Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7bb203f-8c4a-3df0-b635-6dd7d2667ebc.roa
File:                     d7bb203f-8c4a-3df0-b635-6dd7d2667ebc.roa (raw, json)
Hash identifier:          JwRWt8LoOwvqOW393i3/PJHqb37ybt/CfVuQfuYVH0w=
Subject key identifier:   2E:06:B0:E7:21:69:0E:61:99:80:05:9A:A6:99:26:82:92:63:C1:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4312A59460D752B6D59C9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7bb203f-8c4a-3df0-b635-6dd7d2667ebc.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.57.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:2a:59:46:0d:75:2b:6d:59:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=bd703140-a0df-4ae2-ae73-f3fc8a37dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:e1:99:fc:55:18:f3:f5:62:67:28:02:8f:
                    6c:9e:9c:09:58:b6:48:2b:51:d9:01:46:3f:32:0d:
                    41:75:96:3c:63:a1:65:eb:e1:a8:82:8f:e4:d8:2c:
                    13:ba:11:11:e3:c4:54:37:33:c9:e4:65:62:a6:f7:
                    eb:d0:b2:64:2e:fb:11:97:aa:aa:47:92:6b:3a:04:
                    b4:aa:dd:d7:c9:7e:32:84:2e:bd:93:4b:83:61:27:
                    3d:5c:eb:b8:6e:37:f8:0e:b3:83:bf:df:32:d2:6d:
                    63:3c:69:87:b7:81:85:08:2c:a3:40:67:90:40:4c:
                    be:3a:de:d4:22:65:43:2d:17:d8:7b:05:17:58:ea:
                    ba:17:35:54:2d:68:f0:8e:39:f1:1f:56:f7:c5:98:
                    8f:16:a7:fa:fc:2e:3f:ad:28:d5:cd:e3:3d:26:13:
                    0c:cb:4f:29:e3:07:91:1d:f6:9b:b1:d7:f2:87:bc:
                    67:eb:ca:89:6c:e5:d1:ef:1e:32:c7:70:c1:4b:3d:
                    b6:ba:3e:d2:8b:93:03:37:16:87:06:bb:94:4d:69:
                    58:e4:e7:07:5e:6b:a9:62:6b:44:bd:9f:80:39:da:
                    9d:dd:e8:9a:8d:60:14:ee:c3:78:f7:3e:ad:13:cd:
                    e0:ce:fc:b0:6e:ce:00:6f:03:19:82:d2:be:da:21:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:B0:E7:21:69:0E:61:99:80:05:9A:A6:99:26:82:92:63:C1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7bb203f-8c4a-3df0-b635-6dd7d2667ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:1f:59:24:f1:f3:99:8a:26:be:8e:83:5c:aa:ea:81:54:
         9d:a5:35:d4:37:b6:59:56:5a:92:9a:73:0b:e6:dd:fc:ae:c6:
         ad:e4:b4:77:6f:03:d9:e5:5a:0c:d2:ef:0f:bc:cc:e8:e5:3f:
         ad:ff:d1:96:a9:9a:88:d1:d5:9c:a5:75:d5:b9:e7:4c:ae:1f:
         36:84:13:f1:74:1e:cc:ff:42:4a:4f:69:89:45:1e:5f:03:32:
         40:bf:33:8c:de:c6:22:74:36:0e:3f:5c:39:67:d8:75:92:0f:
         dd:5c:b9:a2:b8:28:e1:a5:90:5d:f4:42:3b:26:0a:35:ed:7a:
         8c:ce:9d:55:0f:fc:96:e8:56:52:e6:7f:f9:fd:a2:91:0e:06:
         20:2f:d6:fe:4a:55:01:9d:88:2c:d9:d2:62:07:59:e5:44:ac:
         04:d7:a3:7b:07:95:88:2f:5a:b6:da:8d:77:58:df:b9:d5:a7:
         55:94:e1:90:00:fb:67:07:20:cb:9f:67:f4:06:d3:a5:08:9c:
         77:06:dc:af:c1:15:aa:3e:57:7a:b4:80:0f:3e:0d:bc:8f:a9:
         93:81:e3:94:d2:31:cb:82:9e:6b:b9:ab:f6:a7:49:ac:0e:a6:
         23:55:f4:01:bd:49:91:56:2c:a0:3e:fd:84:38:9c:08:64:f1:
         93:9b:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:40:00 2025 by rpki-client