Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/279a2cdd-34ae-33dc-a826-e857a4613613.roa
File:                     279a2cdd-34ae-33dc-a826-e857a4613613.roa (raw, json)
Hash identifier:          X5tFql684HlVVVFC6fDU86oE/5OjgfO1tlHGiETACOQ=
Subject key identifier:   B9:87:BD:E1:10:BB:F3:D2:8F:0D:B8:52:99:CC:6E:9D:D0:30:0B:B5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858496B7ECF4E109A19802FFD0280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/279a2cdd-34ae-33dc-a826-e857a4613613.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     35997
IP address blocks:        98.120.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:cf:4e:10:9a:19:80:2f:fd:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=6b63f942-3863-4c8e-b6ae-4166c23dd0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:43:91:59:62:9c:9a:58:ac:77:44:11:a7:
                    ce:5f:26:8a:3b:6c:0e:32:d4:9a:15:e8:ba:54:97:
                    b5:d1:b5:2f:35:ed:e9:ec:f8:8f:ec:d5:3e:f9:fa:
                    f2:02:7e:49:75:7c:1e:96:30:94:90:a2:c4:17:0f:
                    e9:39:96:4b:20:52:4e:25:ae:34:e7:f2:7c:db:7c:
                    02:27:eb:d2:15:34:b4:cd:a5:9e:c9:15:12:e4:5e:
                    06:ab:fd:0c:20:53:0c:23:d0:cd:7d:e5:79:a6:fe:
                    95:3f:d6:10:87:d5:51:5e:e9:f9:18:de:03:4d:cb:
                    e4:b8:f0:b4:1e:4d:a9:23:57:d6:3f:58:5d:71:1a:
                    8d:bf:74:cc:8e:a0:f4:33:f0:85:71:ce:d0:41:f1:
                    9f:e7:7c:74:46:05:d0:47:68:d4:13:c3:de:81:05:
                    a4:c9:4d:4e:1b:e3:de:13:07:20:18:89:ae:54:84:
                    ab:eb:48:4d:f3:2c:6a:ee:13:0b:a6:9e:0c:89:cf:
                    54:5c:9d:cd:40:1e:42:3a:66:6e:4a:4e:e4:5f:05:
                    da:f3:26:ba:05:95:0b:ec:46:e0:0e:ee:32:9f:c3:
                    60:8d:cb:f4:e4:df:50:c3:e6:73:95:7b:27:f3:e5:
                    5c:84:15:4f:20:c1:29:4a:9d:bd:65:aa:f6:70:92:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:BD:E1:10:BB:F3:D2:8F:0D:B8:52:99:CC:6E:9D:D0:30:0B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/279a2cdd-34ae-33dc-a826-e857a4613613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:36:b5:48:f2:75:8b:d4:50:a6:09:3e:e8:04:28:8a:5b:
         c4:e6:11:c6:4e:23:9b:50:73:f4:da:46:7c:7c:41:5f:d5:bc:
         e6:c4:ea:ee:59:1a:91:8b:2b:0d:b4:21:a8:58:cc:ed:93:89:
         1c:41:aa:27:c9:d7:77:82:b0:17:87:31:a1:55:f4:6f:78:c0:
         40:b0:54:3e:7d:b8:53:73:c8:f5:79:21:3c:b4:d0:4e:8e:1b:
         e9:fc:52:a1:73:f9:ca:31:79:84:66:5f:c0:32:20:63:d6:32:
         94:c7:aa:62:40:27:02:3b:f3:a2:07:ca:80:27:84:33:9f:95:
         b6:39:0b:a7:98:78:e5:1b:1a:82:89:14:f7:68:59:19:29:b4:
         c8:d6:68:da:70:10:fa:3d:42:0c:24:f7:5b:ae:2c:07:ba:a5:
         f2:6a:3f:a1:65:ea:0e:64:c4:04:e4:cc:64:3b:8a:89:7c:a3:
         77:e7:9b:06:ef:44:35:7d:2e:7a:56:0a:75:4b:a9:33:ee:70:
         6c:fd:68:df:99:ac:6f:d1:95:9d:6c:41:09:ec:4e:99:fe:39:
         06:04:7a:89:65:e5:30:51:c5:e3:3e:86:93:92:cb:b7:b6:4e:
         03:5a:24:b5:54:67:50:99:94:b1:4a:eb:f0:f8:a8:4b:c4:09:
         6a:9e:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:12 2025 by rpki-client