Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0d86689-be7f-3d3e-ac7c-52ca2d73065e.roa
File:                     d0d86689-be7f-3d3e-ac7c-52ca2d73065e.roa (raw, json)
Hash identifier:          dXpbBZhW7nlzSBwI3lpGCiycfDjKCRRYz5q06LNW8c4=
Subject key identifier:   DB:AA:96:64:66:39:C3:31:F1:2C:89:CB:7C:78:8E:0C:BE:2A:4D:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F958E4738AE333529F5280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0d86689-be7f-3d3e-ac7c-52ca2d73065e.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.196.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:58:e4:73:8a:e3:33:52:9f:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=285f0b04-7681-4713-b3ab-6f7189b58321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:31:0d:91:93:3e:f8:fc:d9:96:fa:e1:cf:
                    3e:e2:94:30:70:c3:17:fe:fd:65:70:b3:1a:c0:d1:
                    ac:e3:14:d6:43:36:dc:50:59:79:15:e8:f6:c4:aa:
                    d9:29:07:c8:3a:97:18:0e:04:65:0f:e8:e6:07:7a:
                    2e:f8:ec:51:33:1d:25:36:0a:e9:69:7c:0e:f5:d4:
                    ad:5e:82:87:1b:22:07:f3:78:5b:c9:3d:23:54:e2:
                    4b:44:83:15:5a:da:63:52:c2:15:9e:67:0b:c7:30:
                    cc:8f:f7:52:28:53:d8:79:44:08:fb:42:49:3a:58:
                    7a:8e:1f:54:ef:aa:cf:ae:61:50:1f:62:55:2b:91:
                    b1:e9:9b:0d:b4:f9:77:91:e3:4c:be:bc:71:d8:6e:
                    54:5c:f1:7d:6a:1e:44:f6:a5:59:c9:20:5e:9b:5f:
                    6a:95:3f:d8:f8:d4:67:47:ec:0c:0f:8a:c1:98:eb:
                    7a:47:21:bc:84:f2:af:05:d2:be:ee:db:71:25:80:
                    cb:db:93:30:5f:1b:da:df:ca:af:72:77:44:92:63:
                    0c:02:6b:47:af:64:85:65:42:07:07:80:d8:28:5d:
                    65:e3:4a:a9:16:ba:de:b9:e3:21:d8:62:4a:64:2d:
                    f4:a1:a2:8a:a0:d2:45:17:94:9e:0a:53:63:30:50:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AA:96:64:66:39:C3:31:F1:2C:89:CB:7C:78:8E:0C:BE:2A:4D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0d86689-be7f-3d3e-ac7c-52ca2d73065e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:a7:ec:63:f6:88:71:c7:ce:8a:1c:b6:52:8e:68:22:7f:
         6f:83:8d:64:ec:0a:44:4b:c2:c6:8a:24:3b:53:6e:1c:70:67:
         8c:14:34:ea:7b:4e:14:5f:e0:11:6b:e0:70:df:c3:1f:ac:66:
         b3:03:05:2f:a0:40:bc:20:25:19:c2:48:ab:50:9c:b5:b8:0e:
         84:1c:b9:a4:a6:6e:57:89:00:dd:d4:d9:00:c9:21:16:a0:22:
         8b:e9:60:e5:da:4b:13:1b:75:4e:cb:36:03:54:16:ff:73:ba:
         1e:8c:1f:bd:66:60:34:86:03:f3:e1:7a:f6:ad:be:d5:7a:a9:
         eb:e4:47:92:52:f7:b4:29:98:8c:4b:69:97:26:c7:a2:77:db:
         b6:75:26:95:c9:d0:29:97:0a:d5:33:ef:a7:2d:8b:5c:4a:e5:
         0a:b0:26:51:6f:d1:79:f4:7c:91:7f:93:97:a7:8f:34:16:05:
         a0:72:7f:83:3e:ff:ce:83:f5:b6:75:ed:ab:1d:bc:ad:b7:25:
         8a:e9:8d:48:69:2b:48:e3:5b:fc:eb:83:75:94:b9:9b:65:05:
         ee:0a:d7:6b:5b:24:99:e8:02:37:82:42:7f:0a:58:ff:c5:ff:
         8b:3e:85:f3:9a:13:4a:34:c7:4a:3c:76:9b:1a:96:08:55:a4:
         36:97:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:14 2025 by rpki-client