Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c4b633b-2ade-3085-808d-1f4639045d4a.roa
File:                     6c4b633b-2ade-3085-808d-1f4639045d4a.roa (raw, json)
Hash identifier:          IKOjfi2XrRZ6da8FeUibxQMn35JrcdJr2rHwSQcJtw4=
Subject key identifier:   AA:F5:BF:2D:A9:9E:FC:24:C6:23:48:4C:B6:E7:78:6F:DB:01:F5:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08DC3FAC028B10BC316F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c4b633b-2ade-3085-808d-1f4639045d4a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.210.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:dc:3f:ac:02:8b:10:bc:31:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a2239483-b38f-4679-a84f-7cfcd6791d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:4d:7a:39:50:33:36:d9:51:8d:7e:22:31:
                    b6:a4:76:de:8f:d9:fc:2e:5f:ce:a2:9a:ce:10:82:
                    62:22:95:ac:d9:62:6b:31:b8:b1:48:2d:a5:3c:88:
                    9a:e3:1d:0d:aa:69:63:aa:0c:2c:cb:8a:12:74:fc:
                    e0:f6:58:b0:81:56:a5:9d:c4:44:52:b9:17:ed:fc:
                    6d:8b:bf:c9:46:1e:be:f3:fc:0f:77:6d:e8:14:71:
                    87:f8:2d:a6:31:3e:98:cd:4e:ab:51:bc:e1:46:3a:
                    77:ca:ae:5c:2e:a0:0a:bd:6d:bc:81:c7:89:0b:04:
                    33:96:3d:35:12:b3:63:6e:db:26:73:59:c5:0b:cc:
                    43:fe:bc:18:06:a2:13:67:05:a8:f0:2d:ce:e9:5a:
                    9c:ae:88:03:0a:b0:b1:80:fa:1c:f2:d5:b4:07:b1:
                    4e:04:1a:39:3f:0a:8d:cd:be:89:08:4a:cf:4c:cc:
                    4a:14:bf:45:f6:00:2c:9a:af:27:09:9e:9b:e9:fc:
                    de:c0:cf:8f:2c:5f:1d:8f:95:ac:98:2e:84:66:bb:
                    2b:43:a9:55:9b:6d:aa:2b:a6:7f:91:3c:1b:5d:a0:
                    7d:1e:18:cc:6a:2c:15:4f:68:ad:8d:8c:15:80:f4:
                    a2:07:3c:a0:84:00:78:46:43:71:74:50:fa:24:44:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F5:BF:2D:A9:9E:FC:24:C6:23:48:4C:B6:E7:78:6F:DB:01:F5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c4b633b-2ade-3085-808d-1f4639045d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.210.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:7f:ff:57:0a:5e:5f:e1:c6:87:2f:8f:d0:35:95:c3:0e:e6:
         5f:f4:4e:c9:3b:77:ff:c6:18:36:4a:3b:18:a0:5c:7d:f7:c0:
         dd:d6:51:05:53:ef:3f:ce:b2:df:ad:7e:21:5a:32:bc:19:1a:
         d3:df:77:43:49:cf:61:1e:68:3d:8f:2e:29:cb:06:78:97:53:
         a2:63:a5:ee:3f:bd:c3:5a:19:2a:81:10:2f:be:81:df:12:f7:
         0d:d3:85:dd:f3:f1:8b:e2:73:55:a2:c6:fe:09:f6:9c:bf:6c:
         ef:f8:5f:fd:f9:5d:0e:5c:a6:25:ae:40:59:5c:ce:fb:db:11:
         d7:5f:02:43:2b:59:ca:43:ea:e4:e4:c3:20:5c:01:6b:5c:a6:
         a4:88:ec:22:8f:31:5c:80:0d:46:02:cb:78:ab:d3:bd:62:96:
         19:de:1f:97:d4:a3:e4:55:ee:63:3c:d1:2c:5a:62:d0:fd:44:
         66:a4:b5:8f:50:30:82:fa:28:ee:d9:00:f5:05:a1:f0:16:56:
         5e:ca:df:2d:b9:46:c5:e5:03:1d:3b:95:32:e5:c6:64:b8:58:
         6c:ce:f0:d2:23:37:04:bb:db:c2:28:fb:c0:b1:a5:6c:60:90:
         06:49:b2:be:ee:a0:ec:e0:ab:ea:29:06:20:59:66:2f:a1:1c:
         51:9c:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:15:17 2025 by rpki-client