Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29a1651f-cbb8-3f2b-aac5-5a3edda43ac5.roa
File:                     29a1651f-cbb8-3f2b-aac5-5a3edda43ac5.roa (raw, json)
Hash identifier:          M3drZRpLsz+xahF9krngoG5ndgdHypRSyonuYKhax9k=
Subject key identifier:   75:EE:CA:B4:3C:63:CF:2F:DC:D3:58:26:B0:75:C2:1F:CE:5F:B6:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFC39CC238746791217D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29a1651f-cbb8-3f2b-aac5-5a3edda43ac5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.215.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:c3:9c:c2:38:74:67:91:21:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=fe590f6e-ff47-4f53-b827-1cf4281cb1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:ff:1f:cc:4e:8a:e8:e1:b8:43:29:a5:cf:
                    b8:fe:2d:90:88:0d:a8:9f:d7:d3:29:f4:0f:a9:c4:
                    66:a7:ae:27:3e:78:18:7f:fe:5c:5a:f8:38:fd:4b:
                    3a:8c:9a:c9:f0:63:52:19:4a:9d:97:16:ae:85:97:
                    fb:a2:38:8e:87:71:ef:1c:8c:71:9a:53:3f:90:46:
                    b2:4b:22:c1:85:ad:4b:0d:db:f3:6e:32:2a:c1:81:
                    1b:2d:81:68:63:62:0a:3a:24:8a:87:8d:18:8e:c5:
                    15:ef:13:59:18:56:41:27:f2:57:a7:92:90:af:5f:
                    8a:4f:e4:02:46:df:45:db:84:6e:05:38:20:96:a0:
                    ca:4f:fd:aa:34:44:20:bf:65:48:b9:c8:71:f8:69:
                    1e:a2:eb:bf:74:ad:64:37:ab:54:8f:e2:00:6b:12:
                    38:36:46:82:fd:ce:97:46:91:b9:88:55:9e:81:28:
                    2e:71:8a:52:b1:98:fc:be:71:d5:b4:53:e9:9c:97:
                    0c:7a:6b:83:56:b3:82:7c:cb:66:91:ae:a9:74:d1:
                    5d:4c:50:ba:50:5d:04:26:f8:37:0d:e3:6c:bc:d5:
                    24:01:a7:e3:15:b5:dc:68:28:4a:07:68:78:37:dd:
                    34:fc:b7:d8:97:61:1d:56:31:4f:fe:8d:a9:37:70:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:CA:B4:3C:63:CF:2F:DC:D3:58:26:B0:75:C2:1F:CE:5F:B6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29a1651f-cbb8-3f2b-aac5-5a3edda43ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:41:65:06:ca:e9:c2:e8:61:ed:8f:4a:c6:52:10:20:82:
         4d:73:77:7d:b0:53:b6:89:59:ed:ad:14:44:78:c1:72:66:2b:
         ff:81:49:20:87:e4:c0:60:12:4b:0c:ad:a2:1b:06:84:16:23:
         59:71:d3:b8:c3:7c:1d:05:cc:f1:8d:8c:d6:e8:80:26:f1:60:
         b1:a0:9a:75:e9:fa:9b:dc:fa:46:3e:d0:53:92:07:9b:15:4a:
         c9:c9:8f:5f:ae:73:d4:a7:cd:20:2a:86:c1:d6:01:b4:67:5e:
         b8:f9:db:ae:45:1b:b8:58:a0:13:c9:e0:e4:a9:5e:2d:fd:04:
         be:b5:a7:3e:63:5c:da:30:3f:80:eb:71:0f:87:b1:1d:65:90:
         38:77:f4:18:04:76:71:f2:73:db:89:45:90:95:8a:2f:64:1b:
         03:a9:8b:bc:a3:31:3b:0e:d4:77:df:d9:54:6e:94:09:be:f0:
         86:ff:04:7c:f1:a3:9e:e2:e4:b4:6d:1e:fb:ac:db:13:62:9b:
         d3:7f:ab:d2:48:d8:fd:6d:54:3d:6a:00:e7:f5:2d:12:77:84:
         d7:9f:43:98:5a:ef:43:28:42:ab:00:17:93:8b:18:7c:39:01:
         dc:21:c2:43:72:b4:e1:fe:96:72:27:f9:0b:3d:92:86:30:8a:
         92:ab:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:30 2025 by rpki-client