Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdc04b19-dd9e-34fe-b516-05e1cabdba28.roa
File:                     bdc04b19-dd9e-34fe-b516-05e1cabdba28.roa (raw, json)
Hash identifier:          xhDEbeSTG8B+GGVPWkeBh4cVmAZN/i0tG+EmM7hgyV8=
Subject key identifier:   96:C3:6F:5A:D4:1D:3D:27:56:94:43:24:27:30:2D:2B:4E:E2:41:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7694B1F58E1F24C51FE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdc04b19-dd9e-34fe-b516-05e1cabdba28.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        98.216.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:69:4b:1f:58:e1:f2:4c:51:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=1385f67b-c634-4cf4-b96b-56271a4649f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:62:42:f4:c4:78:71:06:c7:64:03:69:7d:
                    9f:bc:a6:01:2d:dd:4a:dc:8c:38:cb:01:ee:05:77:
                    40:df:4a:b4:d8:49:e9:05:4e:75:4a:bd:4f:a8:13:
                    5c:35:39:37:8c:f3:62:86:a2:31:84:b3:3a:73:85:
                    57:bd:f3:e0:eb:d5:44:e7:c1:23:28:1e:71:02:f1:
                    74:00:17:c9:dc:c0:7f:c4:94:2b:9b:2d:24:4b:87:
                    57:f5:a6:3b:12:e9:e5:bf:98:da:05:9b:50:f5:4a:
                    9c:e7:85:18:cf:d5:61:c7:ae:cd:25:a0:7b:78:cc:
                    e8:4a:bc:55:bb:ba:56:84:00:d2:e5:56:6d:6f:da:
                    00:97:37:3b:19:ac:3a:6a:6f:77:8d:cf:a6:5e:a8:
                    c0:e6:d5:81:4c:71:01:15:d4:77:0e:b1:4d:30:5c:
                    da:76:c0:9c:b2:58:f1:41:4a:b5:7b:4c:eb:24:a0:
                    d6:45:88:8b:7e:18:02:32:3d:44:7f:74:34:1e:f9:
                    c5:d7:dc:cd:a1:76:ad:b0:e3:ad:89:b2:08:d5:f2:
                    73:bd:60:b0:4e:4a:6d:76:e7:17:eb:9e:59:5f:ee:
                    ab:91:f4:f2:60:57:1f:a0:b9:53:19:65:a0:33:9c:
                    34:3b:49:39:fe:35:e6:f0:76:4b:f7:9b:1c:67:ed:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:6F:5A:D4:1D:3D:27:56:94:43:24:27:30:2D:2B:4E:E2:41:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdc04b19-dd9e-34fe-b516-05e1cabdba28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.216.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:36:25:f8:33:e8:12:c6:e1:58:1a:18:5d:3c:6f:d4:d2:2e:
         11:8b:3c:85:dc:6f:cb:25:30:c9:83:45:44:ff:31:80:68:00:
         aa:42:3e:36:56:23:7c:55:fb:da:77:d3:35:f6:29:ea:e9:b6:
         9a:be:69:a8:9d:55:45:30:f5:20:a5:7a:d2:6d:2d:6c:5c:ef:
         47:67:d4:22:4c:d2:e2:c0:bd:ab:dd:5f:3f:e3:1d:ce:2c:97:
         40:df:eb:b0:fe:a6:a2:87:39:55:21:1b:8f:37:16:82:5e:33:
         c9:40:8d:7f:c2:ca:77:7b:6c:79:8b:1a:5e:6e:42:95:e6:56:
         d7:14:af:76:01:2c:a9:eb:cb:0c:3d:a5:7c:80:34:c4:fa:8f:
         6c:81:ce:ed:bf:8e:df:51:f1:db:6a:22:85:b7:81:46:88:81:
         32:de:1b:d6:bf:4d:b5:ce:81:6e:7a:3b:0c:a2:84:4a:a9:b9:
         4e:cb:29:3f:a9:d0:d0:05:2b:55:1b:94:5b:86:a7:24:e1:cb:
         88:f4:df:7a:68:f4:8e:ac:ee:ce:e7:a7:3b:a6:d1:ee:21:88:
         f7:f1:5d:9e:c7:88:f7:3f:29:fe:c3:1d:fd:84:e8:29:16:48:
         ae:dd:d0:74:8e:c7:b9:5f:87:cf:96:06:88:dc:8c:e1:a2:d0:
         1b:5e:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:34 2025 by rpki-client