Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b76105ed-822d-3285-bd8b-58a8bf764bc9.roa
File:                     b76105ed-822d-3285-bd8b-58a8bf764bc9.roa (raw, json)
Hash identifier:          idEeDZt9WLBEULkDCUl5agD2JUF9qFqrPGzbdzo7M2g=
Subject key identifier:   E6:E5:19:AE:55:3F:8F:6E:4F:1C:55:A1:6F:10:DE:1F:66:16:D0:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C090016BAD94B3A95488B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b76105ed-822d-3285-bd8b-58a8bf764bc9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.45.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:00:16:ba:d9:4b:3a:95:48:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7fd48f23-25b1-47ae-aae3-eabe78890dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:b0:63:66:9a:39:f5:94:b7:85:0e:f2:e8:
                    50:0c:4f:b5:c0:f1:29:a9:f7:5e:73:dc:e8:e3:c9:
                    94:c0:bd:5c:48:65:73:95:ad:82:60:f8:1d:b7:d7:
                    f9:8b:b9:6b:c5:8d:12:e1:6e:72:99:87:aa:d0:c0:
                    1d:03:a9:d8:75:97:98:0f:d8:6c:b5:ce:64:81:84:
                    15:59:19:a4:b1:2c:b2:3b:4d:f9:37:f9:0c:92:4f:
                    48:7c:90:d8:d2:55:8d:81:4b:5c:2f:3d:02:d7:e7:
                    ca:e2:0d:49:9e:7d:ac:e6:f9:10:1f:d8:86:47:c3:
                    78:d0:69:b3:26:b1:69:a5:39:21:d3:95:a4:27:41:
                    d0:55:f1:9f:50:83:62:0a:7d:85:db:73:59:99:20:
                    45:ec:e8:b9:41:6b:f5:5a:d1:d8:10:12:52:d7:e7:
                    08:de:35:2c:d7:7c:c1:f3:5b:4a:55:4c:02:8b:9b:
                    07:df:42:3c:33:cb:85:9a:ab:ac:25:e6:44:f5:d0:
                    86:8b:e4:f0:65:99:c1:b2:85:6c:e7:76:54:1c:72:
                    80:58:10:34:27:fa:7a:0a:91:e3:7d:1e:e6:0a:a8:
                    14:f3:eb:7b:80:27:f8:9f:04:32:18:f2:99:d7:3f:
                    09:90:47:e0:61:62:10:b5:9f:34:83:0d:ae:02:2b:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E5:19:AE:55:3F:8F:6E:4F:1C:55:A1:6F:10:DE:1F:66:16:D0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b76105ed-822d-3285-bd8b-58a8bf764bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d8:7a:dc:97:42:3c:bc:44:e1:56:30:41:e2:cf:02:c3:0c:
         d2:02:da:95:4c:61:1c:84:86:24:14:cd:90:c3:e5:49:b6:4f:
         68:c1:61:32:33:e8:89:29:69:83:16:b8:90:ec:31:5e:02:f4:
         e9:b0:72:37:c7:de:0e:fa:9f:7d:53:f5:78:85:c4:b7:4d:a8:
         dd:98:2e:85:a6:1b:9d:b2:45:3a:aa:0c:ee:35:98:35:ed:95:
         cb:5a:21:e4:b7:6d:ea:dc:a2:94:74:1c:5e:07:09:b5:71:5b:
         fe:91:46:56:7f:1b:82:21:cd:2b:73:c9:62:3d:34:89:6f:b1:
         de:6f:a1:84:77:b0:3d:0e:97:29:fc:98:9d:e4:bb:83:30:4c:
         54:ed:ca:e8:ff:e4:30:19:56:01:ec:d5:87:6d:88:9e:9d:89:
         f1:f6:cc:94:89:6c:73:21:2c:02:c7:6a:4a:f6:83:9b:23:61:
         f9:cf:73:0b:42:86:24:93:fc:08:8d:c5:37:98:5a:4a:44:4d:
         36:fa:c6:ad:b7:2a:84:09:b5:78:75:63:cd:aa:f3:36:a4:ef:
         f8:3c:90:90:87:86:97:ee:cb:97:d6:86:cf:3e:4b:2f:4d:06:
         e5:d8:61:b6:63:83:df:78:92:bd:39:fd:0e:92:6e:d0:6c:c2:
         76:15:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:03:51 2025 by rpki-client