Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4710a03-2ba1-3364-a639-a149693145f7.roa
File:                     f4710a03-2ba1-3364-a639-a149693145f7.roa (raw, json)
Hash identifier:          SOHXJok1i0jpt05xTFWWrlwe59y8tNLp5+3f3dQS/Ro=
Subject key identifier:   44:02:69:B6:6B:2D:F9:B5:B7:EB:EC:34:3B:5F:99:70:31:73:97:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB16685E2D499A30A596378
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4710a03-2ba1-3364-a639-a149693145f7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.52.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:66:85:e2:d4:99:a3:0a:59:63:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ae174db1-5e18-495d-9c26-13ff64e04389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:88:77:c8:a6:b3:2a:e9:a5:a2:54:36:22:
                    1c:0d:dd:f2:d3:6f:b0:68:e9:0f:0e:14:c2:5b:b2:
                    e3:05:17:59:b9:8e:1d:90:c1:f2:51:53:3e:30:82:
                    c2:99:be:e7:67:06:5a:ce:58:7d:31:10:7b:bc:1e:
                    9b:f0:9b:fc:94:37:66:c0:fd:a1:31:b6:86:58:66:
                    a6:31:48:30:b0:5c:f4:63:62:74:63:b1:79:e2:01:
                    ba:d8:9d:ad:9b:bb:c0:fc:2f:3e:77:26:49:14:52:
                    37:3a:2c:89:37:ea:e4:ab:27:36:97:2d:51:fb:3f:
                    be:4b:be:b0:8c:22:93:b3:fc:3a:69:c1:c5:26:02:
                    86:8d:9a:e1:89:bb:a2:30:4f:fd:7c:cb:ce:74:fb:
                    fa:4e:2a:3c:87:1a:1e:c0:25:bd:8b:60:7b:47:76:
                    56:01:ab:26:97:39:d8:e7:3b:5b:6b:09:0e:1c:de:
                    46:b9:72:29:59:2a:ef:98:d4:11:3f:d9:0e:69:30:
                    80:76:59:e0:83:95:eb:41:2b:1a:72:93:b4:91:ef:
                    10:83:22:e1:2b:d8:20:3a:b7:f0:ce:0d:95:14:44:
                    7b:09:a3:25:63:96:18:95:b6:e1:a6:1b:a7:58:6e:
                    0f:51:2d:02:1f:f6:2e:cf:e7:06:99:74:cd:19:ce:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:69:B6:6B:2D:F9:B5:B7:EB:EC:34:3B:5F:99:70:31:73:97:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4710a03-2ba1-3364-a639-a149693145f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:80:41:78:3b:40:e0:7e:03:94:7f:66:d1:05:a5:c3:f7:be:
         0b:24:37:ca:5e:c9:82:8b:68:3d:45:97:5b:cd:b3:b2:df:6a:
         7e:f4:7b:af:30:67:92:7f:c5:05:e2:3c:d6:f4:52:e1:8b:12:
         8c:c7:32:97:3f:24:ca:ed:c2:6f:8c:8b:be:3d:86:05:22:7f:
         0e:cf:fb:a3:9d:75:08:cc:81:40:3f:a3:5a:d0:e8:61:71:61:
         14:fa:34:84:3d:6d:95:86:9c:66:7d:5b:85:76:16:9c:32:b6:
         88:6b:a6:23:50:18:8f:7d:9f:2f:d2:90:73:60:d8:95:af:e7:
         80:3c:49:09:87:92:a6:83:d7:d9:b2:65:ff:eb:7a:80:42:eb:
         9e:d2:9f:cc:d1:4e:76:4b:9b:e1:93:23:4b:6b:50:35:f8:dd:
         a9:21:79:9e:01:26:f7:28:26:26:4a:cc:e6:ee:98:1c:22:ee:
         bf:cf:fb:a3:5a:2d:fd:8e:30:0c:cb:fa:f4:3e:78:07:d1:9c:
         d6:5f:d0:47:05:e3:24:c1:82:9d:79:19:76:30:30:8c:b1:ed:
         d3:1a:f7:cc:89:a6:7d:40:42:79:32:73:38:1c:59:00:68:41:
         ef:56:3a:a6:17:c7:07:bb:89:9b:73:9b:dc:99:16:a4:85:ee:
         3d:28:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:36 2025 by rpki-client