Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb4df60-7da8-332e-8dc2-448d9f4b31f9.roa
File:                     aeb4df60-7da8-332e-8dc2-448d9f4b31f9.roa (raw, json)
Hash identifier:          Ffi8Nzf/miEN7X76J25F0NycB3HZEiwJVySKqKXpiCM=
Subject key identifier:   C0:AE:4F:1A:5E:ED:E2:46:CE:50:FB:84:F4:38:0F:D9:44:80:FE:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16585A063B6FFD0A709BBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb4df60-7da8-332e-8dc2-448d9f4b31f9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        98.54.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:85:a0:63:b6:ff:d0:a7:09:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=f4cf6b9c-50bf-40a4-b588-ab406cc7b43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:4b:28:83:51:29:b0:f5:75:ed:f5:e3:17:
                    6a:d2:93:60:3e:ad:22:6f:d4:40:75:ca:8d:79:37:
                    82:77:0a:45:4d:f2:e6:ce:a9:5d:3d:54:70:fb:85:
                    53:e5:61:0f:fc:cb:ea:e7:95:01:56:b3:86:b4:ed:
                    0d:df:a7:9f:ec:ea:3a:a7:9a:62:42:cb:67:6f:5e:
                    a1:8d:56:79:f0:a9:23:6c:81:97:5a:73:81:68:48:
                    63:69:7c:cf:2a:18:b9:7b:45:42:03:92:c9:c0:f2:
                    73:ff:88:bd:54:4c:0b:63:f4:19:d7:64:24:66:a1:
                    2d:2c:15:1e:99:e4:38:f0:7a:76:5a:0b:4f:3b:d9:
                    a2:58:b7:91:30:54:2c:93:b3:d7:35:7f:f2:92:bf:
                    cf:bd:5b:35:6b:6c:02:86:95:e1:8d:31:36:84:91:
                    9c:df:50:fb:2f:a0:2c:de:d1:e1:2f:98:2f:5b:ff:
                    db:ba:a1:d6:37:ae:82:77:d5:15:5e:d9:e8:3f:51:
                    7e:f9:60:9e:af:c6:9a:7e:bc:1f:22:61:be:25:a2:
                    fe:66:7a:fd:40:7e:fa:8c:60:c2:e4:19:bc:3f:9b:
                    70:ef:ea:ea:81:13:7c:15:77:c4:55:f8:f2:c1:6a:
                    5b:02:49:16:16:89:f0:8c:a9:6b:66:c8:14:f1:0e:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AE:4F:1A:5E:ED:E2:46:CE:50:FB:84:F4:38:0F:D9:44:80:FE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb4df60-7da8-332e-8dc2-448d9f4b31f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.54.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:f9:60:70:4e:84:02:b3:95:68:2a:17:51:97:f8:17:fd:
         f5:19:90:97:b3:0f:be:a9:b6:68:2b:55:d3:e5:3f:0b:0d:a4:
         63:22:9c:0d:73:e7:c6:11:0b:18:b6:8f:83:83:ea:c4:85:5a:
         63:87:4c:cb:39:c5:ab:a9:8e:ce:70:3b:85:97:47:83:6d:8d:
         34:00:d1:09:f3:42:17:cc:58:0a:3b:65:0a:76:cc:20:bd:c8:
         1c:a0:d1:e4:ff:73:2e:4d:1b:ab:e8:3d:0f:ed:20:6f:37:20:
         3e:96:77:4a:5e:41:67:10:68:f4:38:6d:6b:da:4e:2b:a8:21:
         cd:0a:eb:8f:a2:db:1e:d2:ba:0e:97:9d:9b:2b:fc:5e:07:ff:
         3d:b6:20:57:e2:13:99:e3:63:9e:92:26:d5:3e:15:b5:99:fe:
         76:7a:b7:1a:b1:c2:3d:12:81:50:12:6a:83:2b:ae:90:13:62:
         fe:76:d4:e1:b8:f4:db:a8:7b:2b:31:09:cc:41:b8:a4:15:76:
         32:34:e3:ef:96:12:01:09:a1:73:84:84:9e:c6:8c:df:de:15:
         2a:f3:6c:38:47:fc:b1:9c:aa:06:51:3d:09:4a:ea:c3:d0:e0:
         7c:f3:e6:41:6b:49:9f:f6:6e:a6:7d:5e:94:25:c0:63:03:e4:
         a8:8a:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:56:03 2025 by rpki-client