Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
File:                     c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa (raw, json)
Hash identifier:          aeiZnOhzUX0AsAoHI2UXItH8lC3X7EiNJtG+viKiL+A=
Subject key identifier:   58:07:EF:16:EF:3C:E4:40:A0:22:5F:F0:37:ED:4F:47:4A:F7:E4:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE052F3232907D60FEF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     19115
IP address blocks:        98.8.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e0:52:f3:23:29:07:d6:0f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=119bd3e9-2b8a-4077-94b7-4f785f78b3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:0c:5c:f6:05:11:38:57:a3:ad:70:3d:e9:
                    a1:bb:f8:8d:bd:ed:c6:4e:54:01:d9:8b:9c:42:73:
                    9b:b6:a5:9c:58:3b:8b:93:ac:b4:41:18:00:a4:69:
                    a2:36:63:96:ad:b1:9e:86:0b:76:16:9e:b7:a2:c6:
                    11:e3:f0:27:c1:2f:5f:11:0a:41:b1:90:86:11:ff:
                    88:2c:e6:6a:14:93:71:79:78:4b:fd:bd:b7:66:5c:
                    bc:ca:cc:1a:f8:30:f4:27:4c:97:f8:39:97:c4:a8:
                    a2:69:54:87:a0:f5:8b:0a:c3:ed:03:75:c3:67:2d:
                    9f:ec:53:97:d3:30:ed:45:d4:56:a1:29:da:be:85:
                    67:92:38:ff:71:28:d0:c1:da:1f:b3:c6:91:3d:e5:
                    6c:7d:7b:2e:20:ff:8e:23:90:44:e8:1f:5b:8b:97:
                    12:a4:9b:89:33:09:11:07:c7:27:ff:0f:13:7f:7c:
                    ba:46:ae:7c:75:96:d4:df:a8:97:97:da:e4:1b:fc:
                    d2:37:38:51:7e:61:51:83:1a:51:17:2c:6e:d1:49:
                    76:ac:38:d2:6b:59:ed:cd:a7:08:b7:a1:30:5b:9a:
                    f8:66:6b:33:42:3c:17:cb:8c:53:e5:1d:7a:a3:22:
                    51:eb:cb:28:99:c5:54:cc:f5:7c:17:e1:48:6c:74:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:EF:16:EF:3C:E4:40:A0:22:5F:F0:37:ED:4F:47:4A:F7:E4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:22:dd:cb:bd:ec:31:63:b6:8d:42:9d:37:fe:a8:91:37:5b:
         b0:de:33:22:2d:13:d0:0e:af:f7:ac:c3:3d:54:a3:96:25:94:
         a6:27:ad:6c:13:4f:d2:88:d1:25:bb:e5:f7:8b:e1:10:0b:f9:
         c5:95:df:11:e6:eb:49:d6:57:dd:67:32:23:99:ad:c2:61:96:
         3d:63:e9:a6:74:d9:82:f2:11:c9:09:ea:48:33:66:2c:0f:9b:
         30:8d:12:c6:29:2d:41:c8:96:13:dc:0d:9e:90:f4:1e:4c:d8:
         6d:fc:70:23:5f:b6:ac:ce:d2:41:6d:d6:b1:37:36:80:e9:1e:
         f6:76:4b:f3:fc:6d:58:f9:69:76:ee:5e:d1:2f:32:a7:ad:a0:
         8a:f2:b6:76:6c:ca:92:b4:fb:3f:5f:91:88:c8:59:72:3f:7d:
         25:f9:1c:01:e8:83:0f:89:e3:96:e6:cb:aa:e4:70:46:3d:80:
         26:0a:38:06:b6:ec:e5:60:dc:f0:aa:36:d6:4b:e9:fa:cc:0d:
         4a:8c:88:26:2c:56:8c:35:70:13:f9:66:74:be:e7:a5:01:87:
         d0:e7:d0:d4:24:aa:c9:c2:8c:ca:7b:d2:5a:56:b3:da:98:e7:
         27:2e:b0:e4:5f:36:32:81:cd:9e:1c:4a:79:e4:8b:b3:67:f3:
         9b:25:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:51:44 2025 by rpki-client