Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa
File:                     d750cc30-d12e-3583-902a-d78ec5dee599.roa (raw, json)
Hash identifier:          Vc9e3p5vxzEp5Z+HziyZ417w1e0TVeuf8ssysrOQ0Jo=
Subject key identifier:   A2:E8:87:91:FE:57:9B:A2:E2:D7:CC:5E:98:5A:D4:78:58:7E:64:1C
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285848CC7B8CFC74D3AF8AACEC20F0
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     399728
IP address blocks:        172.98.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8c:fc:74:d3:af:8a:ac:ec:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=3a555f22-9ec3-4180-9c7e-f3101c97e20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:e8:d6:75:9e:58:b5:55:41:9b:27:ee:1a:
                    c6:8a:a1:5d:40:74:a2:85:81:67:13:ee:d9:b9:34:
                    d0:b6:48:f3:8b:7e:6b:96:c4:11:6c:42:ca:4d:45:
                    95:e4:30:08:64:98:c9:ea:98:37:e5:56:36:27:26:
                    43:f9:1d:e0:53:04:6d:19:68:e2:a7:3f:ab:ea:8e:
                    bb:7f:06:12:41:68:7e:5a:05:c3:75:70:08:16:f7:
                    55:cf:bc:4f:13:23:3e:a2:d1:92:2e:ee:50:5c:ba:
                    8f:cd:eb:9c:47:e4:34:d1:cd:dc:e1:b2:92:a3:b7:
                    e6:65:d1:81:b2:e0:a9:5d:97:4d:59:98:64:0b:cd:
                    bb:5f:97:0b:0e:8b:83:ed:22:b0:40:fd:75:ca:92:
                    10:a2:14:80:c2:bd:1b:98:56:13:91:c3:e5:9c:86:
                    a3:25:d0:51:ec:d9:df:f7:7a:80:12:40:fe:96:4e:
                    6d:e5:21:05:86:00:73:bf:9b:03:66:1e:5b:71:5e:
                    fb:ed:df:cf:d4:5b:75:ab:d5:b9:dd:e2:a0:29:45:
                    1c:25:8d:91:5c:f6:c1:9b:50:d0:2b:38:e4:34:19:
                    b0:4f:87:08:e0:6a:9e:79:f6:b3:1c:ad:67:1b:f0:
                    b9:06:f9:bd:63:01:15:70:b2:c6:95:1b:e7:a5:c4:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E8:87:91:FE:57:9B:A2:E2:D7:CC:5E:98:5A:D4:78:58:7E:64:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:4c:2c:31:da:20:1f:b1:ec:f1:1d:bf:85:c0:ba:5a:36:a8:
         f4:9f:9e:17:51:96:bd:d7:b6:52:3c:1c:b5:14:3d:1a:49:e4:
         4f:18:14:70:e1:9a:f7:d4:5d:ee:ee:69:e3:ce:73:50:e0:94:
         cd:c4:ed:42:90:b4:c5:bd:03:9e:24:9f:9f:af:d8:33:7e:8b:
         07:78:c7:fb:6e:ad:a2:9d:19:25:5a:de:06:01:44:f3:70:f8:
         92:60:98:72:31:ba:d5:5b:8b:6b:c6:ca:cf:68:5d:1d:74:85:
         f3:38:79:52:77:df:7c:c0:38:13:15:0f:d2:36:bc:37:8d:e8:
         89:b5:bc:4e:b4:75:76:f4:15:33:00:b1:05:c8:dc:8c:2b:47:
         3c:ed:65:55:cc:46:42:f9:d8:e0:e7:9f:dd:9b:60:ef:87:ce:
         ae:c5:1a:99:4a:87:7a:35:b9:1b:ac:b5:12:b7:ef:ce:c6:e2:
         63:0a:10:fb:ae:90:44:a4:84:00:78:27:80:91:19:2c:f6:e1:
         ca:65:24:a3:6c:d7:88:61:0f:b5:ff:20:c8:c2:a7:61:69:ab:
         59:13:89:10:c7:3f:b4:0a:fb:24:e4:5b:af:77:25:5e:eb:e0:
         34:db:a9:e7:ce:08:ed:d2:eb:8f:79:5d:1d:37:1c:23:79:20:
         61:63:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:54 2025 by rpki-client