Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa
File:                     951f03da-99ef-3fc4-81ff-16ac192a1586.roa (raw, json)
Hash identifier:          BEVqdUXLf+wF1qx/mprSCZRRd/1uoWURSBZ0oLEhFYc=
Subject key identifier:   19:E8:B4:5E:E8:58:03:DD:42:38:7F:A6:66:EB:40:57:C6:49:94:67
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858483885600DEEE2D32A1948B480
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     36519
IP address blocks:        172.98.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:60:0d:ee:e2:d3:2a:19:48:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=599196eb-1c40-4521-a31a-7f7dedaba4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:35:73:10:82:59:1e:1c:e0:1a:c2:05:32:
                    69:70:f8:33:7d:bb:ab:0c:5c:57:19:39:b5:f3:b8:
                    72:c4:21:70:ab:76:99:21:79:e5:14:83:c0:98:1b:
                    2e:0a:b2:c0:87:55:26:dd:1b:76:9f:ed:c7:25:da:
                    45:92:5d:e5:74:5e:e3:f2:8d:a4:fe:eb:b5:22:3b:
                    3f:90:2f:69:03:85:70:71:5a:34:72:45:ac:bd:0d:
                    f1:1b:8e:94:60:e3:85:52:45:32:27:43:15:98:f4:
                    f4:d8:c1:1e:69:64:8b:95:9a:16:d0:9b:7b:5c:ed:
                    a2:99:4d:a1:7f:f7:57:23:18:3f:6b:38:a6:cb:3a:
                    37:f2:88:66:96:7d:fe:52:34:e9:3c:93:9f:cb:96:
                    57:fb:13:3a:ad:3f:41:36:45:46:c8:03:d8:d6:27:
                    03:30:f4:3f:bf:79:91:0b:b9:ae:89:57:78:99:db:
                    1f:59:9d:c8:a1:7c:77:0a:a9:6d:ff:41:26:49:e6:
                    de:62:5a:74:78:77:db:c8:08:da:25:fd:82:db:9d:
                    5f:97:b0:86:39:e6:f5:8b:11:4b:05:1b:c0:22:93:
                    44:36:0b:25:7d:ff:44:8d:67:48:b7:f3:2f:04:bd:
                    09:b7:63:db:53:5a:63:5d:cb:51:fe:b8:61:62:e9:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E8:B4:5E:E8:58:03:DD:42:38:7F:A6:66:EB:40:57:C6:49:94:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:47:cf:14:02:68:3c:fe:25:9a:18:1a:13:c3:77:93:18:
         56:20:56:73:2a:22:aa:cc:1b:31:23:b8:64:3f:36:b4:39:59:
         d2:81:c8:56:7e:6b:87:5c:61:16:db:42:a5:f1:d1:10:ca:3d:
         98:3d:88:eb:94:24:65:b9:17:32:a3:6c:ec:46:4b:7a:f3:50:
         ab:27:9b:9d:a2:98:be:d3:8e:c1:97:91:c7:9e:f7:ac:ff:e8:
         17:a6:34:12:9a:32:6f:a5:e0:ae:b0:d2:70:7b:cf:1d:ed:cf:
         b4:3a:d9:b6:43:8a:b1:db:96:9a:47:47:3e:77:bb:55:db:47:
         39:29:30:6c:41:f7:f0:85:b7:ae:0c:d3:d7:98:13:1a:33:34:
         cc:96:e0:2a:d3:3d:ae:04:65:85:40:e4:a9:0b:e5:e4:9c:9e:
         2d:39:03:c5:c2:02:4e:60:df:bb:78:13:f2:52:eb:ab:b2:53:
         5f:d2:bb:48:e1:74:ef:80:f2:b3:08:73:0d:5b:f5:dc:de:52:
         70:02:c0:e1:98:54:de:25:2c:89:ca:6e:27:b1:c5:26:80:60:
         6e:62:e2:6f:1e:2c:52:42:26:b4:9d:93:1e:0d:61:7e:64:7d:
         ae:22:8b:7d:b6:96:f2:db:72:e8:47:d4:19:6f:2c:aa:fa:46:
         12:72:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:21 2025 by rpki-client