Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44eda5e8-757a-3a92-be76-ab81a6a2b4c6.roa
File:                     44eda5e8-757a-3a92-be76-ab81a6a2b4c6.roa (raw, json)
Hash identifier:          uUt6Yzyy/eSsW8ezLuZl6PqSiZyjcp9xLIN2hqsxoaw=
Subject key identifier:   68:E5:A9:B7:E4:FC:DA:6F:98:08:0C:FC:07:E0:80:99:65:1B:70:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C89B92F6BA80689923D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44eda5e8-757a-3a92-be76-ab81a6a2b4c6.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.98.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:89:b9:2f:6b:a8:06:89:92:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=de987375-7480-49f7-8739-1c53e281859f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9b:33:42:18:a5:fa:13:f4:57:b8:2a:6c:8a:
                    28:81:1b:84:a7:59:cd:b7:55:64:a1:05:6b:4f:a5:
                    a9:ef:21:35:ac:fd:e8:2c:36:87:55:9a:aa:ab:89:
                    a6:2f:1e:6f:58:ef:a1:d4:28:b2:c6:5d:b4:a8:5b:
                    86:ce:8d:50:71:5a:9d:f5:21:25:db:bc:c7:7d:a4:
                    64:b3:2c:44:0f:2a:67:df:10:e9:63:8d:44:e7:63:
                    4c:84:fe:c7:e4:4e:fb:ed:91:83:4c:6e:41:85:8c:
                    d4:3e:f0:eb:c7:d3:8d:71:04:8d:8e:c8:95:0f:ef:
                    02:ef:aa:b0:af:7f:75:ed:74:e2:64:f7:d9:16:aa:
                    a8:4f:34:1e:ff:dc:8a:8a:38:62:ec:15:d1:b3:c2:
                    20:90:5c:ce:ab:93:0e:bf:c0:23:1b:11:17:ec:bd:
                    47:f8:8d:a5:a2:10:4a:d2:ae:78:4e:e1:83:4f:96:
                    a9:1a:e1:6b:cf:7a:d2:82:4c:57:ed:56:38:88:b1:
                    7a:d3:91:27:87:e1:a0:89:26:68:05:14:bd:bc:93:
                    0d:63:a5:05:17:3a:4f:0d:de:4e:2a:87:85:f5:0c:
                    45:ac:05:93:3d:72:4d:47:6c:aa:af:7f:f4:a0:9e:
                    7c:e3:ae:56:ba:8f:d6:f1:b3:ce:60:ff:75:0f:c6:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:A9:B7:E4:FC:DA:6F:98:08:0C:FC:07:E0:80:99:65:1B:70:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44eda5e8-757a-3a92-be76-ab81a6a2b4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:21:67:23:55:ce:e8:0b:c3:a2:e0:95:9c:b2:b6:57:fe:cf:
         15:b0:32:7d:c3:4c:25:82:b5:f4:76:16:08:b4:8a:a8:1a:a8:
         3d:d0:9e:4f:a8:10:2d:b6:c4:58:a8:dc:34:c5:d7:96:ef:06:
         46:57:1b:4b:ee:fd:a4:45:c8:73:54:91:7e:a0:4f:24:c3:a0:
         bf:d4:85:be:24:6a:88:6e:83:fd:ce:be:e5:35:55:34:99:d6:
         62:78:54:ab:69:cc:74:87:46:1a:34:bb:ec:a5:de:42:6d:e5:
         0f:07:29:db:79:b2:89:e2:b8:29:9e:5d:0d:98:e8:4a:f4:95:
         56:eb:af:47:d2:29:8e:d9:8d:f4:09:9d:b4:3e:3c:5e:b5:9c:
         f4:77:24:a4:24:45:8c:f7:0d:a2:11:30:8e:40:38:ee:5f:c2:
         6f:a0:23:c9:6d:6e:40:0a:3b:2f:db:84:2b:67:6c:f6:44:3c:
         b8:25:a1:eb:d4:99:6c:d5:93:d6:91:26:4d:7f:5a:63:a5:d4:
         f5:69:87:10:b0:8a:3b:e6:cc:06:86:c3:bd:27:70:97:19:01:
         05:f5:c2:4e:14:b8:32:fa:66:78:a3:27:bd:ef:05:ba:f9:8a:
         e6:53:81:90:0e:3d:d9:63:70:5b:2d:41:61:5f:9c:ef:84:ea:
         ae:72:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:04 2025 by rpki-client