Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa
File:                     2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa (raw, json)
Hash identifier:          lQoys96nux38V2RxYVrp4HxE+QvkeryP0Aa/rgJTtRw=
Subject key identifier:   62:A3:89:10:0B:5B:90:E8:D0:14:9E:87:79:30:9C:D5:8A:0B:BF:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0869D70C6F061AE6739A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.34.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:69:d7:0c:6f:06:1a:e6:73:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=02726e2a-e89e-4e9b-8a10-b5cd45010087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b1:28:54:73:c2:3e:18:c5:11:5d:f2:78:47:
                    49:d8:59:5e:02:2f:e1:94:1a:b4:ee:c6:bb:d1:8d:
                    77:ed:bb:12:a3:4d:62:00:21:ee:9e:af:da:1b:50:
                    96:9e:55:22:b7:03:0b:0f:8f:37:b8:47:c2:f3:58:
                    ed:31:31:e6:d3:81:17:08:3f:27:35:08:fd:40:bd:
                    88:b6:93:33:5b:7d:95:c0:0f:cf:ed:4b:ce:4d:8e:
                    05:7c:8e:9d:04:ec:99:16:a1:02:9d:6a:44:d4:d7:
                    9a:8e:cb:67:ac:76:ff:4a:aa:20:d0:9f:8b:30:59:
                    97:ce:69:ed:3b:6a:f1:ad:e4:3b:d5:5c:7f:0c:75:
                    94:3a:7e:e4:47:b2:b5:e5:63:ae:45:37:2d:6e:70:
                    6e:0d:da:6a:ad:90:a4:77:52:cd:da:02:21:c5:51:
                    f0:dc:80:92:88:e6:78:e7:c6:b3:16:6b:7e:05:7f:
                    71:6c:5f:51:2c:ff:ab:50:39:26:6a:9d:56:52:35:
                    26:09:25:1a:a3:aa:b0:95:14:d2:02:22:d8:61:48:
                    f2:0c:a9:26:1a:e6:cc:2a:8f:f8:ab:65:d2:72:79:
                    44:dd:22:ad:34:c5:2c:45:34:07:7b:59:71:83:f0:
                    f5:34:7c:91:d7:76:e4:21:59:94:97:e6:6b:5f:ba:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:89:10:0B:5B:90:E8:D0:14:9E:87:79:30:9C:D5:8A:0B:BF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:0e:29:d9:6f:ad:3c:0f:de:3f:16:48:65:0f:b6:c2:09:
         60:ea:e0:0b:d4:c5:6a:8d:8f:78:22:e8:88:a4:3d:f6:85:fc:
         30:ae:af:10:b1:3a:25:a2:fe:6b:cd:c5:39:25:6e:da:b7:e7:
         33:d2:6b:20:23:19:fe:c4:3a:b1:93:f5:0a:e6:4a:2e:9a:b1:
         af:99:c2:53:6d:1e:07:1d:33:1e:87:4b:f1:7a:b1:cd:69:0e:
         a4:2e:8e:3b:f5:41:c7:49:94:73:26:d2:8b:f8:80:ec:16:de:
         07:e1:aa:4c:1b:d9:84:2c:00:ef:68:30:08:f8:bb:68:82:00:
         22:fe:dd:23:61:ea:89:ad:3b:7f:7b:f5:38:d2:30:62:eb:23:
         9e:a6:35:3d:f5:60:e2:9a:53:ae:ec:73:ee:06:87:50:6f:39:
         f1:d9:94:de:9e:7f:13:53:e3:23:b2:a0:95:50:57:6c:9b:e5:
         09:39:9f:9a:4a:77:95:1b:16:ed:a0:38:e3:a7:df:a5:1b:a1:
         04:23:70:67:d7:f1:1d:2a:39:71:ec:49:d6:d9:d4:7c:9e:31:
         4f:ba:f8:c5:82:3e:7a:1c:f0:cd:f2:fe:be:c9:53:99:9c:b8:
         fe:61:af:0e:6e:8f:70:63:f3:a4:74:c1:7e:f8:d4:1a:da:4c:
         8f:dc:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:25:10 2025 by rpki-client