Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccfe5c87-0a95-30b0-86ed-f4cc2f5b9564.roa
File:                     ccfe5c87-0a95-30b0-86ed-f4cc2f5b9564.roa (raw, json)
Hash identifier:          KMlHocE7I5MGfq9JzUWj4kmFYg446zeqyMx9U2J74bA=
Subject key identifier:   1D:03:72:16:56:1F:48:3B:DF:DF:D9:51:E6:9E:40:C0:C8:04:0D:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB15FB56EDDD107F0A40840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccfe5c87-0a95-30b0-86ed-f4cc2f5b9564.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.253.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:5f:b5:6e:dd:d1:07:f0:a4:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=d8e50ed7-229f-4eed-9bd7-85f1ec2e844a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:a0:d7:a1:9f:ba:04:ab:7e:4e:5f:7e:28:
                    57:fe:17:a6:e8:e7:4b:3c:74:ad:86:8c:f8:2c:ed:
                    20:19:08:1c:6b:35:25:82:3a:95:24:c1:a1:04:7c:
                    84:30:a1:8f:f9:c4:f3:c4:d5:1f:c8:0c:ba:3b:51:
                    19:2d:62:c9:db:eb:bf:d3:74:0f:3a:5f:22:ef:e0:
                    8c:80:5c:2b:59:33:bf:43:0e:f9:a7:e2:e4:d1:bc:
                    24:4a:2a:cc:f6:55:34:78:cf:bf:1b:4c:35:11:36:
                    78:58:92:3b:09:b0:6f:37:27:fe:84:82:f7:2f:7e:
                    e8:5a:3d:16:8d:75:0f:ea:09:2d:06:75:08:4e:04:
                    d4:b7:c5:ff:9c:7b:32:b4:11:51:71:9c:9e:7b:7d:
                    04:78:46:5c:19:f9:cb:c8:3f:1c:2f:78:f3:36:40:
                    30:5e:ff:a6:b7:5c:44:1b:14:74:34:f0:18:24:4b:
                    b6:4a:f5:9d:69:bf:2f:d1:37:4e:9c:9e:f5:1a:53:
                    45:d6:0e:2d:65:ab:43:2e:64:23:f9:48:34:6f:ac:
                    b8:ed:bf:5b:04:7a:a0:67:35:16:97:26:17:a3:a4:
                    62:2e:f0:0c:55:78:82:23:cd:0e:04:4e:a1:d8:12:
                    9c:d1:97:3c:33:66:80:f5:d7:39:a7:83:0f:c4:9d:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:72:16:56:1F:48:3B:DF:DF:D9:51:E6:9E:40:C0:C8:04:0D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccfe5c87-0a95-30b0-86ed-f4cc2f5b9564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.253.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:19:99:12:ca:84:35:ab:00:a0:76:59:51:36:1f:f5:e0:
         e4:bf:f3:3b:45:b3:4f:38:5c:87:43:4e:d7:4f:a3:4e:49:50:
         db:6d:97:67:5c:85:0d:77:99:e0:07:6a:16:d3:a0:7e:71:61:
         b8:33:33:ce:39:83:df:94:f8:a2:1b:90:85:75:de:5a:18:c1:
         37:75:48:bd:59:ca:20:bc:c8:4c:81:d7:52:a5:9f:aa:a4:7c:
         50:9d:7e:57:48:9e:60:54:ef:09:a1:c8:34:3b:11:3d:25:bd:
         3e:73:94:25:b5:1c:c2:49:e0:10:17:e9:df:01:cf:ce:84:4c:
         60:e7:6f:dc:89:cb:d2:3b:7b:54:f3:e2:71:c6:40:e6:66:0e:
         7a:29:ef:fb:45:13:7f:52:1d:86:91:2c:40:29:9f:7a:1d:93:
         d2:58:b9:29:1d:67:1e:47:c1:77:a1:45:e3:46:cf:d9:85:fb:
         ba:f8:77:79:80:d0:17:ee:f2:15:b0:66:f0:57:89:f6:8e:9f:
         34:42:85:e8:ef:7f:37:64:18:a4:34:d5:31:82:4e:8d:84:26:
         83:e6:3a:d0:d7:75:5f:ff:77:d7:9f:d6:c2:e2:2c:05:8f:d0:
         16:c2:49:0f:15:30:eb:b1:a1:d8:6f:10:b4:4c:59:de:aa:3e:
         b8:92:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:22:10 2025 by rpki-client