Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fde3aaa7-241c-3901-8e75-67cf7c071340.roa
File:                     fde3aaa7-241c-3901-8e75-67cf7c071340.roa (raw, json)
Hash identifier:          4zvMBA3vF/vXi0CLDCZYr3+8XCdEs+SB5zWXIQ12e3Q=
Subject key identifier:   6A:F9:6F:AE:1F:A6:F9:03:EC:0A:8D:9C:52:80:F6:D6:55:61:A2:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1D0185984B20BB52D4400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fde3aaa7-241c-3901-8e75-67cf7c071340.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.207.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:d0:18:59:84:b2:0b:b5:2d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=60223954-fd11-4063-96b1-7f0a3d706667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:18:49:8d:55:1f:24:5f:b2:15:b5:e3:e3:
                    fe:e9:7b:0c:b9:0e:1a:57:cc:5c:d5:88:6f:a2:12:
                    5f:68:73:bb:94:79:05:9c:17:94:95:39:b2:19:d2:
                    53:83:a6:63:ed:18:12:98:72:9c:14:ae:4b:0c:ca:
                    4a:d7:17:3f:ae:05:04:d7:70:df:f4:4a:fe:97:96:
                    38:9d:7a:cb:d9:31:a6:5d:91:d9:90:ae:57:a1:7d:
                    a2:b8:f3:13:f1:ca:e9:af:ad:dd:49:ea:35:41:ff:
                    6a:f6:ee:4a:e9:c5:5f:51:47:08:c9:b1:f7:10:f0:
                    30:ae:c2:36:81:71:12:3c:24:30:a3:66:1a:b1:7c:
                    71:ca:90:18:52:74:b8:e4:cd:21:89:78:33:a1:d7:
                    30:31:6c:a0:03:ec:83:d5:f9:92:ba:cc:e6:69:5b:
                    97:a5:b8:f6:b4:bc:2d:95:ae:7c:df:a2:d6:ad:ce:
                    a5:11:7d:ec:2c:cb:77:01:71:4d:76:ab:86:0c:df:
                    b9:b6:e8:ef:31:08:ad:0e:55:41:0f:8f:69:11:b2:
                    12:52:c7:40:0a:93:b8:bb:5c:ab:71:08:fa:f5:e8:
                    7a:6f:4f:27:12:62:97:08:19:9d:a8:b6:b8:2c:04:
                    0d:b9:fe:4b:60:72:09:d8:c6:e6:0c:76:7c:e6:ec:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:6F:AE:1F:A6:F9:03:EC:0A:8D:9C:52:80:F6:D6:55:61:A2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fde3aaa7-241c-3901-8e75-67cf7c071340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.207.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:05:87:e7:47:c4:3d:3e:53:7d:c2:45:80:bd:4a:af:49:7d:
         58:31:95:02:28:78:13:9d:90:ac:21:ab:45:a2:20:2b:70:be:
         da:24:ed:86:75:f0:50:69:b9:2d:8f:00:c8:ab:07:93:17:c5:
         35:25:71:3d:ca:91:f4:e0:19:5e:2b:ad:63:fa:bf:6c:3b:21:
         35:ba:5f:e4:64:e1:96:f7:2f:3f:4f:3d:e9:9b:b5:42:69:b3:
         dc:11:fc:19:18:f4:44:d9:fe:0b:87:7d:3e:9f:d4:5b:86:15:
         cd:f9:7b:76:ba:a2:82:59:b2:49:30:dd:c1:5f:60:c1:62:bc:
         b0:80:e3:f3:05:ce:e5:37:f0:eb:89:b0:15:39:f8:7e:0e:51:
         29:59:91:4e:86:a1:d6:6c:d1:c7:16:ca:8b:df:5d:07:82:b3:
         4a:5d:aa:7f:23:a4:7b:ab:b2:9a:71:cb:f3:fd:e6:55:9e:db:
         bc:cf:86:f4:ea:5b:cb:0f:bf:d2:10:47:93:a7:47:74:d7:3a:
         1e:69:1e:32:68:b1:19:a6:4b:0b:18:fc:29:64:42:d4:89:db:
         06:85:f0:cd:0d:a8:8b:a5:f7:82:5b:99:66:7e:a2:a6:65:0e:
         45:bd:b2:5b:35:87:a2:b3:e6:c2:3e:39:c7:d9:54:2b:44:dc:
         54:e2:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:10 2025 by rpki-client