Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ed3d60a-9754-3358-be52-0ec48d801240.roa
File:                     8ed3d60a-9754-3358-be52-0ec48d801240.roa (raw, json)
Hash identifier:          VoQad9Iv4oveXuo8EQt7bYwgrI3kvgO7/Rs84Vp9Nso=
Subject key identifier:   E9:FE:2E:13:60:81:19:8C:F5:A3:EB:92:97:A7:8D:F5:F0:C5:42:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF756ECA1FFFD8D380D2BB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ed3d60a-9754-3358-be52-0ec48d801240.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.251.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:6e:ca:1f:ff:d8:d3:80:d2:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=744ab3b1-b114-4f13-8dcc-d4038ef467f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:46:16:77:6c:12:fc:a3:c4:6b:a3:fe:da:2c:
                    8d:ad:42:0a:78:c5:d2:a5:66:87:ae:9b:82:95:53:
                    0f:7b:19:6b:f3:dd:26:62:54:0a:e7:89:a2:3f:f1:
                    5c:d7:d7:dc:19:7e:19:88:64:88:13:f9:4c:d8:11:
                    f3:bf:99:51:de:18:f5:51:7a:e5:84:ca:1c:a8:e4:
                    87:0d:e9:31:c6:61:c0:c2:7e:d1:86:56:a0:0a:cb:
                    9e:fc:03:9b:91:fe:37:53:77:df:25:71:ad:83:1d:
                    db:90:00:9f:11:3a:42:cb:b2:5c:e4:c4:6f:bb:54:
                    38:fd:22:a4:70:2d:5f:d4:03:2e:53:d7:e8:32:8c:
                    2d:9e:af:7d:12:ac:f1:df:96:43:60:44:a0:b0:41:
                    e7:5d:d1:5c:aa:24:c5:16:76:3f:56:72:09:73:af:
                    ef:fd:56:65:74:66:c1:7f:2b:19:74:2f:9a:67:17:
                    3e:68:16:a4:72:dd:69:f4:c3:76:65:49:72:f8:f6:
                    09:d2:a4:0e:84:c6:34:79:83:2e:a1:f6:d6:f1:ee:
                    c0:28:21:c2:12:7e:eb:98:aa:69:49:65:bc:81:71:
                    dc:12:9c:b4:19:fb:18:82:e1:88:eb:02:49:73:bd:
                    08:78:43:41:2a:fa:43:fd:c3:d0:bb:96:ae:0e:59:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:2E:13:60:81:19:8C:F5:A3:EB:92:97:A7:8D:F5:F0:C5:42:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ed3d60a-9754-3358-be52-0ec48d801240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5f:50:0e:15:c9:b2:9b:ff:1b:ec:83:94:3e:fb:03:4a:59:
         63:de:30:2d:69:cb:af:38:8f:f0:b3:71:8a:d1:9f:8f:5d:9c:
         8b:fc:8a:d7:5c:c0:2b:a7:86:d7:2b:0f:e1:3b:95:c9:37:ab:
         1b:74:ff:a4:7c:80:ed:02:49:4c:e5:85:a0:33:76:0c:c7:23:
         19:f7:b4:a7:d0:b1:81:ad:bb:e6:e0:5a:54:c4:11:c4:8a:5e:
         1f:de:d8:ca:f4:d0:c1:d8:24:e0:99:df:81:6f:4c:a3:a8:38:
         22:ba:06:2a:5d:f5:d8:95:74:34:60:68:19:66:18:57:e5:fa:
         54:7f:be:f6:60:4d:95:31:d6:b5:c2:ed:a8:96:43:c0:82:26:
         5b:a2:eb:f6:99:9d:17:eb:06:2b:16:8b:d5:e7:61:8b:59:38:
         b6:b7:5f:87:25:5f:dd:77:53:83:02:b8:60:b2:23:ea:08:87:
         dd:84:0e:01:ca:3b:b8:6e:fa:b8:99:21:b8:c4:07:93:c3:fd:
         14:bb:6f:b1:e8:ff:dc:12:a3:eb:3c:a7:dc:3a:76:23:ab:d1:
         25:c0:8f:66:d0:95:38:a0:56:d9:c9:b3:21:04:58:34:a6:2b:
         2b:b3:40:99:ae:8b:ec:ed:95:e6:02:42:ed:7f:3d:dd:63:f2:
         f4:e0:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:27:22 2025 by rpki-client