Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e4e2186f-a988-3b3c-a67c-e3577612dbbb.roa
File:                     e4e2186f-a988-3b3c-a67c-e3577612dbbb.roa (raw, json)
Hash identifier:          w50pYHhWa3n4EMSJbw7phJaTN7mkeLD/uzMbwC2GFY0=
Subject key identifier:   E6:82:C3:68:E9:DE:46:AA:00:77:D4:4C:6E:53:C6:67:AE:B4:D1:72
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848F926AF3F4250DC122EF1BCC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e4e2186f-a988-3b3c-a67c-e3577612dbbb.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25899
IP address blocks:        98.142.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:af:3f:42:50:dc:12:2e:f1:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=47df538a-3932-418c-8550-868e6d518513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:54:2a:42:34:1c:e9:c9:22:d9:46:0b:d7:
                    3d:6c:ad:f9:be:bb:8d:a8:31:6d:e2:30:b4:a0:98:
                    34:ca:07:87:67:66:85:49:f1:9e:3d:47:8c:eb:c9:
                    df:a8:e9:e8:a3:db:80:e9:18:fa:a7:5e:5a:27:aa:
                    5e:33:24:af:d9:34:d8:89:3e:77:18:cd:f4:07:00:
                    15:c8:1d:73:42:1f:8a:25:d6:43:a6:17:e7:cf:3a:
                    a1:4f:0f:fb:95:f7:fb:3d:4f:b5:40:5f:d2:ab:95:
                    33:f0:d3:dc:43:24:3d:8d:58:6a:fe:6d:c2:fb:6b:
                    ef:bd:e6:06:51:6e:62:82:dd:f0:c0:14:c5:4a:5f:
                    63:12:1e:72:35:64:6f:8c:28:31:74:03:c3:d4:8a:
                    fd:15:d5:19:1d:e7:c6:fc:35:d0:27:79:01:d1:72:
                    8a:e3:58:eb:5f:47:1d:95:9f:75:f7:00:91:93:ec:
                    94:7f:6e:f7:1a:6e:60:64:20:2e:c8:86:3f:82:fb:
                    d7:df:94:d6:c0:86:b9:ff:2a:4a:cd:07:93:80:0d:
                    8f:85:b4:c9:45:04:32:24:59:79:b0:f8:82:ab:d3:
                    45:d1:a9:fd:bf:d3:d6:c7:f9:08:6e:94:23:e2:eb:
                    68:5b:14:98:d7:1e:30:f9:d8:12:e7:25:d5:4b:e7:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:82:C3:68:E9:DE:46:AA:00:77:D4:4C:6E:53:C6:67:AE:B4:D1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e4e2186f-a988-3b3c-a67c-e3577612dbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:8b:28:f8:b7:0d:ce:d1:26:37:2e:6a:fe:d8:aa:43:32:
         df:1e:bd:53:e8:c0:11:de:8f:8c:2d:55:fe:e4:9f:2b:9f:9c:
         59:9e:cd:33:6c:74:2c:8c:0d:6c:f2:90:71:b1:b6:c0:74:92:
         b7:8f:d6:3d:0e:f9:f8:42:27:ea:bb:74:a7:7f:bd:dc:6c:1a:
         b5:98:18:49:39:0b:e5:02:31:f8:35:04:81:17:7c:40:b9:57:
         58:03:37:e9:ff:2e:e2:d7:a4:3c:12:48:d4:7f:55:5f:0f:83:
         dc:e8:41:09:0f:3f:a7:60:17:ac:d2:fc:c9:f9:32:cb:61:7f:
         fe:48:30:c5:eb:07:8b:b9:6a:e7:26:59:d1:3a:d1:c5:8d:21:
         e0:4d:fc:01:75:6a:de:2f:9c:63:63:b5:a6:49:60:fc:74:cc:
         66:6d:f4:5a:c3:8b:8f:b0:fd:a8:7c:db:2c:92:3b:2c:c2:59:
         f3:66:c8:c1:1b:83:25:20:d9:d2:b1:16:87:1b:e0:ed:83:12:
         ac:69:cb:ce:d3:6a:72:5e:52:7d:e8:88:8c:c5:b4:24:29:71:
         2c:36:0f:6d:13:d5:58:70:5e:45:85:78:58:32:8e:fa:ce:98:
         d2:b9:b2:b1:29:d7:39:19:2a:34:4d:ea:39:2a:a2:67:19:28:
         5e:53:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:09:15 2025 by rpki-client