Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b816321c-9701-33d0-bd95-53e99d6e692f.roa
File:                     b816321c-9701-33d0-bd95-53e99d6e692f.roa (raw, json)
Hash identifier:          XZuUyrP4lsLQI1IdAfTdKKvEXY26VYO5P/ifledCZEQ=
Subject key identifier:   5E:80:D2:C3:DB:1B:8C:69:B2:3D:81:65:2D:A2:CF:BF:D8:17:3E:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43110ADF4E92A73C89E4480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b816321c-9701-33d0-bd95-53e99d6e692f.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.195.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:10:ad:f4:e9:2a:73:c8:9e:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=11680641-759b-460d-816c-79c7b1e23416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:bc:d1:18:17:55:16:b7:87:b4:cd:85:2c:
                    3d:51:c0:6a:97:d7:6c:45:c6:d8:07:7a:55:b9:05:
                    fd:87:67:d5:9a:26:93:24:5b:b0:ac:bc:3e:ce:f9:
                    62:e9:d5:5b:cb:2e:cd:6e:f4:91:2b:73:10:21:f7:
                    d6:82:f8:26:31:fe:3d:ad:71:3f:1a:5b:fa:79:83:
                    50:76:06:56:32:de:65:24:db:fd:01:c8:e8:d9:45:
                    72:38:16:94:18:3e:b4:38:1d:d7:c4:22:1d:07:6f:
                    40:30:3c:24:73:df:44:3e:1a:47:6f:ea:76:92:89:
                    40:57:88:d1:e6:0e:c0:8c:04:06:eb:34:1f:e7:7e:
                    ea:88:ed:d5:2d:d1:49:b0:fd:52:18:7d:17:0f:24:
                    c9:38:aa:46:43:a0:37:14:57:d1:a9:47:79:ed:fe:
                    2d:98:82:c5:98:a0:b6:61:22:95:6f:9e:e5:e2:b2:
                    c1:8f:47:57:1c:4d:00:97:bb:92:9b:f8:b5:52:be:
                    f4:3a:4e:d5:01:a1:eb:4e:71:08:11:d4:50:a8:cb:
                    e4:7f:3c:1f:76:3c:33:0a:e5:55:fb:c5:3b:c6:40:
                    09:c9:c1:c4:a6:fb:ce:cc:c6:e1:48:a1:e4:52:5e:
                    d5:cf:df:58:c3:ca:1b:e2:bd:d2:5e:c7:67:42:d2:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:80:D2:C3:DB:1B:8C:69:B2:3D:81:65:2D:A2:CF:BF:D8:17:3E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b816321c-9701-33d0-bd95-53e99d6e692f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:28:2f:54:9c:17:04:ba:35:dc:40:b4:95:f9:a4:a1:25:54:
         52:8b:b3:57:2b:92:57:24:a7:6a:41:36:23:73:61:37:32:7b:
         c0:52:9f:5d:7f:56:9e:10:5a:40:58:48:06:6a:11:bb:1c:e1:
         11:58:b0:67:aa:e6:eb:d3:7e:1b:a4:cf:14:36:ed:05:0c:e2:
         25:18:00:83:3f:94:a0:b9:c6:3b:04:05:c3:af:eb:6e:f7:d2:
         dd:f6:00:ea:9c:2a:ff:05:b0:38:b8:c8:13:d0:d9:e1:72:db:
         7f:db:82:0a:29:8f:cc:a8:57:17:05:46:8e:1b:0d:4f:88:98:
         cc:50:a1:b1:d6:e6:4d:8c:51:46:1b:64:34:55:2f:df:f6:d7:
         ea:7b:79:38:e6:4a:cc:53:9e:69:61:e9:35:5a:6f:15:9f:ac:
         14:4d:6e:8f:28:60:99:12:84:dd:c9:2f:f5:e7:38:1f:ea:2c:
         8a:90:d0:89:05:65:2e:d4:d5:97:f7:d3:4b:78:07:c6:56:52:
         e5:fc:77:a7:d0:c9:e7:96:72:2a:4c:3b:c7:2a:92:4e:91:1c:
         06:de:71:40:a4:06:bb:d1:ff:c9:76:ab:d2:34:7d:e0:63:d6:
         f0:ac:3c:b8:ad:15:33:e0:56:13:86:4f:c4:2b:ec:ba:44:f0:
         1c:5a:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:13:18 2025 by rpki-client