Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ec2dd5c-3653-3684-a1f0-917de4f2d80a.roa
File:                     3ec2dd5c-3653-3684-a1f0-917de4f2d80a.roa (raw, json)
Hash identifier:          huHyyJgOdXORttsw3Jigs1o5xoAsjlomxAe+RQm5uPk=
Subject key identifier:   2B:E9:07:46:ED:FC:CD:68:EE:5F:C2:42:47:EC:56:7E:A0:74:19:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C076FF7A1AD49AB2A22E840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ec2dd5c-3653-3684-a1f0-917de4f2d80a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        98.221.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:6f:f7:a1:ad:49:ab:2a:22:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7927ce63-0c39-4704-8131-d1ff257f918a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:97:0a:10:27:ad:72:f8:a7:fc:7b:1b:61:d2:
                    d3:c9:c7:a5:19:17:04:12:da:56:7a:63:e4:c9:f4:
                    14:05:53:b2:27:c3:e3:f6:41:cb:63:40:e1:59:f6:
                    f4:b2:50:bf:57:69:49:24:10:f9:57:50:7a:37:07:
                    2f:42:ab:89:19:55:cb:f0:2d:62:c3:03:82:39:d4:
                    b5:41:b3:22:e5:58:5f:df:72:47:c3:46:70:c9:2d:
                    59:a0:f3:50:35:bd:a2:53:5a:81:ae:05:d0:9b:4a:
                    cb:ce:49:d8:7d:04:e0:c1:04:53:4d:4e:da:59:0f:
                    6e:76:26:ac:f6:4b:06:b7:28:7d:46:b9:a4:94:9f:
                    aa:b5:84:ad:40:6a:c0:1f:bf:c0:a8:ba:dc:b7:1a:
                    86:18:b7:7d:62:4d:de:20:30:0c:37:20:b9:a7:ef:
                    dd:6b:a2:5e:f4:51:88:13:52:3e:5a:43:47:0f:a1:
                    17:54:a9:58:91:b8:17:e9:da:49:72:dd:f0:47:9b:
                    de:63:f6:53:1a:e6:33:88:aa:52:30:a9:25:43:81:
                    81:32:a3:7d:17:06:e4:dd:a2:ab:48:92:6e:21:0c:
                    7f:59:53:c0:7d:61:c3:0d:dd:a3:12:06:b1:e9:2c:
                    ab:75:17:2e:32:01:13:20:ac:58:88:a5:c4:f8:2a:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:07:46:ED:FC:CD:68:EE:5F:C2:42:47:EC:56:7E:A0:74:19:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ec2dd5c-3653-3684-a1f0-917de4f2d80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.221.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:15:d8:5e:3b:12:8f:0c:81:cf:37:11:dd:c0:be:2a:cd:ba:
         ab:cb:6f:00:77:21:b4:38:b8:b2:3e:6b:1a:28:3f:89:cc:55:
         78:f7:14:03:19:f8:6b:71:a4:e5:34:23:c2:10:b6:4a:66:ea:
         40:06:70:3c:cf:81:7d:e9:ee:e4:c9:ca:bc:e0:eb:9b:06:f1:
         c7:9d:00:05:e3:f1:1a:21:07:97:8a:a8:db:84:65:3f:98:9f:
         65:60:1e:46:34:85:da:a4:bd:08:d0:59:8e:ba:1e:4d:3f:1b:
         fa:55:da:9e:b1:ef:b3:2e:f5:19:02:ea:2c:77:a8:72:39:2d:
         c7:8e:e4:8a:39:34:ac:e3:72:c1:6c:09:c8:3d:46:ef:2a:8e:
         86:34:c3:f5:c3:0a:91:e1:70:93:9d:50:67:33:22:9e:1b:9c:
         8c:7a:ed:76:4f:8b:fb:d8:82:df:a2:d2:46:a3:3b:8e:6c:e7:
         5b:35:eb:1e:8e:5b:0f:ac:cb:2f:90:a7:9e:2e:93:72:4f:e6:
         83:de:66:27:ef:02:1b:35:1c:ce:bc:11:ac:64:e3:5d:6b:76:
         2c:13:b9:23:d0:f4:23:20:d7:1e:b4:47:c9:30:7b:b7:ad:6c:
         f1:7f:d6:e7:5e:6b:16:30:1b:34:a1:60:f5:5d:5d:c1:82:e2:
         06:ee:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:05 2025 by rpki-client