Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
File:                     c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa (raw, json)
Hash identifier:          58udvU9AqtgMgCQvbF3391GMntqu4XSh+ezbz4pVhFE=
Subject key identifier:   4C:EF:54:C9:0C:5A:DC:31:C3:D6:1A:BF:36:C9:F7:75:2C:AF:68:30
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CDDD8FAD657154EB3B40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     19115
IP address blocks:        98.8.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:cd:dd:8f:ad:65:71:54:eb:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6e7723cb-82a3-4683-abb3-3a73d4da1b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:35:9c:4f:75:6e:c2:a6:da:03:05:4d:ad:
                    95:29:26:c0:f2:12:da:fc:98:0f:c6:4d:b2:8e:49:
                    6d:e5:b3:25:52:95:5a:4d:e2:d4:eb:98:d8:25:0f:
                    e7:cf:86:17:bd:95:3c:16:7d:56:e9:9e:4a:30:72:
                    94:ce:1e:b4:28:13:41:73:8a:3c:4b:3b:c6:6d:e8:
                    59:0d:11:71:10:90:ba:e3:48:3b:f9:08:a2:0a:39:
                    fc:64:8e:70:19:69:25:0b:b4:f4:6b:5e:ba:af:ae:
                    49:81:c5:3d:9e:2c:29:6c:b3:6d:9e:f3:15:9b:79:
                    78:9e:e4:01:57:5d:09:39:e2:53:31:2c:c3:66:4a:
                    f5:15:5f:f3:4d:d8:3d:f2:14:cc:84:bb:25:22:18:
                    b3:87:d0:e8:8e:09:8b:df:89:fb:41:75:b8:80:6f:
                    16:eb:93:b3:15:5e:84:85:dd:74:8b:06:5c:fb:eb:
                    b6:9b:d7:da:f6:56:c9:ed:9c:a8:22:e9:35:bd:78:
                    bb:eb:8a:39:e7:38:d1:9f:ec:c4:15:26:21:44:2f:
                    6f:a4:0c:2e:89:6b:8f:50:39:56:b1:a5:77:25:24:
                    fe:53:63:3e:cc:42:5a:d2:2a:9c:88:35:27:5a:06:
                    90:a0:83:5c:da:82:ee:ae:12:bb:df:34:2e:d3:45:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EF:54:C9:0C:5A:DC:31:C3:D6:1A:BF:36:C9:F7:75:2C:AF:68:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:0f:3b:d9:8b:05:4c:ee:72:e6:3b:4c:17:36:95:69:81:
         27:72:a3:47:43:d4:41:73:83:9a:6b:cd:1e:01:ad:d9:8d:98:
         10:94:09:e0:ee:16:3f:e7:aa:ce:49:2b:d4:64:50:58:b8:4c:
         55:ab:ce:a3:21:07:5f:61:7d:8f:a4:10:cf:f9:80:a5:04:2a:
         69:a0:8d:54:f4:bd:74:68:a1:30:36:8c:2c:88:a6:aa:cd:8c:
         e9:3b:31:4d:49:2d:22:96:97:30:f0:88:ba:dd:59:4c:22:4f:
         9e:78:22:29:38:5e:4e:bf:c7:91:40:ba:67:90:65:96:52:86:
         09:fb:07:df:7f:e5:75:bd:96:da:b9:c3:28:94:63:2f:70:74:
         86:ae:10:e3:8b:a8:3a:f4:02:2a:3b:e1:a9:aa:de:cf:2f:fb:
         ef:c3:43:36:91:c0:8f:18:64:02:01:c2:14:51:a0:5f:99:82:
         dc:22:07:3a:64:61:44:a1:27:af:57:28:af:63:2b:c0:10:08:
         6f:36:10:db:f9:40:8d:64:63:37:7b:66:83:bf:53:37:e0:af:
         7c:06:fa:24:0a:4e:9d:a0:61:63:2f:3a:54:a0:fe:f9:d2:84:
         a2:d1:2a:22:ee:d7:13:3a:a3:ae:e4:ac:a4:f9:e1:b8:c3:93:
         85:df:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:39 2025 by rpki-client