Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37205191-0a3b-3fac-8c2f-4ea6e9753223.roa
File:                     37205191-0a3b-3fac-8c2f-4ea6e9753223.roa (raw, json)
Hash identifier:          lS8mAvVdxNaVvPd/m+91+1XPn/xjXbx4pr0nAA4puq0=
Subject key identifier:   DC:3C:8E:FD:0C:6C:FD:8D:E5:B9:B4:C5:6B:89:A5:56:76:BD:87:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430D63BF77D7D2720494200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37205191-0a3b-3fac-8c2f-4ea6e9753223.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        98.209.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:d6:3b:f7:7d:7d:27:20:49:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=39becd0f-990b-4d54-bfbf-ccef44a79a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:58:f4:bb:8e:ad:d0:14:ef:28:4e:24:95:
                    6e:c9:b1:64:68:42:9e:c2:7e:59:86:f5:5c:10:6c:
                    16:52:bb:b4:a0:94:e2:ab:6b:f5:e6:25:6f:f7:16:
                    fb:c5:52:db:de:32:e0:83:f9:8a:64:ed:a9:d6:4a:
                    03:f1:2d:59:8b:b2:ec:db:bd:0f:f3:1a:d9:ed:48:
                    c2:07:e6:54:2b:87:94:1e:fd:68:7b:e5:85:2c:6b:
                    d8:23:54:bd:1a:9e:f7:77:be:ff:73:8c:d3:95:ab:
                    3f:6e:a8:35:05:fe:30:05:c0:84:1a:6d:77:0e:7a:
                    c6:95:55:96:c7:c0:40:f4:0c:ca:cd:a7:59:82:e6:
                    fd:80:57:a7:94:a5:9f:12:f6:e7:01:40:65:a2:66:
                    24:0f:e2:cb:3d:93:8a:06:48:37:81:ce:1b:e3:9e:
                    ea:52:43:e9:8b:60:77:34:ae:75:ce:a5:4f:23:01:
                    af:48:0b:69:b2:7c:14:e2:a2:e8:a2:65:3e:69:ff:
                    2d:b6:ae:b4:fa:d7:dc:ec:3a:a3:03:71:6c:9f:a1:
                    4f:e7:e0:a0:25:7b:1e:cc:b8:81:cd:22:3e:bb:bc:
                    69:6e:a9:5d:75:06:e4:72:c9:5c:64:ae:81:3b:79:
                    16:fa:42:c5:c4:1a:b8:76:77:b3:cb:7c:a2:13:ed:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:8E:FD:0C:6C:FD:8D:E5:B9:B4:C5:6B:89:A5:56:76:BD:87:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37205191-0a3b-3fac-8c2f-4ea6e9753223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.209.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:04:17:9d:d7:b8:76:e6:0e:48:a1:68:51:72:3b:51:5b:f8:
         16:5a:83:5f:d2:ba:f7:92:40:c8:28:ec:88:8b:ff:57:06:cf:
         e7:a3:a3:b2:f9:67:74:79:13:36:9a:1a:6d:48:6d:6a:d2:bd:
         e5:aa:02:0f:25:48:f9:69:1e:be:26:68:96:9b:91:f8:fc:dc:
         ae:44:78:d5:29:6a:36:6e:c6:37:ea:12:80:01:52:6f:13:cf:
         75:52:7f:70:72:30:9a:de:1c:1e:18:13:f3:fb:82:bb:41:79:
         31:2d:bd:45:d4:c5:7c:a6:d4:bc:ea:5d:b5:32:76:25:d7:a5:
         9a:08:ec:df:52:23:72:b3:09:8c:bd:29:a3:f5:c8:d0:e3:f4:
         42:fd:88:3f:4b:d7:79:fd:8e:ca:57:8e:52:2a:4f:80:d3:dd:
         73:f8:2c:0f:86:97:c0:07:2d:c6:a7:31:e9:35:c4:80:54:2b:
         21:32:c5:14:26:99:f4:c4:7c:d6:f0:72:fd:12:eb:53:d3:1a:
         49:7a:e6:fc:18:cf:4f:1f:ed:ad:93:4d:74:fd:63:f7:80:71:
         81:57:7d:4f:5a:d4:89:a2:b8:79:d2:0a:4c:6c:99:b0:15:90:
         33:49:57:1f:90:d9:e7:a2:81:70:3a:b7:ca:0f:96:be:1c:24:
         3f:54:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:41:52 2025 by rpki-client