Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a42214f4-def0-30ae-b429-0f9269015936.roa
File:                     a42214f4-def0-30ae-b429-0f9269015936.roa (raw, json)
Hash identifier:          +HciKM0qcOlk/p24VUxoByJ9TgJ0Gzl6EJTo3SsdeQ0=
Subject key identifier:   F5:57:76:73:B3:DE:59:B0:48:D1:00:6B:9A:25:A4:F9:98:9F:3A:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C085D521B90051343F4F688
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a42214f4-def0-30ae-b429-0f9269015936.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.214.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:5d:52:1b:90:05:13:43:f4:f6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=d1c8fd8c-b918-4d46-a955-6630ab1c5588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:d6:a7:c7:61:94:d3:82:24:3c:3c:70:04:
                    e8:45:38:02:21:99:d4:af:3a:2d:25:72:a4:67:b6:
                    11:21:53:65:5c:6d:50:58:43:31:11:59:03:2f:2f:
                    40:d5:87:83:49:a4:b5:7e:8b:43:79:d4:e4:7f:7d:
                    6f:83:9c:5c:98:c5:c2:13:7b:9b:7c:db:93:84:59:
                    99:d9:24:7a:83:37:61:4c:d3:c4:43:31:b6:5d:e3:
                    9a:9b:a7:92:45:a0:e5:af:31:97:e2:59:59:57:56:
                    d6:d6:9e:b0:0f:7e:5a:50:66:e2:ab:41:9f:0e:4c:
                    6f:9a:96:e7:57:74:06:8c:17:27:bb:58:ef:2e:6d:
                    1e:74:a0:e8:37:a0:ca:75:1c:66:f8:9d:72:e6:ef:
                    6d:31:b7:b5:25:6a:0b:b0:de:49:fe:7a:95:4b:c1:
                    ea:e2:c9:28:73:ff:3d:ad:c1:95:cf:6b:e5:18:64:
                    aa:a8:6f:c8:6a:ac:8e:13:10:92:e8:7f:82:ff:b7:
                    2e:6c:1a:dc:52:b4:3f:5c:5e:8b:a6:b6:4e:7e:b2:
                    19:a6:41:85:c9:55:fd:e5:8f:8b:b2:cb:05:d9:0d:
                    51:e5:0b:78:f3:78:a0:17:d4:0b:37:8e:dd:44:71:
                    fa:c0:79:9d:c5:2d:40:de:a1:f4:53:ef:44:c7:43:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:76:73:B3:DE:59:B0:48:D1:00:6B:9A:25:A4:F9:98:9F:3A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a42214f4-def0-30ae-b429-0f9269015936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.214.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:86:c0:24:55:bb:bd:4f:9a:54:34:a9:8d:e1:03:bd:de:c3:
         b3:2b:88:dc:8b:fd:c3:85:e9:96:d0:37:38:a0:bc:98:5e:03:
         15:bf:a9:97:b8:d7:c2:60:08:4a:f2:dd:b2:50:f6:74:2c:77:
         b6:15:6a:4f:0f:22:85:e9:c7:42:37:66:37:68:25:58:56:c6:
         f7:2a:2c:f4:f8:91:ae:26:de:99:d7:7f:83:7b:61:8a:ba:ba:
         ad:e0:3b:ae:9a:16:4c:fd:54:b1:f2:6d:49:5c:9c:c9:1d:9d:
         3f:e0:2e:2a:2f:49:76:19:b5:79:70:7c:ad:a1:b4:b2:f0:d7:
         7a:22:30:be:99:83:dd:3a:2e:98:24:8c:24:da:a6:8e:41:71:
         57:fd:ed:8b:77:b0:f3:48:13:a0:66:6d:72:09:70:0b:6d:0f:
         37:3e:6c:96:de:48:2d:7b:1d:2f:f6:49:f3:72:c5:13:bd:dc:
         fe:f1:b5:8a:ec:88:08:9e:eb:68:7e:72:47:52:4c:e4:82:c2:
         fd:15:e7:6c:1b:29:77:93:90:d0:72:11:11:0f:74:7c:7a:4c:
         4f:a4:22:19:a6:47:1f:f3:3b:dd:2a:7e:c8:eb:3f:f6:66:3c:
         1c:99:b2:8a:d1:69:f5:cb:f8:c1:b0:29:81:34:e3:7e:ab:c1:
         a2:b2:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:03:50 2025 by rpki-client