Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1bab6fe-c507-332d-bcff-663f2a0c4d76.roa
File:                     d1bab6fe-c507-332d-bcff-663f2a0c4d76.roa (raw, json)
Hash identifier:          A4NEW2LGVvWE2Sy/6deaA13csQb6sQfIVPNrFi8pbks=
Subject key identifier:   95:CB:53:C1:5B:3F:4C:4E:94:A8:27:A4:B0:A2:85:E9:00:A8:CA:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DD1E641ACC1F5368BA200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1bab6fe-c507-332d-bcff-663f2a0c4d76.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        98.59.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:d1:e6:41:ac:c1:f5:36:8b:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=759c2248-584b-43ed-8301-14c75e5f1cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d7:35:80:d1:e2:2a:db:c3:70:9a:0b:f9:40:
                    7c:0d:c3:5b:cb:d4:a8:5e:aa:60:54:0f:96:04:c3:
                    54:5a:f0:5c:0c:eb:c3:26:05:5b:10:8d:ef:ee:7c:
                    48:36:ca:65:d9:79:a5:83:53:d6:ef:fe:06:c4:09:
                    7f:4f:b4:83:6d:28:47:07:ec:38:1a:a9:d7:a1:cd:
                    14:c6:77:bd:16:d3:08:f6:99:e2:f3:a3:83:e4:d3:
                    d8:7a:72:f1:a0:1e:73:01:63:fe:25:99:8c:90:7f:
                    5f:f8:78:23:73:37:4f:26:5a:25:1a:60:7b:fc:4e:
                    f5:56:91:a1:9d:2f:77:17:29:5a:1a:aa:55:90:da:
                    62:aa:4c:5e:99:f9:43:c5:94:e9:1e:5d:c4:68:dd:
                    14:6f:d6:91:a0:7f:f2:4d:09:ed:f4:01:33:e8:01:
                    46:88:eb:39:03:7a:60:55:fb:20:f6:8b:cd:a9:42:
                    5e:5f:9a:a8:de:cc:ae:fa:81:03:c9:6c:2e:8b:93:
                    15:ba:48:09:82:2e:52:6e:37:eb:93:a7:ea:41:78:
                    75:4c:cb:b6:b9:69:bb:5c:f5:5f:51:52:70:90:b0:
                    17:17:f7:48:03:cc:79:f2:b3:f8:dc:c5:8e:51:c7:
                    17:63:26:83:51:94:e8:28:19:19:5b:dc:5d:f7:53:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:53:C1:5B:3F:4C:4E:94:A8:27:A4:B0:A2:85:E9:00:A8:CA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1bab6fe-c507-332d-bcff-663f2a0c4d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.59.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:da:63:80:ec:06:81:c7:53:22:eb:cf:96:4f:38:6f:d0:
         cb:c7:34:cc:01:8c:aa:8b:40:71:5c:ef:d2:ee:aa:3e:50:4a:
         45:6f:15:c8:2e:cf:c0:52:b0:a1:4f:98:9f:27:17:a9:a7:24:
         6d:40:ac:b6:90:60:81:60:9f:2a:3e:66:c3:0f:6c:4e:47:5d:
         28:11:c3:fd:48:38:0c:c6:7c:10:de:44:a7:7a:c5:ca:85:13:
         eb:d8:25:4c:34:f6:75:5d:a2:1f:0c:b5:44:fd:8e:9a:0f:14:
         e9:53:0f:98:92:2d:29:39:63:e9:51:b6:f3:ea:61:82:a8:3e:
         22:62:2f:5e:1f:1c:93:af:e9:8a:50:74:1c:87:5f:76:1a:7c:
         48:11:04:f7:13:97:12:dd:8d:fd:80:d2:16:10:0a:e5:60:a8:
         18:c8:33:db:3b:07:90:a1:5b:e4:03:8a:00:f8:5b:7b:d0:e8:
         01:34:e4:39:e2:1c:13:66:46:5b:a5:59:66:41:db:67:ca:e8:
         87:d8:8a:8b:cd:15:00:cf:83:f8:bd:35:ed:7f:ec:01:f3:2c:
         2d:c4:d9:a4:f2:b3:fc:3d:6a:fc:70:67:6e:0c:4a:e5:bb:03:
         31:a3:cc:49:57:04:2b:a9:b7:34:4d:e7:c9:35:45:2a:61:34:
         4a:13:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:52:06 2025 by rpki-client