Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa
File:                     f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa (raw, json)
Hash identifier:          7aLt851AWIihpOzwTKtQHh36HJ/ewRg80ws3HEKl/UY=
Subject key identifier:   E0:8B:21:DC:82:E3:D0:37:94:1C:12:6E:7F:07:CA:65:AA:18:17:50
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A10354C0972F8947F1460E880
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     21859
IP address blocks:        98.98.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4c:09:72:f8:94:7f:14:60:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=2267c387-2e55-4161-8aa9-cc45c7db21f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:2d:b9:40:18:3f:b7:dc:6d:52:d6:35:8a:
                    36:bb:25:de:94:f3:a6:9f:ca:fc:d5:a7:d1:0c:cb:
                    2a:08:f2:14:a7:8e:77:59:9e:69:d0:3a:8b:cb:0c:
                    3d:0d:13:9a:dc:f2:af:f9:0a:7e:04:e8:36:e7:3f:
                    c5:89:e5:b7:8d:6d:62:5d:d5:0c:c0:1e:7c:ba:72:
                    f0:ad:ab:e7:de:ae:e0:d6:5e:33:6b:89:3d:d4:05:
                    ca:82:a7:a6:b7:b0:5d:da:e9:97:ab:d1:40:12:34:
                    5c:9c:e1:34:fb:1a:9d:e6:cc:67:c0:d5:74:78:89:
                    20:fb:4a:f4:de:68:c8:74:62:2f:60:c1:c6:87:19:
                    6c:ed:92:55:36:2f:65:95:2f:be:66:51:5c:47:da:
                    9f:99:28:ec:35:9e:0f:ba:26:9d:97:e1:cb:f7:bb:
                    a0:9d:cd:0c:b3:4e:82:fc:39:5f:13:af:e6:ad:d8:
                    da:22:d2:81:c4:f1:91:53:f3:e2:a1:ff:c2:35:fe:
                    18:28:b6:25:a9:31:c2:2b:09:dc:84:d9:14:dd:98:
                    88:ad:d7:b8:54:81:df:47:32:21:76:f7:68:99:b9:
                    0f:35:c5:a9:54:27:73:ba:f1:43:30:0d:71:c8:8d:
                    00:45:b4:65:54:86:e0:7a:7f:d7:87:aa:08:6f:81:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8B:21:DC:82:E3:D0:37:94:1C:12:6E:7F:07:CA:65:AA:18:17:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f9:d6:7e:b3:c1:a8:f5:f4:2a:8e:7a:b6:19:32:a3:12:b0:
         f3:d1:59:62:87:80:89:c8:c1:b6:97:07:cd:ac:a9:b8:57:c4:
         c8:7a:51:39:28:c1:09:77:10:1c:67:f9:d0:8d:b6:ad:56:48:
         13:5e:db:f4:e9:1f:d3:6b:f4:1f:f5:65:2c:21:c2:3a:1d:21:
         30:e5:a7:29:2b:f7:8c:56:dd:1b:59:2c:e6:a4:95:aa:7d:4e:
         df:81:26:98:dd:d0:2f:ca:93:74:2b:22:b6:ac:f8:8d:ca:7c:
         53:d0:94:c6:42:d3:07:cc:0d:98:af:98:59:2f:e9:5b:d5:5a:
         d2:e2:ed:79:f6:b7:24:31:e7:9f:58:fc:1f:61:67:b3:2f:b0:
         95:80:92:d4:c6:b9:17:45:ff:32:93:db:94:4f:4b:ab:4b:80:
         1f:1e:f3:9b:6a:4d:4c:1d:6e:85:85:fc:3c:c9:67:5c:cb:d4:
         2a:ef:5f:28:68:59:9f:62:dd:13:20:65:2d:54:15:88:ed:c9:
         c0:9b:79:df:3d:77:dd:5b:fd:64:43:dc:3c:39:19:3b:f4:88:
         c3:f1:22:cc:cb:e6:d0:86:fe:49:2b:3a:83:50:45:4b:ff:f8:
         ec:93:cd:e6:bf:3e:53:2b:ae:91:da:f9:c3:2f:42:62:0b:3f:
         f3:03:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:10 2025 by rpki-client