Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9bfd899b-614f-3d02-9ce0-e0f243a6b30d.roa
File:                     9bfd899b-614f-3d02-9ce0-e0f243a6b30d.roa (raw, json)
Hash identifier:          fImcHryd8NLgYL1qYn3NvQ0n19fFlcINGz/ZLvOKLgw=
Subject key identifier:   91:38:93:0D:71:E6:87:98:F9:D0:F4:51:21:C2:32:92:22:14:50:F3
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858497AD9BE14C76CB35C6EBB2100
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9bfd899b-614f-3d02-9ce0-e0f243a6b30d.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     21859
IP address blocks:        98.98.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:be:14:c7:6c:b3:5c:6e:bb:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=8717e3d6-c5c6-4573-ae96-16e76fed833e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:30:a6:50:dc:87:4c:a4:05:d4:0a:2a:9e:2d:
                    13:42:ee:6c:af:0d:db:cf:27:45:4b:24:14:c6:f6:
                    7e:0c:47:2c:fb:17:e5:2e:e2:a2:5e:c7:be:f2:27:
                    e5:01:ed:f5:14:38:64:c4:08:9a:ac:b8:47:b3:0a:
                    a6:f3:29:9c:eb:f1:b9:b7:f5:d4:99:39:95:d6:56:
                    e4:30:56:cf:eb:43:b9:ac:03:95:d3:30:06:fd:2b:
                    63:1b:80:35:b0:5a:6e:ca:45:cc:9b:c9:40:24:d7:
                    12:d4:93:77:8d:87:2a:28:78:d5:a3:41:a1:75:9f:
                    ac:5d:55:b5:c8:d5:e3:a8:a6:c4:79:e2:4e:20:2e:
                    43:98:4f:d0:66:eb:4d:dc:eb:3a:bc:4f:8f:af:0f:
                    5b:71:b0:3a:c3:c2:37:7b:e4:61:ae:55:85:5f:ca:
                    1c:a8:b4:42:59:ef:ff:2d:9e:ca:09:2e:76:9b:9e:
                    c2:1d:9d:d0:f1:b4:4a:38:26:6f:cc:20:10:2e:8b:
                    50:ac:65:98:e3:ac:9c:1d:81:5d:28:b2:dc:f7:81:
                    fb:18:a8:70:6f:b8:88:29:49:e0:ba:a2:a6:cf:6f:
                    d2:9c:c7:48:a6:e4:86:40:2c:14:50:60:9b:cd:54:
                    d1:97:7b:c0:1c:1a:ac:24:21:f6:98:e4:e6:71:13:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:38:93:0D:71:E6:87:98:F9:D0:F4:51:21:C2:32:92:22:14:50:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9bfd899b-614f-3d02-9ce0-e0f243a6b30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e9:ac:ab:56:ba:d6:25:95:a1:96:ac:e0:e7:0b:49:aa:c9:
         3d:13:af:81:5e:85:6b:2f:01:9e:14:8c:00:bb:f0:81:5f:b6:
         72:dc:0b:19:9a:56:f1:f0:06:82:0d:6e:3b:4e:cb:4b:f2:cb:
         5a:ea:39:5f:4a:74:d7:98:a0:6d:38:b4:b2:6f:f7:fc:66:10:
         cb:83:10:3b:eb:1c:03:8c:23:71:a1:57:2e:87:30:4e:80:db:
         ac:0b:86:be:92:b7:0e:f8:a1:10:08:87:2a:cb:b3:5a:46:db:
         e2:4c:f3:d4:08:87:50:79:5f:ae:3d:11:32:d7:57:10:c4:3d:
         e9:2e:d8:9d:f7:cd:aa:9a:68:e4:98:c6:d1:b3:08:0a:a8:fd:
         76:58:8b:ed:16:46:5f:cf:fa:c9:2c:f2:58:b4:0b:68:15:61:
         1f:10:dd:0c:33:84:ab:79:98:50:52:db:1f:5c:a3:81:ce:78:
         82:57:44:b2:7b:9f:1c:9a:8e:05:e9:f3:81:40:1b:72:1f:b5:
         d8:08:d2:fc:2e:5a:7b:f3:e2:4a:c6:d3:7c:f5:63:3b:c6:9c:
         1b:ad:0f:b4:db:5a:e5:07:eb:68:6f:69:e8:a0:e5:24:e4:d8:
         8b:40:cf:a9:41:50:c5:70:d1:cf:7a:e8:c3:44:fe:59:49:db:
         1d:ec:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:33 2025 by rpki-client