Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa
File:                     432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa (raw, json)
Hash identifier:          qDm8gMhJsDpUsVXD3lxer15oQeMttSKm1BIGwUYdBhU=
Subject key identifier:   CB:AE:1C:BF:19:C8:8E:B3:89:6B:EF:96:D9:AE:C4:8B:12:52:B6:A0
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F432858490CB17096313D618BA0F129A0
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     13462
IP address blocks:        140.98.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:70:96:31:3d:61:8b:a0:f1:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=4ea045a4-426f-4633-bfe6-a1529df09bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:2c:7c:8c:fb:d7:6c:dd:db:46:5c:d5:39:
                    ca:68:f2:2b:10:cd:77:1f:68:b3:96:7b:7f:b7:f2:
                    25:2c:b7:29:5e:6e:f3:bd:db:aa:56:42:3b:2e:25:
                    c8:5e:a1:d3:71:dd:57:11:cd:42:81:11:8d:36:74:
                    d9:56:82:2f:2d:6e:d4:8b:1a:d5:d8:01:d3:fa:70:
                    12:f5:e9:f8:9f:d4:24:0d:df:7f:ef:09:4c:76:19:
                    7a:fd:18:d3:24:48:17:a8:a8:af:e7:37:f7:2a:a3:
                    39:2c:59:f4:a8:dc:37:75:35:82:a1:4e:c7:31:6c:
                    45:e6:18:8d:e1:ec:74:8c:79:a5:72:b1:79:ba:85:
                    eb:67:2e:01:d5:74:de:f6:e1:fe:77:2b:a0:94:db:
                    d0:bd:fc:35:05:56:8b:7d:1c:c7:58:05:49:d9:4a:
                    98:a4:d9:be:a3:8b:b6:82:8d:b5:59:ed:d5:de:ad:
                    0e:51:64:a7:5d:fb:67:04:ed:57:9c:31:de:d8:da:
                    bc:99:bf:a0:9b:ed:97:d9:a8:ce:e5:a6:62:2c:65:
                    82:74:09:74:a9:c4:d2:f3:62:32:9d:b6:5f:26:6f:
                    32:5b:72:b2:8d:af:37:8d:f1:c7:b3:8d:59:16:45:
                    95:11:b0:93:9b:02:11:35:90:ca:ac:af:d5:68:80:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:1C:BF:19:C8:8E:B3:89:6B:EF:96:D9:AE:C4:8B:12:52:B6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:01:39:60:28:40:7e:d1:67:a3:41:ea:af:d9:cf:5e:a4:a4:
         d4:1c:8e:a9:d1:e5:fb:09:91:eb:92:5f:7f:8b:48:8f:25:36:
         a3:3d:f1:6c:9e:66:02:19:f3:57:56:60:8c:46:fc:34:e9:c2:
         25:17:6f:d4:ec:46:1a:5d:85:d6:2a:ac:f3:f0:65:45:9e:f0:
         12:dd:0b:d4:56:10:ad:da:2d:4d:1f:da:d6:aa:4f:b8:b8:c8:
         cb:47:d5:44:4d:a1:0f:d5:ab:bb:83:7f:42:cc:29:26:2c:28:
         fe:8e:0f:5f:b5:8f:10:9c:e6:71:6a:87:ea:5a:73:67:d1:42:
         d3:a0:a8:40:68:65:12:74:33:6c:6c:fb:eb:f9:36:d0:bc:2e:
         b0:22:04:36:02:87:b8:83:ed:e5:95:5f:21:63:c8:ff:5e:fa:
         51:34:76:61:3a:8b:31:22:82:e8:91:a8:22:7b:94:87:c6:f5:
         d6:42:ad:06:67:31:dd:da:d3:0f:70:41:16:6b:b5:8c:51:34:
         b7:85:ab:3f:7f:41:05:7d:bc:4b:52:5f:05:94:75:9b:f6:76:
         0d:93:1e:9e:79:f8:9e:04:69:5d:10:8c:40:c2:1b:c7:74:bf:
         3c:84:58:2f:eb:81:48:12:7b:07:47:06:98:0d:9e:14:4b:68:
         45:bc:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:41 2025 by rpki-client