Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/796922f5-2ee1-3b9e-ba16-c1f82a8e2986.roa
File:                     796922f5-2ee1-3b9e-ba16-c1f82a8e2986.roa (raw, json)
Hash identifier:          0d+DcQfYDk3Uk4O4qJ6C48cZ/ib9O6T7J338glCkjEw=
Subject key identifier:   E3:FE:94:63:6A:C3:5D:F5:63:FD:A2:F1:DC:0D:A3:0B:0F:70:A2:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75984071B507188B04DA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/796922f5-2ee1-3b9e-ba16-c1f82a8e2986.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        24.98.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:98:40:71:b5:07:18:8b:04:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=18e79b28-223e-4c1e-9a5f-3082232e22e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:1c:e0:ba:a0:c9:de:76:4f:57:90:8e:4b:
                    de:9a:ad:75:9a:8b:41:2d:2f:87:50:9c:d0:1e:6f:
                    93:37:ac:87:30:09:a9:e3:74:9a:b9:9d:89:2f:19:
                    86:37:bc:fd:70:a9:ef:7b:08:94:68:f0:9e:f6:81:
                    8a:ea:21:38:4b:62:cd:e6:76:d2:b1:9a:5c:36:66:
                    60:a3:ce:4e:28:67:10:c4:50:be:a2:e9:03:ba:55:
                    c6:a3:e8:43:83:fa:37:9f:d1:5c:d0:96:15:55:29:
                    dc:62:3e:d4:74:59:15:63:d1:8d:77:34:3f:71:0d:
                    ab:34:94:41:54:89:56:db:ce:3a:27:c8:be:77:c6:
                    c6:ee:28:69:e4:8b:11:9a:0b:db:92:fb:c6:ac:a4:
                    0f:1f:bf:f6:25:6d:94:63:4c:d8:03:87:41:e3:79:
                    72:48:42:00:96:96:bc:32:cf:b2:8a:60:bc:46:4d:
                    ac:bc:54:5f:09:01:e0:d8:0a:7d:f7:56:49:38:e8:
                    a9:30:82:15:80:15:d7:4f:65:ed:1e:d7:dd:ed:60:
                    af:a4:76:8b:3c:35:96:f4:af:c5:aa:41:37:7f:21:
                    0f:3d:20:ba:84:17:ae:46:cd:e9:cf:ae:53:97:4a:
                    74:bc:b7:d2:1c:06:09:a1:a8:a4:c4:2e:06:90:01:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FE:94:63:6A:C3:5D:F5:63:FD:A2:F1:DC:0D:A3:0B:0F:70:A2:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/796922f5-2ee1-3b9e-ba16-c1f82a8e2986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:ec:ec:e2:37:25:05:05:b1:a6:7f:e1:9e:f8:06:07:fa:
         c8:ca:21:13:08:fe:ba:92:51:62:13:6b:9c:0a:6b:0d:21:37:
         07:2d:fa:78:17:30:c9:55:3c:f5:7b:f4:4d:3a:3a:b7:00:8f:
         72:36:20:9f:50:20:13:e9:6d:f4:9c:dc:fc:16:52:55:82:55:
         9c:89:50:81:29:0d:d7:7d:dc:5c:81:f5:5f:2b:2a:e9:ab:de:
         e8:15:9b:64:71:1f:29:48:ad:b5:6f:11:ec:0c:3e:2d:ed:fa:
         34:29:99:a3:35:c5:d5:96:63:9f:f3:2c:75:e5:7a:1d:85:ce:
         b3:e1:ce:24:8a:eb:3b:c7:f7:07:97:18:1f:54:57:7e:fc:f3:
         61:11:e3:d4:c8:75:4e:f6:e1:b2:71:d6:8f:f8:77:0b:f1:ce:
         c6:ff:b8:c3:11:c3:9e:e0:da:5d:c4:7a:5d:41:3b:70:48:f5:
         1d:da:9c:2e:1d:a8:9e:37:ee:60:fb:bb:c8:df:7b:c5:57:1e:
         96:75:0e:72:69:17:b6:90:9b:d7:bf:76:1b:f8:59:02:68:7b:
         e0:63:1a:46:25:bd:01:fc:f7:f8:3a:2e:b5:85:86:3b:14:6c:
         ea:29:6f:39:b4:a4:84:d8:a4:92:50:d5:1f:42:3e:a6:39:9c:
         3b:cf:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:57:34 2025 by rpki-client