Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20df31f3-9bdd-367b-8a2a-af505b9daed2.roa
File:                     20df31f3-9bdd-367b-8a2a-af505b9daed2.roa (raw, json)
Hash identifier:          1Uzdv6OFAhll/Sk6+0dncA5KYaNxt87W2IWutHtydnU=
Subject key identifier:   EC:3D:D7:93:DE:63:BF:DD:86:BA:5E:F7:5D:09:46:42:30:39:B7:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06B58B3EB4313A0F87B800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20df31f3-9bdd-367b-8a2a-af505b9daed2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.226.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:b5:8b:3e:b4:31:3a:0f:87:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8855949d-cd88-4145-afa0-d48821a44541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:e4:fc:d5:40:e2:2e:4b:39:bf:3e:cb:a9:
                    90:26:d8:8b:ed:a0:5b:33:f6:b2:cb:98:89:76:52:
                    d0:b7:c9:2d:b1:ee:9d:1d:bc:5b:55:57:73:eb:a1:
                    31:aa:9a:db:3c:33:90:8e:8b:f9:dd:fb:57:cd:6c:
                    ac:60:5d:4e:e7:62:55:92:ba:cd:c2:5c:99:4a:21:
                    38:70:cc:43:26:13:92:ca:15:9c:23:61:93:dd:d8:
                    7e:55:ba:8e:b0:dd:8e:08:7b:92:a5:81:bd:92:c6:
                    24:7c:4b:4d:94:5d:44:d3:8c:84:40:30:64:7c:4c:
                    60:5e:91:ba:7d:dc:88:f8:cd:73:b5:f2:d6:1e:7a:
                    dd:72:d7:69:19:74:b5:6e:69:ac:1b:47:01:1b:c3:
                    00:21:fe:23:31:2b:92:86:2e:7c:b6:9b:55:0f:e9:
                    3f:65:79:d5:5a:05:02:91:96:b4:d9:74:88:61:09:
                    35:29:ef:e6:e7:d0:ac:c7:2a:80:15:4d:50:60:31:
                    78:75:29:8d:96:8f:2c:95:61:79:56:8d:14:4a:75:
                    90:c9:ea:89:6a:b3:e5:e3:fb:1e:dc:95:d9:de:f5:
                    d4:8f:28:73:50:1c:3c:e4:b0:2e:d4:6c:fb:f7:c7:
                    ff:c8:d8:a5:e5:9e:b7:4b:dc:4c:5d:df:47:78:a0:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3D:D7:93:DE:63:BF:DD:86:BA:5E:F7:5D:09:46:42:30:39:B7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20df31f3-9bdd-367b-8a2a-af505b9daed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.226.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:89:08:66:2f:20:f7:05:67:ca:c7:a1:2e:e5:68:2f:61:
         06:12:1c:a7:d3:34:bc:2b:46:8e:65:0a:a5:de:c3:9c:07:dd:
         31:e3:fe:7f:f4:da:40:64:9d:6e:94:ab:21:c6:62:1d:f2:b0:
         95:9e:3d:6f:d0:28:80:17:17:ca:02:1a:c7:f1:04:9b:b2:af:
         00:a2:f6:ed:9d:55:cf:6b:4a:76:29:1f:1a:5d:ce:9f:cc:53:
         ab:b2:1a:ab:81:4e:a8:98:7b:d6:d6:4f:f6:08:fa:4d:98:c8:
         8b:18:f8:c8:0f:14:72:ac:74:f6:2e:3d:38:94:2c:72:fa:39:
         d3:d6:61:4d:96:58:5f:f9:64:fd:e1:c3:ab:f2:4f:ab:f4:7f:
         90:01:42:f9:47:7e:f0:28:0c:4d:d9:45:b4:44:aa:14:a4:2f:
         8c:83:35:4f:4b:0a:cb:18:29:03:37:e4:3e:15:b5:d0:0d:00:
         9c:50:33:d3:2e:48:8b:47:80:bb:35:05:80:af:60:29:47:1d:
         68:f2:c8:70:df:f4:06:3f:c3:55:b7:f8:0a:63:bc:bd:1c:78:
         64:b3:45:fc:7b:a8:c0:b0:de:1f:bd:86:3a:d3:1d:1b:e5:cd:
         c4:f6:99:e1:95:63:fd:0a:c9:2d:55:1f:ca:c9:32:f4:de:33:
         45:87:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:59:36 2025 by rpki-client