Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a8dd4f5-c211-3301-a9c5-bad64dfb1401.roa
File:                     7a8dd4f5-c211-3301-a9c5-bad64dfb1401.roa (raw, json)
Hash identifier:          nNMcEPSTsRdlWpvXKspXrdiGaMQsDX5AENJJkGCiZk0=
Subject key identifier:   69:D4:1C:F8:7D:B3:A4:03:B7:83:04:2B:4D:D6:02:37:71:38:65:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F96FE17F4521DFFE2B9EE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a8dd4f5-c211-3301-a9c5-bad64dfb1401.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.44.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:6f:e1:7f:45:21:df:fe:2b:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=44cc0e68-860b-4a45-b985-37b8a65c687f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:e8:4e:e3:a8:a4:67:a3:31:17:be:01:10:
                    e1:15:47:69:5e:91:a6:0b:51:fa:6e:18:ca:32:04:
                    fc:89:2b:fb:ff:55:89:84:6b:bc:ba:9a:86:aa:56:
                    45:72:ca:fd:fe:16:53:8c:5c:54:69:5d:15:f2:0e:
                    10:fd:f6:6e:cb:2d:7d:80:49:2d:38:d0:02:d1:53:
                    38:70:8b:a5:cc:89:77:ef:bf:62:1f:0c:8a:3c:ce:
                    52:f5:96:15:7d:fe:9e:ed:b5:56:e9:38:98:1a:fa:
                    b9:8b:5e:40:0f:f8:87:fd:f7:31:4d:84:34:98:c4:
                    51:0d:1a:3b:fa:6e:4b:5d:60:9b:2f:f9:bf:6d:cc:
                    52:fb:06:b9:c7:06:6a:d4:ad:c1:91:99:1c:f9:21:
                    fd:70:82:8b:c3:50:42:ea:f9:e9:e5:9b:05:bd:f4:
                    0b:02:10:cb:1e:54:bf:d1:7e:af:e0:30:7b:02:92:
                    18:3f:16:c7:57:4a:6c:99:2a:99:5b:c0:42:45:8d:
                    d2:8e:68:25:4d:a9:c0:c5:72:b9:d0:59:d2:42:93:
                    4f:9f:38:e2:3c:97:28:05:06:65:be:47:14:f8:21:
                    0d:d2:22:4e:98:72:40:8c:eb:8c:e0:47:16:50:86:
                    3c:a2:14:cb:78:db:77:51:bf:1a:af:ce:51:6c:e3:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D4:1C:F8:7D:B3:A4:03:B7:83:04:2B:4D:D6:02:37:71:38:65:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a8dd4f5-c211-3301-a9c5-bad64dfb1401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:30:80:4f:c6:fe:5c:86:8d:fc:aa:04:cd:70:96:28:64:41:
         47:6f:7f:da:c3:db:35:ac:7d:5c:0b:25:6b:0b:de:11:0a:b0:
         18:ba:f2:12:d4:3b:26:43:65:ca:9e:28:8e:4e:09:27:18:37:
         50:20:18:33:4b:67:5e:25:90:51:4d:53:9d:fd:4c:24:59:cf:
         b5:a9:f5:57:8f:a8:a4:39:b2:ab:1b:fc:a1:2d:92:eb:26:85:
         31:e2:52:49:3d:d4:33:dd:e0:6f:2c:de:57:ba:8c:d7:78:58:
         4e:e0:f4:a8:56:a2:fd:25:49:f0:72:63:f0:c2:04:57:52:71:
         08:90:bd:16:3e:1f:a7:8c:03:c3:d0:d4:7b:56:37:36:5b:c0:
         33:fa:52:89:a8:60:48:3c:99:1e:b1:90:54:ab:b5:57:8d:fe:
         11:74:fc:04:aa:fb:f9:d0:f7:24:a6:73:94:83:f3:e7:29:e8:
         1a:0f:ac:2b:65:09:42:13:af:35:ca:87:d5:db:9d:c4:d6:ef:
         69:52:e1:b4:16:1c:2a:bb:35:1c:0b:f8:a4:9b:5e:c4:a4:e2:
         d3:45:df:c7:15:83:7b:9b:0b:a5:c5:33:62:e7:2e:be:16:50:
         0f:a7:42:8f:b6:d6:73:14:ff:c6:84:6f:89:48:4a:9b:72:16:
         a8:e5:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:28 2025 by rpki-client