Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecd2641-b7da-3b29-8a33-66934a3765d9.roa
File:                     5ecd2641-b7da-3b29-8a33-66934a3765d9.roa (raw, json)
Hash identifier:          iLeQsCg0/WWGIsrZ2CD3SocQHzHReLCMRP4d5d6ihEA=
Subject key identifier:   91:AF:13:28:2E:32:E1:9C:44:84:FC:CD:B2:A6:F8:9C:C3:8C:DC:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0904F47A79CF0EBBB32A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecd2641-b7da-3b29-8a33-66934a3765d9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.47.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:04:f4:7a:79:cf:0e:bb:b3:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5aac957c-d8ab-496d-8c26-d17a6afe3372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:f3:71:80:94:98:19:11:23:f5:32:86:6a:
                    8c:b9:dd:ec:de:9c:2b:c9:78:f2:2d:9f:7a:31:7c:
                    0f:6a:2a:f6:ff:1b:98:7a:ca:cb:4e:e2:18:fa:5a:
                    33:39:26:39:5e:85:ce:23:b4:30:c8:db:9e:81:e0:
                    ff:4e:2f:35:66:2a:7d:17:52:ca:7b:02:e1:25:fc:
                    22:1f:3d:45:69:5b:10:3a:4c:dc:79:49:32:2e:ce:
                    a6:31:73:e5:cc:06:1e:9f:02:7b:4f:97:20:46:19:
                    ed:92:15:62:ce:7f:26:88:17:34:26:ca:05:75:7b:
                    02:64:94:1a:84:f0:8f:6f:3a:e3:a5:09:c8:f1:87:
                    20:85:8e:fe:44:67:16:a3:e9:67:82:d2:12:94:3b:
                    3e:e9:08:b8:e4:92:71:5a:95:a4:2a:65:c0:5f:5f:
                    d7:27:b4:b5:a7:c6:ea:c5:7f:5d:6d:83:4d:3e:8e:
                    fc:28:d6:7e:e5:86:42:71:ae:a8:4e:f6:06:3b:62:
                    a4:22:a3:bb:c7:39:3f:4d:4e:48:cf:57:e1:87:f6:
                    34:cc:a8:82:4a:b6:58:47:77:b5:e3:ae:3c:0e:fa:
                    ef:a8:70:49:ad:58:19:4f:46:89:65:61:89:8c:5c:
                    1c:97:be:19:bd:9f:07:1c:b0:ed:70:54:1e:b9:ca:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:13:28:2E:32:E1:9C:44:84:FC:CD:B2:A6:F8:9C:C3:8C:DC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecd2641-b7da-3b29-8a33-66934a3765d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:15:4e:80:e6:e8:4d:0d:f4:0e:b6:46:98:8b:89:d0:91:
         13:61:0d:dd:66:8b:2b:5d:3f:ea:30:d4:fc:54:8f:31:15:59:
         65:1d:8a:f8:7e:4e:64:ea:3f:06:ac:b3:ce:f0:cd:b1:73:7d:
         67:0d:e6:00:ae:e5:b0:7d:40:bb:40:43:c3:5b:ae:d0:bf:76:
         9a:15:65:d9:d0:d4:5c:94:79:da:e6:bc:e0:1c:cf:b3:c7:5e:
         80:28:fd:eb:88:b7:f1:42:88:23:8a:c6:45:be:2b:57:21:31:
         34:72:98:d1:ff:e4:56:b2:80:57:a9:1d:2f:88:25:dd:0f:b2:
         77:cc:3d:c8:5e:85:7c:26:c6:a2:2f:04:07:29:ba:d7:aa:1b:
         a5:c8:48:d7:32:92:14:de:9a:ff:b5:f9:59:7a:48:a5:a8:64:
         1f:a6:ff:b3:a4:d6:ff:16:78:1d:2e:bd:35:33:3e:d6:86:39:
         75:a1:e8:3d:24:c7:bd:f3:34:5b:c8:ff:8b:b8:68:5b:5d:10:
         97:c9:69:f1:0c:58:ca:3c:90:b2:41:60:f2:24:28:3d:1b:cd:
         79:48:56:4d:4c:68:bf:e1:84:a3:07:17:66:10:53:a4:d8:d1:
         1c:35:f2:7d:33:ec:67:64:8c:e5:7b:dd:c4:3f:01:06:14:86:
         37:fe:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:22:23 2025 by rpki-client