Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66f9c7b9-1e62-35af-952a-6e6bde76506a.roa
File:                     66f9c7b9-1e62-35af-952a-6e6bde76506a.roa (raw, json)
Hash identifier:          ipWVXOUQvmaCIeQBtWCrHtTCQksh5Uy6w6hO9sNCBnU=
Subject key identifier:   D1:7D:6D:4C:F1:8E:64:A1:7E:E8:5F:73:15:A5:C9:91:83:8F:F6:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4327F12FF079AEC95D8F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66f9c7b9-1e62-35af-952a-6e6bde76506a.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.34.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:7f:12:ff:07:9a:ec:95:d8:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=c43557bd-da23-48f9-a699-7ae05403f150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:9c:0c:93:47:75:1c:7b:e5:84:b1:2f:cc:
                    a8:58:cf:2c:c0:19:e7:9d:fb:92:86:d0:10:01:6c:
                    6a:ee:f1:0d:a9:3d:36:11:28:0e:6c:67:04:43:db:
                    ba:4c:e6:cb:2e:43:c8:7c:1c:1c:8c:a2:f3:81:13:
                    9d:e1:1e:c2:67:fe:53:1a:68:53:80:d9:4c:34:ca:
                    ab:62:f6:0a:cd:09:15:88:0f:02:c3:6a:4a:5b:9d:
                    b6:ef:cd:27:a1:ee:fe:9b:22:24:12:a6:28:e5:7a:
                    1b:17:a5:20:b8:71:cc:30:92:ee:78:dc:db:46:9c:
                    80:5d:ce:7f:b9:b9:e8:3b:c4:48:ef:b9:25:6a:a5:
                    ca:4d:80:af:fa:3e:09:31:5d:06:32:4b:2b:9d:25:
                    0d:ee:74:6e:6d:84:a4:84:6b:7c:ae:1d:29:81:b5:
                    aa:f6:70:8d:9c:a2:d9:72:42:d3:80:60:3f:2b:ea:
                    f8:4d:02:14:04:8c:fe:09:7b:a9:d0:7c:09:63:f3:
                    84:95:f4:d6:08:a0:7e:a7:42:bc:8e:36:9f:90:af:
                    07:b9:dc:f3:a0:b1:69:93:4b:fb:6a:3a:bb:9b:9c:
                    b4:6f:a7:2e:13:de:af:e3:c8:72:29:02:2e:c7:35:
                    ab:9a:d9:2c:d8:ae:92:f9:72:46:e1:d0:0e:03:43:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:6D:4C:F1:8E:64:A1:7E:E8:5F:73:15:A5:C9:91:83:8F:F6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66f9c7b9-1e62-35af-952a-6e6bde76506a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:48:38:48:c8:03:e6:ed:0c:79:5b:eb:3b:28:3f:ff:3e:91:
         8e:38:37:b5:65:fc:22:ab:27:04:34:99:4f:87:87:5c:04:f0:
         a1:fe:ad:9b:ca:c3:c1:c8:2f:1a:23:a1:f9:ae:a2:81:b9:67:
         be:77:ad:19:14:46:2f:3b:aa:5c:ae:c7:f4:59:4e:a2:30:65:
         cf:c1:3f:e7:eb:b1:c2:6b:c2:ab:99:cf:cc:de:65:8c:41:1d:
         f6:59:b6:8a:41:1c:6c:e7:e3:a1:45:2b:5b:71:d7:57:f3:cd:
         a9:75:9f:aa:a7:df:3f:de:52:d7:de:04:d0:d3:50:2c:73:99:
         9b:5b:70:08:b4:d1:9c:bf:6a:15:14:4d:f1:ad:41:4f:79:8b:
         03:56:30:43:97:37:a5:81:f2:36:92:45:4d:0d:0a:a0:55:08:
         c2:5b:b7:b2:83:8b:f6:41:58:56:1b:9a:62:e2:0c:c4:17:f8:
         1e:14:50:73:be:12:13:55:02:82:b2:83:12:34:fd:e9:16:bf:
         88:4b:46:73:4b:69:17:dd:c5:66:f5:ba:c8:4a:71:8f:f3:b9:
         79:be:7f:db:5d:a6:f0:37:56:74:4b:82:c4:d3:0c:67:46:51:
         1c:c2:c7:ab:d2:a4:e9:08:3a:e9:68:87:f5:e7:a2:7c:31:ce:
         b3:82:93:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:55 2025 by rpki-client