Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a56bb51-6417-30e9-9edf-7b1a9d6f1cfd.roa
File:                     9a56bb51-6417-30e9-9edf-7b1a9d6f1cfd.roa (raw, json)
Hash identifier:          hnTEu1RFoUG7k/3BOjP7EAeuVflWjyYEm1soDWJCvXI=
Subject key identifier:   A8:83:52:1A:1D:E0:61:99:CA:8A:66:2B:9B:CC:0D:32:69:EC:78:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C085CFE1DA199B782676A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a56bb51-6417-30e9-9edf-7b1a9d6f1cfd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.214.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:5c:fe:1d:a1:99:b7:82:67:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4577f583-cc56-4ab5-9400-3feac872a526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:e5:29:24:22:b2:6b:37:85:fa:6f:8a:21:
                    a5:88:62:65:96:94:8c:ca:18:52:ef:ef:42:73:b8:
                    83:8f:59:7a:9c:86:b2:6b:8a:0b:b5:a0:9c:58:45:
                    2d:6c:ad:bc:7e:8a:63:2f:d0:57:15:8d:b5:be:10:
                    26:2c:44:4e:9c:39:0c:62:62:9d:5f:fb:5a:cf:d8:
                    19:46:de:7a:e2:a9:eb:8e:9f:16:72:9e:81:22:a0:
                    14:4d:e4:a9:81:b8:f4:d4:2d:9b:a3:66:2f:3b:b0:
                    f6:10:e7:79:bf:28:ed:41:dd:6b:7e:6d:bf:d6:a4:
                    46:14:b6:4d:c0:47:4d:dd:3a:3a:9e:59:dd:1d:95:
                    85:2a:62:2e:79:72:23:2a:46:54:c4:ea:10:4e:b8:
                    df:6b:b5:48:32:13:59:3c:6d:6c:8f:1b:14:78:d0:
                    5f:c8:8a:0a:4f:ff:7f:e4:f9:cd:cf:2f:9a:5f:27:
                    3a:78:6f:f3:85:db:24:ce:5e:24:7f:f5:0a:5e:16:
                    d3:00:19:24:f5:3e:f6:e9:ba:43:6a:28:49:94:48:
                    36:a0:a4:70:ff:e3:4b:7a:7d:ae:0b:75:11:c0:0e:
                    60:a7:8f:b6:ee:30:6b:59:ce:b8:41:1e:c2:20:23:
                    13:5d:a1:2f:4b:ce:26:4c:a6:e7:dc:1b:3d:85:67:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:83:52:1A:1D:E0:61:99:CA:8A:66:2B:9B:CC:0D:32:69:EC:78:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a56bb51-6417-30e9-9edf-7b1a9d6f1cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.214.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:cd:a7:e7:24:32:bb:ca:46:3d:76:91:b0:de:6d:4e:da:
         c0:b5:55:11:d2:d8:30:ee:ef:f9:59:30:02:c9:46:c2:0d:7c:
         9c:87:5b:a9:85:37:91:13:23:ee:c5:0b:05:2c:5a:13:ec:2a:
         49:07:b0:f0:47:67:fe:da:3c:9a:5a:9a:2e:f2:cd:45:fc:4c:
         01:77:90:70:40:eb:b5:68:dd:a7:fc:85:fb:61:c6:f7:2e:b7:
         a1:30:81:1e:0f:af:94:de:0f:8f:35:0f:37:bd:74:3f:53:fd:
         b9:f4:de:d3:05:e1:4c:bb:9d:a4:4b:13:9a:6c:3e:41:0a:7e:
         e4:de:aa:df:0a:2b:40:12:b9:87:90:93:03:79:d8:e9:61:07:
         76:4d:18:03:9e:4c:07:25:77:0e:bf:8e:5d:d9:68:c1:be:78:
         1e:f0:b9:c1:55:e2:80:21:4c:58:1a:0c:02:fd:39:c7:d6:78:
         f3:0e:83:9f:f2:6a:ee:f6:16:1d:76:93:ed:fc:3f:33:a9:d6:
         f8:5f:07:25:6f:93:46:93:97:4c:66:f6:d2:56:9e:60:aa:bf:
         f2:9d:22:41:08:f9:35:59:5e:f8:d0:df:75:19:6c:f8:16:50:
         a8:21:18:80:65:97:cd:20:fb:95:c8:ca:11:e9:e6:a5:dc:a7:
         ad:95:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:54:26 2025 by rpki-client