Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa
File:                     a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa (raw, json)
Hash identifier:          wl0pLuDcP+h6Ml9GRB4paV9dTF019dYJsmVSPpXK36k=
Subject key identifier:   77:35:15:39:8D:BF:D1:7D:E1:6B:CF:05:2F:DB:DE:FE:44:64:30:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431DB558E0C584DF59F03C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        98.229.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:db:55:8e:0c:58:4d:f5:9f:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=a597dce7-0395-4a37-b8e1-cafa7cbc522d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:0a:8e:16:0f:b4:9b:5d:8d:d1:22:a7:c8:
                    d9:f4:25:9e:69:62:71:fc:e2:5c:8e:ae:a9:06:a5:
                    ef:90:4f:a0:6f:45:b6:ab:7b:c9:d0:71:00:9e:77:
                    02:76:e5:69:69:51:69:56:b9:11:64:54:15:0e:e3:
                    59:92:92:21:94:fe:12:d1:34:fc:8e:c5:43:3b:94:
                    b9:9e:fc:b4:9c:19:87:e3:38:64:90:ae:97:46:7d:
                    0d:05:b9:70:00:29:2c:bb:43:9e:01:88:2d:e0:5f:
                    1d:0b:70:cf:e7:60:3f:8a:81:ec:2b:b2:5c:fe:33:
                    d1:c8:69:34:2c:7d:0d:77:44:8d:48:92:62:5c:86:
                    b2:dc:a8:32:69:22:ac:6f:e2:2f:01:57:bc:89:f3:
                    b5:12:6c:6c:d7:03:b1:30:4f:f1:0e:4f:72:b3:67:
                    45:d7:2e:60:12:5e:e3:68:36:6b:2f:dd:e2:a1:f9:
                    a0:bf:28:d8:46:79:c0:0e:58:f6:e6:b3:a1:a7:56:
                    ea:f4:46:cf:e5:7b:b2:7a:82:08:8c:69:d3:03:c3:
                    6d:0b:fa:51:5b:7f:71:15:2a:5a:df:a9:ed:fc:b2:
                    53:44:68:fd:56:61:de:bc:d6:3b:e3:f7:d2:d1:34:
                    28:46:16:ba:88:5a:5c:49:94:a9:43:75:a5:a9:eb:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:15:39:8D:BF:D1:7D:E1:6B:CF:05:2F:DB:DE:FE:44:64:30:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a139b7df-13b5-3d09-9f0d-7d00f374b35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:f5:c8:11:43:bd:e4:4e:3b:74:af:b6:21:dd:4a:21:ae:be:
         57:87:ab:29:ee:24:b1:6d:96:09:ef:92:c7:db:df:2f:34:e7:
         64:d4:8a:74:fb:0d:93:16:7c:c3:b6:8b:42:1a:9d:1f:8a:00:
         00:17:df:d2:67:13:79:06:ad:6b:fc:3b:9c:10:b4:79:2e:e5:
         dc:fe:7f:7f:e7:9a:39:b7:04:66:a0:7a:d6:8f:ff:8a:7e:84:
         fc:66:ba:1f:f1:81:89:73:3f:45:84:74:ee:df:d0:a4:1a:d3:
         78:3f:77:7f:64:4e:a9:7c:81:84:e0:6a:66:cd:10:38:db:63:
         ca:06:86:aa:69:9e:f1:64:2f:bc:b2:89:b8:ae:e5:81:7a:e6:
         53:57:c9:7e:fe:08:b8:f1:6d:e1:db:0e:dd:ff:da:34:a9:8b:
         6c:4f:e1:0a:99:cc:a7:b0:16:bc:6f:fc:43:03:b4:56:ea:29:
         ce:01:10:81:fe:c4:db:22:2f:7c:2e:74:6a:3a:dc:5b:57:e4:
         9e:77:6f:57:6f:47:22:7c:a3:e0:f4:2a:3d:2f:e2:fb:0c:47:
         51:22:46:47:5f:1d:3a:61:a4:5e:ad:96:31:9c:f0:59:14:7d:
         44:59:9f:be:c7:b7:a3:32:0a:15:34:63:40:a0:35:f1:49:e4:
         81:5e:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:48:57 2025 by rpki-client