Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98fe38b2-909e-3183-86b0-7d316a6b88d3.roa
File:                     98fe38b2-909e-3183-86b0-7d316a6b88d3.roa (raw, json)
Hash identifier:          YgI9i6PnoXsIBPzqroKIwNXduwitwOCeaz+aMb8PpZQ=
Subject key identifier:   25:D0:0D:62:ED:F2:A6:65:D1:65:EF:CE:FA:82:E4:4C:34:65:DF:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75CD74BEAB5E3B8928A280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98fe38b2-909e-3183-86b0-7d316a6b88d3.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        76.20.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:cd:74:be:ab:5e:3b:89:28:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=70a11c6d-507b-4a44-9f0d-8ef5f8611951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:06:1c:86:9a:31:74:b3:a7:f0:f6:fd:06:
                    da:bc:b3:ca:f1:79:66:cd:a0:6d:1f:73:ca:0c:a1:
                    db:57:ce:8c:bf:a0:7f:92:14:37:02:e4:66:c9:af:
                    71:2b:ba:3d:29:3e:72:6a:f3:65:ed:76:93:52:60:
                    cd:f8:a7:21:b8:b1:d9:1f:57:44:cf:7f:f5:be:50:
                    4d:11:4c:f5:9a:af:20:55:05:f4:4e:c9:e0:2f:4d:
                    aa:75:03:0b:3a:7f:03:39:9d:05:76:92:07:5a:c1:
                    b9:43:3c:ee:43:af:ac:3a:1a:32:90:23:11:d1:29:
                    ca:61:f6:33:95:f3:df:bb:0b:51:3c:11:fb:e1:a8:
                    1a:0f:56:91:55:52:c0:b4:e4:8b:41:e7:4a:69:9a:
                    35:58:ac:3c:73:5b:68:d5:b9:13:78:75:4c:32:4e:
                    02:87:c3:45:40:2a:6f:86:ca:1b:c6:54:ac:af:49:
                    72:69:89:75:cb:0c:b1:db:36:ba:40:87:b8:95:67:
                    82:5d:45:8d:e4:31:ca:1a:43:48:ee:49:9c:e3:4e:
                    f2:29:3d:d3:d4:94:7b:cb:9e:9e:9c:dc:f4:1b:de:
                    66:c2:c9:db:3d:09:45:f4:81:f0:7d:4d:8e:73:67:
                    28:07:71:1f:5c:99:8f:2a:d5:57:de:68:c5:92:4c:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:0D:62:ED:F2:A6:65:D1:65:EF:CE:FA:82:E4:4C:34:65:DF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98fe38b2-909e-3183-86b0-7d316a6b88d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.20.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:66:da:9a:f2:e4:0a:be:85:27:56:1d:6b:d0:cd:33:75:dc:
         b2:96:a7:79:8c:dd:e3:ed:72:40:0c:26:be:5b:4e:8b:7c:c2:
         df:6c:6c:bc:2f:08:28:c8:0d:e0:4e:3f:2c:41:6c:a6:59:5d:
         e8:65:8f:61:c1:c4:52:54:ff:72:af:c2:0f:d5:1b:16:af:1d:
         e0:6e:f2:4a:f2:7b:b5:13:a0:00:e2:30:50:1b:19:d3:99:11:
         27:c9:20:f7:4d:71:5f:b9:dc:9d:9e:65:8d:be:d4:19:55:3c:
         ab:64:9e:5f:6c:67:7e:db:35:d5:2e:92:b3:0d:af:e5:57:07:
         e2:42:74:62:60:76:d8:4d:7c:26:e9:f7:db:6f:b5:8b:48:f8:
         c2:04:c1:66:a1:15:a0:4a:a0:09:1b:a3:0e:9b:12:a4:97:e2:
         27:3c:86:60:88:d0:bb:3c:b0:64:dc:5f:45:a3:77:aa:c4:92:
         4e:c5:ba:fb:f5:b7:66:02:a5:64:17:70:81:2d:47:df:f6:a4:
         47:d0:73:9d:d3:27:30:b4:78:1d:90:80:af:fc:15:8a:fd:35:
         09:c1:4f:4f:9e:7a:e3:c0:f0:26:ed:fa:f4:82:88:d0:67:42:
         a8:76:32:99:90:b3:50:97:ac:f4:94:52:89:9d:94:e3:83:1b:
         19:7c:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:01:03 2025 by rpki-client