Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2d0b39-08ad-3fcb-8d34-eed59e7d6260.roa
File:                     7d2d0b39-08ad-3fcb-8d34-eed59e7d6260.roa (raw, json)
Hash identifier:          aYrGUOxnROycKhvb9vi+NFr280/VsXGjeL/8lJevw0U=
Subject key identifier:   2E:34:9E:E4:2E:41:81:80:0D:F1:53:35:A8:CD:0E:55:50:F0:74:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C062559F83CCE532EC24D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2d0b39-08ad-3fcb-8d34-eed59e7d6260.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        67.186.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:25:59:f8:3c:ce:53:2e:c2:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6a1387fc-6411-4d52-bd39-f6dbbe729661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:50:04:66:67:85:20:64:13:32:26:55:b3:
                    49:06:12:ac:cc:cc:ee:7e:23:1c:17:7f:77:8e:77:
                    f6:ba:62:26:c6:b1:28:a2:bc:de:ef:cb:8a:85:d6:
                    27:01:0c:23:ac:3a:b1:89:a7:84:6f:be:bb:2a:bd:
                    a9:e2:bd:19:0e:79:72:ff:85:51:ff:ed:a7:e9:c8:
                    34:58:6f:22:55:64:88:5c:fb:8e:32:37:83:db:0c:
                    ef:52:df:9c:86:e9:43:23:02:06:39:92:66:c4:20:
                    c7:c5:96:90:1e:99:89:81:16:88:07:4b:32:cd:50:
                    2f:c4:12:3a:39:60:e4:47:6f:fd:c6:21:17:f3:7a:
                    d3:86:e1:b7:45:f3:78:78:28:96:c5:43:7c:2c:7a:
                    c3:11:6f:28:0a:57:f7:40:40:74:5d:e3:17:76:ce:
                    60:e5:6c:51:1e:48:c2:4e:1a:35:ab:07:1c:53:89:
                    5f:40:89:15:62:f8:a1:e2:35:d7:87:80:64:29:74:
                    d7:8f:ba:80:d8:3f:8a:55:ea:18:3d:b4:a3:bd:86:
                    3c:2b:27:0c:fe:eb:3e:58:22:12:0d:53:33:0e:ab:
                    6d:46:2c:8a:46:85:af:67:21:fb:97:79:48:0c:ab:
                    57:76:c9:92:2a:ac:27:87:4f:7a:5d:b3:4c:a7:fe:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:9E:E4:2E:41:81:80:0D:F1:53:35:A8:CD:0E:55:50:F0:74:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2d0b39-08ad-3fcb-8d34-eed59e7d6260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.186.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b1:f9:be:3e:ea:e3:7e:44:d6:a6:a1:d0:4b:e9:49:5c:6b:
         dc:48:c7:51:fd:4e:72:29:ef:d9:86:77:a4:31:4d:7b:20:c4:
         3b:56:d3:a4:27:84:8c:07:6b:40:d2:52:08:3f:30:0d:1d:cd:
         3a:6e:19:7c:8d:0c:7f:bd:0f:88:fa:f8:9f:d8:eb:4f:b1:22:
         d8:43:6c:e3:ba:d7:8e:32:36:9f:fe:7c:a4:97:96:f1:87:15:
         f8:71:ef:94:be:a5:27:24:0f:70:78:46:d0:73:3d:5a:8a:54:
         97:32:da:19:06:d9:a7:24:72:e5:cf:15:a4:fa:77:be:46:ee:
         da:66:f5:ab:7a:57:02:58:52:c2:3b:c6:b2:4a:3d:93:61:bc:
         a8:bd:d9:04:95:32:d4:3d:7a:dd:d7:ee:4c:02:bb:d6:ab:60:
         58:7e:a7:b9:83:30:fd:42:7f:4d:8d:1d:fc:d1:12:d8:de:a4:
         5b:a8:e1:9d:15:cc:9c:1e:00:36:e0:de:75:f2:c6:71:9e:9f:
         c6:a1:d2:85:c7:f1:db:57:66:88:ba:37:e7:37:e0:c0:53:06:
         ff:29:c1:16:26:0e:e5:fe:31:0f:3c:ea:19:5f:46:55:5c:f6:
         ec:dc:d6:67:1c:ab:2c:1e:e8:b9:66:47:0a:e2:02:c2:48:05:
         2c:11:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:44:07 2025 by rpki-client