Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/903e6739-114d-3baf-aff5-b660aeaafd83.roa
File:                     903e6739-114d-3baf-aff5-b660aeaafd83.roa (raw, json)
Hash identifier:          ZTfnOcYFDSLPXBysz+TE90PpFRol/SttIx9eVdxNoXs=
Subject key identifier:   7A:96:5D:BB:15:97:82:A2:BB:B5:B8:BB:65:1C:0A:88:7E:F5:24:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4327D0D439E7988BCC276C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/903e6739-114d-3baf-aff5-b660aeaafd83.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.201.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:7d:0d:43:9e:79:88:bc:c2:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=5cf5f8f2-74b5-45fa-9314-5665e35459b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:b9:0b:ed:6f:d8:8e:6d:70:6c:23:59:4b:
                    9a:84:0c:6b:d7:6b:35:53:44:71:fc:45:92:88:0a:
                    37:16:11:fb:3c:68:7e:e9:49:18:65:f6:2c:a6:07:
                    f8:cf:2a:6b:75:0c:c4:6f:0e:c8:66:64:17:77:32:
                    cd:be:9e:0a:5b:b5:be:d0:a6:7f:d8:a9:94:41:ac:
                    ce:44:da:c4:ef:d0:a1:01:79:73:64:fb:3d:1a:01:
                    2a:ba:fa:6e:09:59:5c:c6:74:6b:e2:4a:8a:ab:f4:
                    d8:4c:a9:21:94:f0:7f:b4:b9:cd:1c:6d:0e:fc:14:
                    f5:11:05:66:24:9e:63:be:d8:68:0e:e7:b0:c9:c3:
                    db:1b:9f:9a:85:89:62:ac:93:74:27:33:cd:5f:16:
                    70:f4:37:00:29:9f:a4:55:5e:2f:d6:cb:29:4a:7d:
                    8c:69:15:d9:36:97:d9:77:b3:73:27:7e:42:53:7a:
                    14:0a:c6:de:8d:87:cf:67:bb:ab:86:44:ec:5c:0e:
                    58:3d:bc:80:72:81:91:ce:31:ab:a1:b4:24:6b:25:
                    44:c2:77:ac:1a:14:26:04:05:e1:18:f5:64:17:e7:
                    ed:bf:56:5c:69:29:ec:4e:48:28:af:b5:25:ab:fe:
                    42:76:30:55:31:1e:9e:7b:e2:b1:dd:1c:5e:2b:dc:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:96:5D:BB:15:97:82:A2:BB:B5:B8:BB:65:1C:0A:88:7E:F5:24:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/903e6739-114d-3baf-aff5-b660aeaafd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.201.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:ed:78:58:36:88:62:00:f9:d6:eb:9e:13:78:f3:25:51:
         b2:9a:c9:45:8d:90:f7:10:41:c1:34:08:7a:90:a1:ab:9f:ee:
         7f:01:4d:63:94:70:90:5d:1a:d4:5c:db:72:7a:0e:e0:91:c9:
         f5:5b:91:97:f0:e4:12:62:db:a9:50:cb:b7:63:9a:33:9f:fe:
         77:87:ec:37:6e:6f:cb:9f:59:c9:44:5c:1f:68:95:e7:ac:5a:
         f2:58:9b:23:f3:c4:9a:ee:91:5f:11:2f:db:08:93:96:d8:ff:
         6b:a5:07:65:71:e5:ad:27:4e:ce:3a:5b:bf:23:34:46:d1:12:
         5b:cd:20:e1:01:ae:cf:2e:b4:cd:0e:4f:18:c9:3f:6e:52:d9:
         d9:b9:d5:45:fd:d2:bf:4d:3d:6b:48:55:5d:2b:0c:31:f3:b4:
         25:30:93:9b:00:14:61:a1:df:f6:43:e8:c3:fd:ae:40:86:32:
         7b:a0:43:c1:0d:12:14:c5:79:45:24:54:81:a0:36:c4:b4:7f:
         fb:6e:84:00:cd:5f:42:0f:15:a5:8d:c9:62:9d:6a:b1:bd:ed:
         4c:20:23:f6:39:8d:35:7d:7d:50:76:7d:8c:71:2f:63:82:f0:
         66:11:3e:16:36:ff:76:47:e8:0d:47:79:7a:c1:2d:59:4d:8b:
         a6:b4:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:10:56 2025 by rpki-client