Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa
File:                     4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa (raw, json)
Hash identifier:          zfl/zbJbnW59hON9m5OrL16kFT1BEWhDmGjU8U7u2SU=
Subject key identifier:   9E:F6:40:5A:D1:0A:FA:B0:F5:60:53:F9:DC:71:47:25:00:6E:8E:7B
Certificate issuer:       /CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
Certificate serial:       010D0C9F432858490CB166B65F0998954F485DA0
Authority key identifier: 33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     30001
IP address blocks:        208.64.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:66:b6:5f:09:98:95:4f:48:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=fade1b97-ba46-4e51-aeeb-20bdffcd457b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:10:77:32:b3:cf:60:03:5a:be:b0:d1:28:
                    96:f0:1a:e1:af:63:b2:69:38:05:f6:1c:57:24:e3:
                    6d:c2:85:b6:8a:fb:85:90:8a:63:06:a0:1d:f5:3c:
                    3b:98:b8:f0:09:9b:a2:d5:6c:c6:1e:c2:07:5e:98:
                    b1:6b:56:1d:a6:4f:4f:3c:af:d1:94:c7:47:ad:5c:
                    c6:83:4c:56:d9:55:09:2e:d2:ba:01:34:e4:81:84:
                    88:d7:a7:b4:3c:03:e5:b9:28:b1:eb:64:47:b1:e0:
                    26:61:e0:9c:ff:1f:a6:e4:bc:49:de:f1:04:9c:42:
                    78:21:f2:ce:84:9c:16:e5:5f:aa:b6:09:19:49:c9:
                    db:9d:2c:d9:c2:b3:84:b9:9f:0f:c9:b7:44:ff:f2:
                    4f:a5:67:c6:c8:5b:21:87:a7:7d:81:07:55:0c:66:
                    3c:a4:c5:3f:76:32:cc:be:f2:4d:e1:e3:fb:46:f6:
                    03:be:a7:88:89:79:dc:97:ca:aa:a2:27:64:cc:ce:
                    1b:f5:e9:48:db:bb:36:1d:9d:95:6c:b1:46:2e:35:
                    40:a9:e1:a3:88:08:a8:ea:62:0c:9f:66:36:11:1f:
                    8c:18:41:75:98:ad:8c:d7:4a:89:ac:ec:29:16:3e:
                    cf:b8:31:ba:1e:3d:7b:9b:26:e2:0d:aa:53:0b:86:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F6:40:5A:D1:0A:FA:B0:F5:60:53:F9:DC:71:47:25:00:6E:8E:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl

            X509v3 Authority Key Identifier:
                keyid:33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:f7:0b:b1:c2:50:7a:bf:1f:6c:83:dc:31:44:d6:a1:68:
         d2:03:72:07:7e:9c:ff:e5:ed:58:bc:68:da:85:b2:62:83:93:
         56:2e:c9:22:41:fc:b5:1f:cc:c1:c5:69:a1:c7:03:1d:d9:4b:
         be:e0:10:41:c0:8c:ca:c7:74:bd:b6:04:c9:5e:7f:cd:90:5c:
         f6:f6:31:5a:d6:9f:04:20:11:0f:61:9a:a9:87:72:82:31:d7:
         8e:c9:b4:13:e6:34:94:ab:7a:90:5b:6b:f8:06:ba:42:15:ca:
         72:46:17:66:61:37:87:f7:4f:c8:0f:cf:bd:28:4f:bf:92:7a:
         66:3a:8c:34:0e:ea:fc:28:a9:66:f5:22:25:d4:d1:59:1e:d9:
         1e:fe:f2:0b:7f:fd:d5:e4:49:bb:99:cf:ad:80:5d:4f:5d:28:
         ff:10:3a:57:e8:90:f0:09:74:7d:9f:91:6d:0b:84:1c:1c:a9:
         a2:ec:45:a7:be:24:94:46:05:e6:a1:7d:61:8f:8a:64:86:ec:
         46:fa:a8:c5:82:14:3a:52:1b:46:67:49:40:dd:f3:28:b9:b2:
         60:1d:64:c9:d4:06:7a:14:84:6a:a6:cc:be:44:06:b5:1d:45:
         be:13:82:ea:51:d9:10:0f:5e:cb:94:49:7e:ea:de:77:3b:51:
         f7:a7:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:18:28 2025 by rpki-client