb:35:12:b9:85:65:2e:60:a2:a2:28:e6:64:33:a4:6e:28:
         40:37:8c:27:b0:e8:66:6a:64:1f:0e:bf:6f:d6:7c:e1:7e:39:
         8c:9b:83:53:4e:59:3b:ba:58:d3:33:fe:ef:7c:2a:1b:78:9a:
         0c:df:39:df:e1:b8:a3:b0:5b:9a:16:95:5c:70:d9:e8:91:1b:
         c5:a3:18:4a:c3:12:54:a4:f9:4b:02:fd:18:1b:46:68:51:19:
         38:68:21:4a:ae:e4:0f:ec:8c:01:75:dd:53:c5:5d:f6:a8:57:
         1e:65:03:f7:7e:98:da:d0:11:69:20:0f:b6:f4:4b:5a:2e:f8:
         8b:f7:20:2c:2d:05:39:07:4b:eb:e1:3f:3b:17:c9:36:22:03:
         9a:4e:6a:c8:b2:ba:37:ff:01:54:78:ad:fc:d4:a4:d3:2c:1c:
         d0:9c:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:00:20 2025 by rpki-client