Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bed67d3-ef61-3aaa-b370-616b3bdfad65.roa
File:                     7bed67d3-ef61-3aaa-b370-616b3bdfad65.roa (raw, json)
Hash identifier:          DUs0Bs+MjHAvINsvbOMFKhGlFwlMDxIq8BMnQqAVwBg=
Subject key identifier:   F9:88:75:4D:CB:E8:94:68:86:90:4E:77:43:F1:B1:2B:BB:04:57:4D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858489FD09C5C86CA78B39F42B6C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bed67d3-ef61-3aaa-b370-616b3bdfad65.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     12271
IP address blocks:        98.14.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9c:5c:86:ca:78:b3:9f:42:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=a489d214-73eb-405d-8935-19c57d3cdf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:9a:da:80:66:ba:d1:78:dd:52:16:36:85:
                    e5:32:22:f1:19:39:c5:b1:0d:b6:d2:ae:56:61:8b:
                    a8:d4:07:79:b7:06:6a:9d:3a:5a:28:14:88:cd:05:
                    33:4b:84:d1:ff:f7:81:29:93:dc:0f:14:75:ca:a6:
                    53:f6:37:ae:a3:c7:0c:00:fd:3e:c9:44:5d:4f:ea:
                    a0:d2:f0:1b:18:8a:bc:fd:67:98:55:51:5b:e0:8c:
                    3c:9d:f2:3d:21:93:91:37:32:2c:fd:e3:5e:8e:c8:
                    5b:52:58:ad:c4:b4:13:1f:b6:3e:9f:1a:bc:5c:f1:
                    1d:a2:55:3d:85:9c:be:ce:5e:d0:87:bf:60:26:e3:
                    d3:3b:fa:27:e6:f2:87:6f:8f:d4:b7:9d:37:66:56:
                    9c:45:1d:0b:38:23:f7:3f:90:88:f2:71:52:67:8b:
                    fa:32:9b:40:ae:c4:d9:f1:04:85:d1:9b:c2:91:2d:
                    bb:b6:89:d4:5b:d3:10:3b:e9:76:fe:77:67:01:ec:
                    2a:3b:a1:bd:77:10:15:6d:6f:76:b7:72:f0:e6:82:
                    84:d4:e3:66:71:4f:c6:4e:12:0d:dd:dc:0c:a6:f9:
                    1e:18:48:4a:29:8f:e9:19:05:75:59:5a:db:e9:36:
                    81:14:f9:94:99:9c:17:87:f5:83:11:3c:b5:02:03:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:75:4D:CB:E8:94:68:86:90:4E:77:43:F1:B1:2B:BB:04:57:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bed67d3-ef61-3aaa-b370-616b3bdfad65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.14.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:e2:fa:3a:3e:8f:5d:d7:2d:10:6c:b9:07:94:99:b1:36:
         0f:0d:da:09:01:20:62:c2:ed:7d:d3:d7:5f:61:92:df:e6:21:
         12:fa:a1:6e:6d:a5:b8:da:0b:98:cb:26:ac:bf:60:72:c8:19:
         11:66:30:8e:84:cb:52:30:d5:4e:8e:04:69:6b:6c:7d:65:9d:
         67:67:97:3d:35:db:23:04:af:78:a7:0c:45:1d:cc:70:f8:4e:
         bb:e7:ba:40:96:c4:84:aa:03:f0:3f:60:80:16:82:6f:b0:60:
         fc:a2:f9:c9:c6:89:a6:3c:b2:f4:6a:cf:01:14:17:c7:11:8e:
         18:a2:80:48:f4:d8:9a:8f:d4:14:7e:8b:b3:a1:fe:02:b2:67:
         bb:eb:ac:2a:36:da:70:0d:69:db:1e:0b:dd:ea:e0:cb:6a:3f:
         b9:03:a2:e6:14:02:48:40:85:ac:f3:df:de:8f:c6:8a:39:22:
         48:55:14:4a:a2:f6:23:25:b4:09:dd:d3:38:ce:b0:3f:d2:db:
         a6:a3:a4:55:a9:dd:80:9b:a4:c9:68:cf:c3:d6:40:ef:e2:72:
         3a:88:6b:8b:ae:f6:06:f5:e3:0d:06:9d:21:41:31:0d:15:1d:
         5f:e8:95:87:b4:6b:cd:61:bc:ae:9c:10:71:a4:ba:d7:d7:9c:
         17:d4:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:40:04 2025 by rpki-client