Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c11491c6-f0ab-3b04-8672-8fbcbe23690d.roa
File:                     c11491c6-f0ab-3b04-8672-8fbcbe23690d.roa (raw, json)
Hash identifier:          ddjgDxfG78QzEdqFpXDlWdskAhDJX+MqnKTQ/3Xb4DY=
Subject key identifier:   AA:21:D6:12:80:CA:65:8D:EE:6C:50:9E:A5:D6:1F:4E:24:69:B0:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFC7D166E0A96A21041180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c11491c6-f0ab-3b04-8672-8fbcbe23690d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.223.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:c7:d1:66:e0:a9:6a:21:04:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=83e152e6-585a-4098-b064-11b0ffcb231e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:d5:6f:53:71:49:71:62:91:15:75:a4:ed:
                    c1:37:02:34:41:b9:0a:8c:2f:25:02:f0:6e:7f:69:
                    21:2c:1c:b6:f1:86:6e:35:cc:53:e8:e8:ce:2b:11:
                    af:58:54:e8:40:83:ad:42:88:3d:28:b3:e5:8d:6d:
                    8e:4c:e5:d7:f2:e1:fb:99:2d:96:72:79:50:58:92:
                    82:24:a8:bb:50:af:fb:d6:46:f3:e1:90:8b:7e:81:
                    b3:7b:fc:68:9e:e0:28:6a:03:3c:89:08:d2:7f:c1:
                    2d:34:46:3d:92:8a:76:0c:a3:f0:c0:03:8c:64:80:
                    07:28:7c:93:38:2e:17:89:c6:64:c8:94:61:15:80:
                    e4:d4:e4:b6:fd:cc:cd:95:1d:af:64:6b:a6:31:3b:
                    45:63:fd:61:9c:ef:f6:f2:57:e7:21:20:28:ad:1a:
                    83:85:a1:b0:0d:0c:28:60:09:1b:f7:99:f9:cf:6b:
                    cb:25:6c:91:df:9b:fd:0c:5d:8e:33:aa:c7:6c:c1:
                    f7:07:11:ff:15:6d:52:04:fb:ad:0c:b3:f9:2c:df:
                    46:1a:4b:9c:3d:dc:0d:2b:e1:64:22:b6:0e:01:80:
                    5f:3d:d8:85:34:04:54:b7:02:a1:81:f1:26:0b:28:
                    58:09:72:3a:4f:6d:6b:15:24:d8:72:bd:67:e4:15:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:21:D6:12:80:CA:65:8D:EE:6C:50:9E:A5:D6:1F:4E:24:69:B0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c11491c6-f0ab-3b04-8672-8fbcbe23690d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.223.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:07:69:f6:eb:6c:68:b8:5f:7d:bc:4e:df:1d:64:2d:3a:c2:
         80:ee:aa:d0:ef:67:6b:ed:ed:58:93:6a:c8:c9:f6:54:b7:02:
         83:10:a6:06:5e:fc:2a:ec:45:b7:01:c9:d8:6c:e8:b9:cd:65:
         7a:1e:af:aa:3a:a0:bc:93:04:49:7d:81:da:29:c9:9b:b4:7c:
         e6:e8:35:b6:2e:4a:91:77:36:fa:a9:8c:bf:b7:a0:e5:d7:8d:
         b0:03:d5:a4:83:97:49:a0:b0:a8:d7:14:9b:e2:43:03:62:01:
         d1:ed:5b:62:c8:27:93:76:0e:c9:0a:e4:df:d4:b7:2f:96:fd:
         91:c4:40:50:6e:da:5d:6e:d7:b3:83:44:66:03:44:82:29:82:
         c0:2b:68:0e:94:99:f2:a5:d1:ad:f9:5a:a8:15:9d:fd:a3:2a:
         3f:b6:47:19:92:8c:7f:34:d4:3c:da:62:8d:a6:ff:9e:e4:fc:
         a1:ab:9c:1f:7a:ff:bf:65:96:a1:c3:f9:10:71:1c:13:60:26:
         b1:24:ad:47:4e:7c:20:ce:e3:f9:e7:1d:21:8b:85:7a:b1:79:
         45:49:7e:c5:94:b7:02:3d:dd:62:44:d4:59:26:87:5e:fc:2e:
         32:26:76:6b:9c:7f:32:cb:3b:87:9c:0a:32:09:f7:1d:c5:55:
         e6:86:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:13 2025 by rpki-client