Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37994fe4-a617-379d-8178-61e3d9a74118.roa
File:                     37994fe4-a617-379d-8178-61e3d9a74118.roa (raw, json)
Hash identifier:          LP/ov5PcJDTp/wb5TXlqcZ0G4h3h6zuMNLceUaWuks4=
Subject key identifier:   6F:59:AB:AC:1E:12:75:AB:AE:87:B4:21:B9:EE:1B:11:DC:03:61:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB021C3A607B2A733696940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37994fe4-a617-379d-8178-61e3d9a74118.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.207.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:21:c3:a6:07:b2:a7:33:69:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9085932e-7d5c-4724-916b-fa97c34d0e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:6f:c3:0c:a5:ff:23:d2:da:f8:3b:63:85:
                    db:b8:56:cd:b6:35:aa:0c:14:8b:dd:55:45:cc:6c:
                    7c:cc:ea:68:2a:3d:b0:86:c8:37:e6:a9:9c:5e:16:
                    9f:ac:66:c5:f8:65:80:fd:07:7d:3b:55:d6:c4:c6:
                    af:a1:4d:44:8e:2a:c5:b7:23:eb:b9:73:67:16:3b:
                    c6:59:db:f8:be:3f:f5:f0:9d:bb:c9:f4:80:c5:f0:
                    88:0d:0d:81:88:68:88:b9:c4:ed:1f:2e:a8:50:89:
                    a0:0c:07:be:36:4d:83:42:a9:d9:5b:0f:33:2e:29:
                    3a:2a:bf:6a:17:b5:4f:a6:3c:85:e8:fe:30:da:6d:
                    14:e1:43:a8:10:ae:27:32:c6:6f:38:75:42:3e:48:
                    24:8c:1c:3a:d7:00:90:21:1b:51:b2:63:8c:1b:f1:
                    e5:ea:93:b5:bc:3b:96:ba:1e:4f:bb:8f:19:8b:66:
                    05:fc:50:9e:8e:8e:8a:a9:48:f8:9d:e0:c7:5e:09:
                    82:a3:6c:ea:f9:47:57:41:16:26:d9:35:7e:94:d8:
                    6a:e4:90:7f:ff:f2:9c:e5:28:4a:5a:c1:ba:81:0e:
                    27:81:e8:0e:c7:13:d9:d8:49:93:86:5d:c0:43:b4:
                    4a:ad:5a:a7:7f:be:5f:ac:df:66:a3:c5:6f:43:bf:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:59:AB:AC:1E:12:75:AB:AE:87:B4:21:B9:EE:1B:11:DC:03:61:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37994fe4-a617-379d-8178-61e3d9a74118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.207.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:70:9f:f8:83:5a:f9:66:49:4e:29:47:77:00:c1:c9:95:7a:
         ad:e9:b4:37:d6:51:ad:13:53:23:6b:7b:59:d6:da:58:63:16:
         d7:85:71:ee:c0:eb:bc:0b:17:71:22:81:cc:c2:4a:d4:0b:a3:
         9f:1a:6e:17:d6:86:ce:77:71:53:66:21:8a:b6:21:59:39:9e:
         de:d1:a1:1a:89:d3:7d:5c:0c:ab:c5:b6:a8:79:24:70:96:7b:
         db:91:06:41:84:66:af:f1:68:d3:08:49:e9:61:52:cb:db:0f:
         a3:5a:7a:1f:e7:db:92:fc:83:5c:f8:ac:5e:e6:82:08:10:3c:
         5d:ae:40:86:ad:9f:e7:93:ea:29:8e:bf:29:de:8b:7c:45:49:
         4a:c4:90:8b:bf:a8:4a:16:98:a5:b6:e3:6d:0a:89:86:1c:5a:
         72:76:23:1d:a7:e9:81:f4:29:a8:f3:8c:6c:3d:e2:85:b1:03:
         22:48:8e:3f:0c:9b:c7:ca:39:c4:04:d2:7a:eb:59:f5:f3:0c:
         3d:68:f9:c8:a1:ca:0a:27:ee:6d:23:5e:1f:52:0d:ba:ac:94:
         99:81:6d:dd:1c:67:bd:28:c0:a5:a0:91:48:e0:4e:a0:66:d1:
         ca:2e:00:1d:5f:b6:58:e3:03:71:42:ad:bf:69:b4:29:77:a9:
         40:b1:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:56:25 2025 by rpki-client