Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43d421c4-ae40-35c1-8a18-56cf682871fb.roa
File:                     43d421c4-ae40-35c1-8a18-56cf682871fb.roa (raw, json)
Hash identifier:          wewWKv7hhzc+oW949owOWx7nEud06QRAuiSs2iB0HVs=
Subject key identifier:   B6:62:A8:F8:C3:BF:6D:76:D8:27:FD:42:3E:C8:BB:81:F5:34:F5:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431DC3236FD7E16DEDC1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43d421c4-ae40-35c1-8a18-56cf682871fb.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        98.229.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:dc:32:36:fd:7e:16:de:dc:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4b70d099-d4d5-48e0-b10f-feebed8d12b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:66:54:d3:89:33:eb:63:9e:56:ff:a5:3d:
                    7a:f2:39:2a:a4:00:35:93:f7:6e:cc:e1:bf:bf:1e:
                    ec:af:ae:05:3e:5f:26:0c:93:5a:1f:50:8c:4d:03:
                    78:f1:f9:71:5b:fc:41:6f:43:5a:73:d2:d0:35:13:
                    45:8b:2b:93:d6:a6:9e:8f:07:54:ea:ed:67:29:86:
                    c2:0c:be:1b:92:40:bf:ba:79:fb:cd:03:73:47:8d:
                    1f:44:5e:3a:89:67:49:41:bb:c2:55:ff:2e:1a:80:
                    a4:b7:7d:7d:c3:94:9c:e5:6b:d2:5c:82:05:dc:1b:
                    1b:49:ef:f2:92:b9:f6:df:3a:61:e7:02:12:24:fa:
                    3a:3f:6d:eb:ac:aa:bc:3b:a5:e8:0b:1d:98:26:53:
                    0d:75:64:c3:96:45:9f:d5:d9:51:ba:5b:c1:58:26:
                    a9:69:49:18:e8:3f:0f:27:46:6c:26:a4:7b:9b:b2:
                    af:ed:51:f7:5b:db:22:f6:5e:0d:b0:87:8f:51:97:
                    0b:9f:e3:ee:8d:c9:d9:35:01:0d:0c:6a:b2:a1:56:
                    1c:fe:af:ef:8e:c8:79:44:6d:a4:f7:d7:25:6f:3e:
                    f8:2d:ca:fe:07:45:81:c8:d1:06:80:77:49:4e:95:
                    81:5d:d6:9d:24:b9:a8:c0:e2:c4:f3:f9:60:91:55:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:A8:F8:C3:BF:6D:76:D8:27:FD:42:3E:C8:BB:81:F5:34:F5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43d421c4-ae40-35c1-8a18-56cf682871fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:ed:b0:f6:2e:1f:fe:a0:01:64:3c:1b:c2:d3:c5:e5:7a:18:
         db:da:c7:79:d5:49:79:17:00:af:5d:a7:a0:50:99:63:16:29:
         6c:9b:ee:23:38:04:2f:09:3e:20:2e:dd:eb:12:18:f7:9e:ea:
         13:de:12:0d:ac:7b:b9:b4:9b:ca:9f:e1:c0:70:70:37:cc:a4:
         01:66:fa:84:c0:03:4c:4d:29:cb:ce:6e:00:98:91:1c:b5:d2:
         67:4a:b5:6c:0a:13:47:d0:d4:e3:e6:d3:bf:53:04:b1:7a:ae:
         64:e3:92:cb:b9:01:e4:7a:a9:3e:58:a1:55:3e:d0:07:e2:33:
         a9:2c:c8:6d:93:b3:02:5b:dc:7c:b3:65:dd:76:d9:7c:a4:85:
         2d:34:f1:d8:a6:ad:92:db:84:b0:39:3b:46:92:93:47:2b:d3:
         ca:c9:75:e3:ec:de:8b:23:c2:a9:bf:15:7f:e3:18:c5:c6:4a:
         f2:3d:95:b8:62:bb:b9:4b:f4:42:68:d9:92:98:17:4a:92:76:
         78:b0:bb:ba:16:03:1f:1b:35:07:9c:79:d2:56:b6:25:f9:37:
         7f:4c:48:21:dc:2b:d6:c2:c9:7a:58:51:cf:ac:9e:26:db:26:
         51:da:4d:11:f6:5c:5a:e3:9b:bf:fe:f5:07:ed:3f:98:b7:8c:
         e1:87:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:22:29 2025 by rpki-client