Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa
File:                     98d83296-cbe0-3c48-b055-28ee0ece2329.roa (raw, json)
Hash identifier:          UboKlO6CvM+b0CwwvgazUNDrO2w67OLYK5SUUbpmbt8=
Subject key identifier:   98:51:23:C4:05:37:A0:75:63:1C:86:2E:FF:E9:D1:24:97:F2:95:EA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00665307A63999EC7173180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.44.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:65:30:7a:63:99:9e:c7:17:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1ac6b350-bf17-4168-ae0c-f4d74d23ac81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:63:bc:be:24:88:1f:0e:e7:f0:fb:cc:f9:69:
                    e3:13:63:fb:9c:84:d0:d1:7d:fa:7a:85:9d:0e:46:
                    84:09:38:b2:08:8f:26:68:af:94:2b:c6:17:61:d2:
                    b1:24:6d:41:9b:e0:e8:20:4e:cb:11:c2:17:43:b2:
                    3a:74:f9:e5:3f:fa:5a:0a:76:90:d5:e1:4f:d7:0b:
                    08:e2:41:77:be:b6:03:20:19:ab:fc:aa:c9:ea:f4:
                    20:d7:78:37:ef:9e:84:ef:95:54:30:7a:c3:b3:34:
                    86:a1:a3:33:7f:50:8d:95:b4:94:c0:7a:b3:a8:bc:
                    74:dc:dc:66:6f:ef:c3:1b:23:3f:61:68:26:1f:5d:
                    1f:b9:9a:67:bb:4e:9b:22:37:1d:0c:3f:51:05:8f:
                    3a:fc:9e:9e:95:e0:4a:81:6b:50:ba:0f:56:6a:4d:
                    95:63:08:3c:e3:9e:de:66:63:2c:a2:8c:f0:cc:d9:
                    dc:7d:96:ce:05:9d:64:e4:45:9b:7d:90:d3:d8:7e:
                    84:13:3b:63:fa:41:c4:dc:66:da:64:5d:a1:10:fd:
                    97:88:fd:1f:97:ed:fd:8c:3a:1d:0c:99:12:ac:16:
                    56:58:44:12:fd:c1:1c:97:99:33:e4:78:42:90:ed:
                    71:cf:e6:ec:90:d7:03:6c:f1:8e:eb:be:39:30:ef:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:51:23:C4:05:37:A0:75:63:1C:86:2E:FF:E9:D1:24:97:F2:95:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:3d:78:60:07:72:df:28:70:7d:3f:ec:3a:06:0d:16:60:
         49:3b:ea:a5:92:55:68:b1:e5:1b:48:2b:bc:ed:a9:eb:a5:93:
         a1:b4:eb:67:50:1f:3d:98:11:79:c1:3b:de:a1:8c:2c:06:94:
         54:0c:d3:ca:05:13:af:62:63:28:d0:b6:6a:b9:f9:b9:bc:47:
         e0:e4:5d:c5:aa:41:49:d3:26:99:2c:a4:fa:4a:8a:76:20:28:
         ba:43:a5:d5:36:d9:48:43:b9:e5:b9:74:b2:49:37:f8:27:84:
         05:1a:75:4a:66:7f:3b:0a:fb:f4:80:56:0d:41:71:15:94:2b:
         8c:14:8e:3d:55:51:32:92:c7:2f:37:89:19:c9:e8:f7:db:a2:
         45:1d:f9:a7:34:dd:99:e0:4b:5f:6e:23:8b:60:fa:ed:35:16:
         28:8f:90:7f:a8:a4:32:52:ea:dd:65:2f:49:a5:31:27:d7:55:
         51:b1:18:9e:0f:8e:6f:3a:c0:f6:b3:e2:28:48:96:31:c4:c8:
         de:7c:fc:b1:5f:4d:d6:da:6c:e9:9b:f2:0e:ce:84:ec:58:ce:
         45:72:d4:80:bc:03:f2:2c:99:21:a6:99:91:93:76:ce:f8:44:
         6b:84:7f:2d:51:9b:62:82:29:5f:57:c8:c2:87:f4:11:7a:a4:
         d1:65:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:17 2025 by rpki-client