Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed83997-c494-3d53-981c-7f46ac02bf1f.roa
File:                     aed83997-c494-3d53-981c-7f46ac02bf1f.roa (raw, json)
Hash identifier:          WqPXyTmispo14ySgZ0n9KBTJGtGE/7VM1aeU9pi8bRs=
Subject key identifier:   65:FC:70:E5:50:0F:50:60:60:64:5A:63:58:CD:15:76:43:E0:E6:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C5A97E45E00864EE621E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed83997-c494-3d53-981c-7f46ac02bf1f.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        98.251.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:5a:97:e4:5e:00:86:4e:e6:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=3e38f1f3-690f-418a-a575-c0eaf08b31a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:a3:21:fd:71:cc:51:e2:ce:b9:f5:f3:8a:
                    35:e5:0a:e5:e1:31:37:e6:95:88:3a:11:8a:f0:1e:
                    de:f3:35:0c:97:60:43:6c:f8:98:85:51:c0:96:88:
                    86:05:64:f9:fb:5c:27:4c:16:e6:c1:74:be:3f:b8:
                    77:55:8b:60:9b:4c:68:8b:0f:be:d0:27:e6:6c:17:
                    4c:89:77:b0:33:04:33:79:f0:ad:98:55:78:a0:91:
                    5f:79:5b:c9:0e:e9:bc:54:6f:d7:9b:47:07:62:4d:
                    4b:04:de:13:39:72:54:9c:ef:49:a3:24:c5:72:90:
                    d5:e4:74:a2:13:1c:a8:bd:dd:17:00:96:3a:1b:8c:
                    cb:e9:c6:a0:e5:5a:ce:8e:b0:e4:66:56:d8:51:ac:
                    42:00:db:e9:a8:bb:3f:2d:b8:8e:c0:82:09:83:a7:
                    b1:65:76:9a:35:a9:0d:05:a4:4b:d1:b9:bd:5c:51:
                    0f:ce:df:54:7c:32:b1:d4:ef:3b:0e:e9:4f:2e:4c:
                    96:58:32:ee:47:13:e4:3b:aa:40:90:9e:23:a7:d0:
                    c0:0b:7c:0b:a3:44:85:4f:30:da:5f:89:9d:7b:1d:
                    7a:42:0f:76:42:a7:c3:8a:ab:4f:ac:a9:ea:d6:0d:
                    1f:42:a8:3f:b6:c0:2e:52:e3:48:53:e1:c1:61:8e:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:70:E5:50:0F:50:60:60:64:5A:63:58:CD:15:76:43:E0:E6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed83997-c494-3d53-981c-7f46ac02bf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:22:71:f5:10:94:19:ca:98:f0:f4:f5:b5:41:93:a8:9e:e4:
         c3:e7:d6:e2:3e:70:3e:4d:79:b6:40:bb:aa:f8:8a:c3:30:79:
         2f:0f:00:9d:e4:08:8f:2c:b3:c7:3e:6c:20:0f:12:16:48:83:
         cd:4b:a6:1c:b6:22:79:f5:61:a8:20:fa:44:01:a1:a2:32:1d:
         ae:a7:b2:73:82:d6:85:80:18:90:0c:92:da:f6:ea:4a:1f:f9:
         83:24:ba:b0:ae:a4:72:e1:55:02:68:76:20:e3:57:0f:a7:34:
         74:48:f9:b7:62:6e:97:2e:83:a5:ee:09:65:84:a9:dc:d5:e1:
         6f:0a:3a:04:a4:59:79:f5:6c:5d:e6:d7:c3:31:6b:bf:08:9d:
         16:73:ca:07:d2:94:29:cf:d9:32:fe:6b:af:f5:6c:fb:43:11:
         f3:49:0e:97:0c:db:21:72:b9:70:c4:ef:07:c2:27:7b:b1:0b:
         29:58:e3:03:41:d5:c5:ec:a3:6d:7b:ac:bc:ef:71:f8:d3:80:
         a3:56:ea:ac:1e:55:8e:df:0c:8f:07:65:65:06:4e:18:00:da:
         04:f5:c4:32:f3:fa:0a:60:52:00:ab:c9:ab:7d:5f:a2:6f:44:
         24:80:d1:c6:8b:dd:03:2b:5b:51:cd:90:1e:f6:d8:eb:c4:16:
         95:19:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:46 2025 by rpki-client