Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4851ccac-8de0-3a91-b73d-1951ff710e97.roa
File:                     4851ccac-8de0-3a91-b73d-1951ff710e97.roa (raw, json)
Hash identifier:          HReqJPNwa/VAZzXPotgc73MxAh27ewVku/TL7Tg6iTU=
Subject key identifier:   8B:35:05:3F:0A:B3:22:FA:60:70:CE:9A:15:6B:DA:EB:B9:D8:39:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C085F6D858A80B7AB3B7300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4851ccac-8de0-3a91-b73d-1951ff710e97.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.220.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:5f:6d:85:8a:80:b7:ab:3b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0c978b0f-bb8f-4ba1-a4a4-944dfc5f92cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:df:ce:ae:15:d7:20:b2:03:69:9a:4c:3a:
                    21:06:54:b8:eb:7a:c5:21:d7:c4:a5:10:a1:c9:dc:
                    11:fc:3c:74:48:22:43:8a:67:99:ae:c0:d5:8e:94:
                    24:80:e1:3b:6d:8f:c3:86:66:e8:ac:35:28:86:26:
                    8e:1d:20:1c:0c:98:43:de:60:a1:44:60:14:c9:3a:
                    42:d7:fa:aa:e6:77:98:1b:75:61:a1:09:db:36:f0:
                    49:f5:04:f1:d7:34:cc:2e:69:e3:e9:39:7b:90:09:
                    ea:ba:49:44:19:bb:36:69:0e:a8:b7:5a:0c:e6:33:
                    dc:b6:30:ab:6b:43:3b:6b:ac:78:43:2d:c5:8a:5f:
                    85:5f:96:be:ad:1f:de:57:e5:17:65:f3:10:56:f0:
                    95:67:18:90:7a:5c:66:88:8c:23:b9:7e:64:f4:2a:
                    a5:e5:5b:20:50:38:00:48:82:62:20:ae:79:33:87:
                    2e:b0:f9:76:4d:0f:2d:c7:60:ae:b1:13:fe:c5:0f:
                    cb:eb:9d:e7:45:f7:4f:82:f5:00:b8:52:98:71:a0:
                    39:6a:a8:c7:11:e5:f3:5b:84:c8:f7:19:46:e8:e0:
                    cc:3b:11:3e:d2:7e:6f:81:45:21:90:6d:f5:fd:0a:
                    b3:57:b9:47:ce:53:37:8b:72:dd:ff:e5:cf:b3:cc:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:35:05:3F:0A:B3:22:FA:60:70:CE:9A:15:6B:DA:EB:B9:D8:39:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4851ccac-8de0-3a91-b73d-1951ff710e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.220.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:06:7c:19:ac:96:c9:2d:9b:ea:68:29:6c:97:9f:07:09:
         dc:95:cf:c3:ae:a9:4f:08:2a:37:ee:8d:49:eb:36:50:67:d3:
         20:d8:57:05:86:68:7b:2b:c9:0b:2b:36:90:d6:c4:66:c3:66:
         75:e1:30:1f:ce:cb:a2:13:c9:84:e9:aa:d8:f5:32:b8:48:4b:
         fa:0f:d1:9e:64:0b:57:04:bc:03:9b:42:87:86:f3:fa:1d:37:
         49:e7:c9:e5:5b:c9:8b:f6:77:cb:a8:7c:9c:72:a5:bf:50:41:
         bd:dd:f8:ac:8c:5c:b9:b6:8e:f6:58:c5:86:16:18:17:52:78:
         6b:3c:bc:c7:29:d7:85:1f:eb:74:0b:5d:26:60:29:74:69:9c:
         c1:13:a7:b0:3a:a7:66:63:5d:a4:27:a5:30:16:fc:b5:ef:77:
         4d:8b:62:27:ee:d0:d5:ff:34:23:f0:7c:de:be:18:05:61:0c:
         a6:56:f7:73:54:98:13:f4:18:f7:0b:75:68:71:a5:c4:bb:7a:
         b3:b5:3a:90:18:e0:a2:e7:40:75:62:c3:8a:08:c7:03:70:57:
         c8:54:f0:34:aa:7f:ef:b9:1f:6e:cc:a2:cd:3d:42:62:e8:6f:
         b8:77:d9:a5:33:9b:8c:89:e7:00:05:c0:d0:da:15:43:2d:a3:
         bd:7a:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:54:05 2025 by rpki-client