Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/749c6997-8693-367a-81e6-bea15545c292.roa
File:                     749c6997-8693-367a-81e6-bea15545c292.roa (raw, json)
Hash identifier:          oCl2PiGLphnM+qMwJIUxqkVC7PYPqdS/VIrTaGYu6PU=
Subject key identifier:   48:98:14:82:6A:66:F8:17:AC:8A:7C:D5:FD:25:E2:F3:6F:01:80:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D165498084DD32C2BF146280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/749c6997-8693-367a-81e6-bea15545c292.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        98.50.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:49:80:84:dd:32:c2:bf:14:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=6c230fa9-e44a-4c76-95df-f26ca801875e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:34:0a:8b:99:51:ce:ce:c0:8f:57:39:b6:
                    17:f7:d3:4a:47:f2:cb:bf:31:6b:f3:a6:70:5b:8a:
                    5a:5c:75:a3:83:a5:d6:b8:41:0a:51:ee:2a:8a:ba:
                    6b:f5:89:22:45:f8:c6:db:11:35:32:0a:a2:bd:a6:
                    f5:f0:37:25:3f:ba:98:8b:b7:07:b1:b8:83:2c:4d:
                    2b:ec:bc:6c:72:30:81:f2:7a:13:f7:a8:3f:7a:77:
                    b8:c5:bd:14:e7:60:f7:5a:2b:b9:f3:17:3b:3d:b7:
                    82:35:37:9d:23:92:09:f8:7f:85:41:ac:c1:87:10:
                    8d:e3:e6:01:de:e4:95:88:6e:cd:fa:c4:5a:f6:17:
                    ca:4d:c6:28:0d:7d:92:95:76:e0:cd:13:88:72:39:
                    48:2a:1f:d9:54:38:fb:d9:b3:39:50:55:1c:c8:65:
                    ee:bd:ad:52:d4:1f:c1:31:e3:9e:3d:d7:67:a6:02:
                    da:51:6d:55:da:ba:78:30:f3:b7:96:e4:44:0a:14:
                    12:e9:f5:e4:41:d6:e5:eb:ae:1b:d4:10:aa:2a:1b:
                    f4:2d:c3:5e:07:11:29:aa:f3:8f:85:72:af:cd:bb:
                    a2:fc:dd:dc:c2:c8:34:37:56:32:d1:67:71:c4:69:
                    0b:33:60:5b:90:8f:52:85:0d:62:d1:ca:e1:af:a1:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:14:82:6A:66:F8:17:AC:8A:7C:D5:FD:25:E2:F3:6F:01:80:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/749c6997-8693-367a-81e6-bea15545c292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.50.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:9d:c5:62:28:44:ec:ba:10:aa:98:e4:11:74:17:8e:05:a0:
         34:a0:ea:24:b2:c5:eb:a9:cd:c9:5d:33:fd:a1:bc:93:79:0b:
         49:df:e1:91:2c:7f:25:b5:bc:e0:7b:12:20:6a:0b:5c:53:ec:
         c9:74:9c:84:dd:63:ad:4d:29:86:5a:19:f4:1b:67:5e:88:4a:
         fa:33:ae:e0:6d:f0:df:54:7a:44:35:64:8c:5b:93:a9:04:a1:
         e5:57:fb:28:91:83:97:ed:0a:dc:55:a7:69:73:ce:dd:75:92:
         53:df:92:4d:c0:17:69:e7:ad:67:08:a9:13:76:93:40:37:76:
         24:4e:c8:93:a2:76:4c:d3:44:ef:9d:8f:74:2a:3a:81:f2:c3:
         a5:17:7b:ef:54:ea:ff:95:46:68:bb:46:7f:e0:fc:d1:b1:1b:
         8b:ad:a9:43:85:74:8e:52:0e:3f:dc:41:e6:91:f7:8b:98:eb:
         70:5f:43:8a:80:6c:bc:83:e4:ca:b2:8d:c9:15:0c:b5:e8:27:
         b8:71:0d:6b:cb:cd:11:d1:53:71:63:0d:f4:5d:da:f8:0e:62:
         50:a0:d4:98:f6:ca:10:15:a6:76:35:0a:f2:ee:e3:69:c5:87:
         19:a4:5a:b8:8d:8b:a4:8e:ec:71:5b:ef:af:5f:01:b8:de:d7:
         5b:78:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:40:21 2025 by rpki-client