Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58828093-e3f6-33e0-912a-3f3f08933ce5.roa
File:                     58828093-e3f6-33e0-912a-3f3f08933ce5.roa (raw, json)
Hash identifier:          cIvVvcYW+0Kn3ws0FsCFz5ESQFL1Z10sB8/Y2Rsme0c=
Subject key identifier:   F1:C3:8E:33:E4:F6:9C:E4:89:46:F2:ED:29:06:9C:93:26:66:8B:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43159D4D62919569A1A5200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58828093-e3f6-33e0-912a-3f3f08933ce5.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        98.246.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:59:d4:d6:29:19:56:9a:1a:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=2b1c461a-418a-4273-a406-02e113413b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:17:7e:c9:cf:25:3c:94:ab:52:71:8c:42:
                    a7:67:70:c4:35:f2:d5:a5:f7:1d:b4:83:13:9e:1e:
                    ad:56:a9:f5:cb:cc:08:ce:c3:4f:29:d4:0e:df:f0:
                    75:36:53:f1:4d:25:6d:35:58:2a:8d:f0:15:16:55:
                    1a:30:27:1b:1c:cf:96:16:b5:cc:8e:d1:21:d8:b6:
                    8a:45:b8:6c:65:e4:87:74:a5:bc:6d:3b:39:ce:94:
                    17:fa:2f:e0:b5:40:dd:46:1d:81:ea:e4:1d:9d:98:
                    51:44:f8:ea:98:7e:1e:08:32:20:19:18:8d:ab:0a:
                    07:f1:a4:76:bb:45:a6:94:5e:48:23:31:0c:fb:e1:
                    14:1c:c6:83:24:ef:40:c5:c9:6a:05:53:e4:a8:c1:
                    be:eb:00:79:8d:ec:90:6c:26:3c:f7:50:48:82:e5:
                    09:9b:1b:f8:43:80:30:0b:fc:8e:5f:c9:5d:13:d1:
                    46:5f:39:4a:99:91:8c:32:22:31:a4:44:e3:1f:8c:
                    16:6d:e8:55:61:17:08:73:de:fd:d5:7e:38:64:20:
                    20:64:0a:33:aa:1e:9c:fc:d5:77:b9:31:ec:b8:9d:
                    75:f1:8a:2f:6c:54:a0:43:72:87:80:46:87:db:2c:
                    fb:0e:62:47:18:c2:30:61:04:fe:3a:2a:12:f5:31:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C3:8E:33:E4:F6:9C:E4:89:46:F2:ED:29:06:9C:93:26:66:8B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58828093-e3f6-33e0-912a-3f3f08933ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:30:fd:07:c0:b8:01:13:1e:10:17:2e:a0:69:ba:81:77:
         fb:a2:b9:13:54:79:f0:a1:5a:ef:54:44:6e:6d:ea:67:23:d9:
         ed:d9:3e:23:69:c4:e1:8a:47:17:01:7b:6d:99:3d:12:83:5c:
         a3:c1:09:18:2b:c1:9e:42:fe:9f:9f:5d:33:2d:1c:30:9c:22:
         e9:80:2e:c6:ed:42:52:66:88:38:47:ed:d0:97:aa:72:f8:33:
         fa:ec:16:01:8e:c1:9a:b4:73:26:5f:6b:e5:92:75:ba:49:12:
         59:f4:e4:75:30:db:30:b3:cd:57:e6:85:aa:05:d9:1d:0a:c0:
         d0:a9:e8:17:c1:09:46:03:7e:7a:37:1d:01:30:7c:53:de:cb:
         12:a6:0e:ab:46:e5:32:8d:bf:12:a3:ac:fa:9e:0a:e6:07:a6:
         d5:c5:01:81:c3:98:51:ff:35:eb:1c:15:e1:59:03:8a:f4:25:
         2f:c9:c6:6e:fe:f1:66:39:98:7e:94:0e:51:f8:d1:2d:e8:e4:
         93:2d:05:45:54:5a:01:46:e5:92:ef:27:c3:34:6c:3c:a2:6b:
         67:5a:76:bb:34:e0:d7:d0:1b:0f:6a:9f:9d:46:22:f3:79:e9:
         ea:81:20:94:2c:ae:bc:b0:ff:fe:41:e8:5f:2c:50:e0:c0:55:
         7e:05:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:08:33 2025 by rpki-client