Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d52122e-b9cf-3265-a165-830798aada06.roa
File:                     4d52122e-b9cf-3265-a165-830798aada06.roa (raw, json)
Hash identifier:          uYCi4r/+iu/I+3XOaF19qfTMVEyNcpXZ+u/SFT08gVg=
Subject key identifier:   6A:3B:CC:6D:0C:F4:82:82:C5:60:D5:6B:79:E5:22:A3:01:BB:10:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFD08BEBAA7999C95F8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d52122e-b9cf-3265-a165-830798aada06.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.34.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:d0:8b:eb:aa:79:99:c9:5f:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=684cc1a1-8fed-4917-8cdb-39881fb3316c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:99:06:b5:bb:e2:ea:64:22:fc:ab:db:da:
                    ba:f5:a3:38:ca:1a:3f:ba:d8:09:43:dc:9a:7e:96:
                    0d:ae:ea:4e:19:d6:36:d4:7b:a4:7c:d0:a4:78:06:
                    a3:35:45:e5:4a:2d:46:65:e7:11:66:65:94:2f:a1:
                    9f:3f:7b:d3:1c:85:1c:13:00:97:1c:16:73:1b:86:
                    33:f4:11:78:75:bd:8e:ec:00:ab:14:db:88:d1:c9:
                    11:b6:cd:24:47:bf:e9:2d:4f:21:b4:1c:b8:dc:e6:
                    88:59:20:24:c2:0a:bd:fa:73:b4:61:cd:85:9d:c3:
                    86:76:04:34:3b:b0:de:fc:0f:aa:68:81:eb:89:06:
                    e0:ab:72:e0:2e:7d:8f:3d:d0:84:8d:11:f1:52:b3:
                    2e:c0:54:21:8c:b7:0d:60:f8:08:5a:48:3c:2b:29:
                    d8:06:36:5b:f7:ef:b7:26:78:ee:0d:7a:c0:f5:39:
                    fd:be:53:d8:0e:b6:8a:3a:4e:31:8b:a6:df:f8:e4:
                    34:61:c1:b6:84:39:cb:7b:4a:8d:a1:cb:88:78:51:
                    19:7a:fe:a9:d1:7d:fd:6c:e3:13:e1:8c:bb:1a:74:
                    93:1b:d3:28:a7:e2:df:b3:d5:a2:ec:fc:16:79:5f:
                    e4:3d:6a:db:e3:88:4f:50:de:b8:4c:f9:e3:44:f9:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:CC:6D:0C:F4:82:82:C5:60:D5:6B:79:E5:22:A3:01:BB:10:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d52122e-b9cf-3265-a165-830798aada06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:30:13:a5:20:5e:ab:80:b0:51:7e:c0:c1:5e:df:16:b4:51:
         92:0e:e8:70:35:4f:ad:63:c8:92:5b:83:08:e3:76:ac:9f:cd:
         9f:34:46:76:52:02:7e:31:32:1c:45:84:41:e6:93:9e:3f:a5:
         5a:e9:a9:9a:8e:81:3d:31:e5:73:df:91:f5:89:f7:f8:de:9e:
         10:d5:1b:2e:49:2b:77:81:2f:58:48:c8:f4:15:3f:00:53:d2:
         03:a7:fb:4c:46:fb:48:1b:52:4b:f4:0c:b8:e0:aa:40:45:99:
         64:97:a0:db:46:c5:09:7b:13:20:ee:c6:e2:63:5a:27:4b:86:
         25:db:0f:7a:43:54:3d:12:e8:13:62:9b:50:76:8f:1d:b9:e1:
         b9:4c:5b:2e:0c:69:05:03:5c:a4:65:f0:4b:d4:9b:b8:a6:ce:
         8f:e7:b8:36:6f:bd:0b:db:b2:12:8d:7c:55:91:55:55:8c:45:
         2e:a4:62:44:fe:cb:0d:ec:b4:92:9c:83:f5:ca:43:b4:ae:ee:
         8a:8a:3d:20:9e:6b:9b:98:ed:a2:19:10:8f:df:22:fe:40:ca:
         4c:d9:74:4d:f6:c9:fd:bf:8f:7a:03:b1:86:fd:3b:b9:ee:6f:
         23:03:63:87:2a:6d:32:a4:b1:78:bf:36:c1:07:22:b0:10:83:
         1e:bb:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:32 2025 by rpki-client