Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa
File:                     be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa (raw, json)
Hash identifier:          DFVuz70ydX8FogPLRI+uj94Zp5rawUSI0/0I5zdkfEQ=
Subject key identifier:   AF:25:D2:DB:DC:BC:37:93:5A:C5:2A:3A:7D:8B:B5:38:23:00:67:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7571DD36F3A4663116F7B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.62.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:71:dd:36:f3:a4:66:31:16:f7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=89b2c447-1d15-4928-9bad-0c182bb95af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:15:67:db:84:e8:4e:d2:44:46:34:bd:03:
                    79:f7:73:43:82:1a:87:a3:30:eb:38:cc:ba:a7:b8:
                    bc:ef:57:dd:82:9c:63:b2:ea:83:76:48:5c:a4:69:
                    c8:b7:d1:ae:f8:ce:a7:c8:e3:74:f7:33:88:d0:7d:
                    c6:78:7a:e1:59:40:f7:46:76:f9:0c:06:dc:39:44:
                    9c:21:c4:47:ba:e5:6d:a2:0a:7b:dc:43:bd:2d:6d:
                    d0:e9:6d:d3:d9:fc:37:d6:8b:f3:06:18:13:10:dd:
                    b6:02:2f:be:b1:c8:f6:6d:de:5c:70:6c:62:a5:e9:
                    d5:77:f9:ef:06:3c:3a:ba:74:5e:28:47:5a:e6:ec:
                    14:dd:92:7f:c0:45:8d:fe:7c:01:84:08:4c:a9:41:
                    58:ba:66:0b:2e:e8:65:86:af:b6:fd:14:df:e5:97:
                    ed:5b:a3:58:a6:45:b1:4e:dd:7b:46:1e:d1:20:4f:
                    da:21:5c:eb:6d:9e:63:aa:41:35:19:59:22:57:3d:
                    20:e6:e7:98:1c:4f:0d:62:b3:be:6c:17:4b:64:9b:
                    44:1d:65:e2:5a:ac:05:21:cf:4a:0f:40:df:c2:27:
                    ed:71:a8:85:98:62:88:b3:05:4b:03:ba:13:fe:05:
                    b2:e5:03:0f:34:0e:de:35:2c:85:67:5d:1c:84:3a:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:D2:DB:DC:BC:37:93:5A:C5:2A:3A:7D:8B:B5:38:23:00:67:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:0f:1d:21:2a:24:e3:aa:c6:7b:6e:1e:0a:5a:4d:eb:84:
         e7:6e:2c:cd:bf:5e:44:75:0e:40:b4:f6:76:cd:4e:d3:8c:16:
         08:0a:ee:21:49:3d:be:69:56:88:d0:e3:0e:b8:23:05:e8:47:
         7f:6f:73:9b:bc:1e:a2:80:15:59:a2:f6:29:bc:14:fb:98:04:
         f8:83:6c:4b:3e:4d:b4:ba:3d:72:5a:0e:2d:5c:74:9d:6e:3f:
         4d:fa:04:a4:16:f6:11:66:d1:ee:ac:be:48:8b:08:7c:24:c4:
         c4:dc:1a:5d:09:40:e2:73:bc:70:62:2d:ba:63:98:df:e6:a6:
         f6:5e:01:ba:98:74:a0:9e:5e:19:29:51:04:f5:17:23:cc:90:
         77:26:11:ee:cf:03:cd:8e:ee:7e:0f:21:75:c4:ec:c7:bb:bf:
         34:98:19:50:0f:3b:5f:eb:63:e8:eb:38:2c:ed:dc:64:57:21:
         92:2f:df:18:ce:7f:b5:f2:80:24:98:4d:8c:59:cf:af:20:56:
         d5:ba:89:c8:3f:cd:1f:03:3e:a3:f1:8c:6a:5b:8b:61:85:55:
         1c:a9:09:ba:71:ab:af:63:9a:53:39:85:00:2a:60:fb:ec:fe:
         0f:80:7c:44:42:a9:f3:94:3a:4a:6a:39:e4:3b:23:2c:b0:ca:
         4c:0f:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:10:57 2025 by rpki-client