Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cc7389d-0eaf-35a5-8d2e-72e34ca96088.roa
File:                     1cc7389d-0eaf-35a5-8d2e-72e34ca96088.roa (raw, json)
Hash identifier:          M47/S2XXGyUNQ6REDOlP7KmWeDOcEDDBSDsDvGU6IQY=
Subject key identifier:   38:A4:9B:26:78:D9:96:95:29:61:86:18:FD:86:F3:CD:37:9D:F5:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06BD22B01B4A565EA57400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cc7389d-0eaf-35a5-8d2e-72e34ca96088.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.34.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:bd:22:b0:1b:4a:56:5e:a5:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f089580c-842b-406e-b442-02a1481d37a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:bd:3b:f8:7a:ad:80:7d:61:42:07:f0:3b:
                    ee:7e:c7:62:f3:13:26:b0:02:6d:cc:a4:c5:d5:70:
                    e4:5f:15:81:e4:0f:7e:2e:34:1e:ab:94:f3:0c:ba:
                    e1:d5:e4:7f:fd:40:01:ac:26:02:90:4c:56:dc:2b:
                    fd:28:da:20:e5:76:06:52:d6:91:59:17:5e:e8:dc:
                    4d:b9:76:7b:72:de:14:c9:05:a9:49:de:64:06:2f:
                    01:bb:62:14:51:30:ca:3a:dc:5c:c1:d7:ce:20:90:
                    35:bc:e3:eb:84:9e:d5:1c:95:e9:9e:c4:ca:f7:8b:
                    d6:83:4a:2e:69:7e:91:6b:5a:10:2f:b7:7b:2f:39:
                    49:4a:22:7a:a6:5f:87:16:fa:b0:1e:ba:18:66:19:
                    2f:0e:77:8c:a3:52:6f:b8:b9:87:2e:ee:a8:c4:08:
                    3e:c9:1e:5b:bf:29:04:bb:9e:cc:9b:d9:9a:5f:c2:
                    d7:c4:ce:52:df:23:68:00:94:2f:b2:d1:43:00:8d:
                    2d:8c:7d:13:4b:d4:91:68:20:68:f2:a3:10:02:b0:
                    79:99:41:e1:21:d8:fa:a3:d3:8d:f3:5b:92:bb:70:
                    6c:8e:61:cc:c1:e4:d9:f3:cf:e6:3f:2c:ca:00:75:
                    69:c9:3c:e8:a6:69:e6:64:c4:e8:e8:c1:5d:d3:19:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A4:9B:26:78:D9:96:95:29:61:86:18:FD:86:F3:CD:37:9D:F5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cc7389d-0eaf-35a5-8d2e-72e34ca96088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:b9:ad:33:c6:cf:ef:33:2f:80:80:d0:9a:00:53:bf:c1:05:
         9e:a8:2e:6c:3a:fe:8a:19:65:24:60:ad:c8:56:ae:5a:48:14:
         ad:36:fb:8e:08:3e:92:29:bb:91:59:ac:1d:6c:92:5d:69:11:
         2f:d0:6e:1f:58:f5:13:94:5e:e9:6e:44:32:f0:f9:63:20:77:
         06:4f:3b:1a:ec:3f:68:4b:55:3f:90:d7:90:f0:b0:98:5e:aa:
         1a:39:20:9b:ab:b8:a3:1e:e9:46:60:fc:a5:5c:4e:49:34:b1:
         0c:cd:2e:6e:46:3b:27:f9:f7:fc:87:ec:49:27:1e:56:31:c4:
         93:6b:46:6d:3d:fb:b7:d3:dc:f0:25:3d:a2:17:5a:96:48:ca:
         37:bb:50:d5:03:4c:fb:2c:a1:da:49:75:2d:15:83:5f:eb:bf:
         f1:8f:aa:39:22:97:57:f7:d3:0e:ab:48:5a:41:aa:78:71:76:
         69:c0:a1:46:2a:31:be:a9:b2:1c:de:38:86:e3:fb:a8:a7:4f:
         ea:7a:12:62:62:86:bc:14:72:6b:cd:af:d7:e4:5f:e1:6f:55:
         9e:27:df:9e:6d:5b:3f:86:53:34:68:1b:37:d0:3a:7f:e4:95:
         74:b9:e9:ff:14:74:1d:90:d0:70:80:51:8c:c9:27:63:0e:bb:
         e2:e8:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:53 2025 by rpki-client