Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
File:                     a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa (raw, json)
Hash identifier:          0geKWHdsUleezZ2Sx7/Fd0QO0WixwfDYrOxWChAyscw=
Subject key identifier:   07:D3:EE:C1:48:F5:86:4A:51:F2:BE:80:B5:45:17:22:BE:76:F9:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4327F810D7CB0695FD38180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.34.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:7f:81:0d:7c:b0:69:5f:d3:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=299d0b76-d9bf-4561-8e6f-c461f835f33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:ec:2d:43:da:7a:3b:89:f9:15:eb:0c:2c:
                    c7:4f:9a:55:0e:72:c2:a0:44:c6:35:4e:aa:4f:14:
                    96:99:8f:8e:bb:77:62:91:bd:e5:79:1e:04:78:55:
                    df:d7:1f:ca:94:13:b2:82:6b:9c:d7:cd:72:ce:f2:
                    97:7e:75:cb:7d:3e:6e:52:24:17:49:12:29:8b:10:
                    1f:e4:93:bc:ca:7a:8a:e5:3d:c8:07:e2:83:6a:46:
                    9f:72:0b:f9:b6:2b:d0:99:e7:a3:1d:fc:42:88:ec:
                    e1:3d:15:2e:be:d8:2e:c0:88:17:08:cd:f8:29:11:
                    ec:09:5d:99:6c:5e:11:2d:55:53:d5:d7:a3:bf:4b:
                    42:6d:7d:61:94:19:49:9e:98:27:50:3a:07:4c:fa:
                    f7:ac:d4:aa:50:42:d8:8e:95:80:df:1d:8d:6c:ab:
                    16:99:c4:2f:5f:42:23:7a:81:4b:3d:d7:35:07:1d:
                    fe:31:f1:28:44:c6:d2:c2:c7:34:f2:7b:98:a8:be:
                    48:55:29:ff:11:1a:57:e0:66:3b:ae:9b:10:53:f7:
                    a2:31:be:5a:5f:ce:1a:2d:f3:97:7f:5e:b4:e8:86:
                    2c:4e:dd:54:5c:06:c7:1b:99:ed:88:01:d1:ce:17:
                    d9:19:c1:e3:b5:b1:4c:65:d7:3f:bc:62:90:6e:66:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:EE:C1:48:F5:86:4A:51:F2:BE:80:B5:45:17:22:BE:76:F9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:50:c2:69:43:b2:b5:63:78:9f:80:6c:67:af:77:6c:9b:
         0d:96:5a:5b:95:f1:37:a7:7b:22:85:4a:aa:f9:79:82:e1:50:
         ce:a3:10:11:7f:65:22:4e:0b:7f:72:05:73:ab:d6:85:9a:2e:
         e7:60:b5:dd:c6:10:46:11:f3:e0:ae:dd:cc:88:cb:57:7d:76:
         df:fa:64:f5:2a:7e:12:76:be:14:01:16:f5:3f:83:4f:ba:4e:
         8f:c3:e4:6c:d3:ae:43:d3:1e:fc:38:13:f2:92:ee:ca:d7:a1:
         7a:a7:85:62:4e:e3:05:da:a8:ac:ec:4f:0f:1a:52:72:26:88:
         c3:54:78:86:0e:61:50:7b:27:cb:a5:69:a3:ae:42:f7:61:56:
         da:99:9d:c9:f5:00:12:2a:8e:e5:7e:90:f7:bd:26:c2:00:9a:
         5d:e9:0f:36:bb:44:98:2e:53:55:6c:91:37:68:2c:ef:9b:77:
         0f:e1:41:f3:b2:45:55:5d:19:d3:d3:96:41:34:4b:d9:23:ba:
         ef:1b:b9:2d:f0:f7:ab:b9:f5:26:bc:a8:b5:ac:b9:f5:83:d4:
         0c:f5:fa:2f:46:68:56:98:c7:12:4c:57:5e:9f:56:c9:83:f6:
         56:9d:5e:4a:83:5d:66:d5:a3:e7:77:be:f3:45:a5:56:25:c8:
         bd:e5:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:15:46 2025 by rpki-client