Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa
File:                     161f850d-cb53-3750-9d41-e3214c40e3ba.roa (raw, json)
Hash identifier:          GM5NmwhEVAIxz0RiLrMCpoJJJjUuYscnw7+fizgVRJI=
Subject key identifier:   F1:CB:3D:DD:84:C3:C4:D2:41:E8:94:FE:C8:51:B7:B6:2D:47:FB:7F
Certificate issuer:       /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
Certificate serial:       010D0C9F43285848E006517CC2769A80CB7D6A00
Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        216.153.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:51:7c:c2:76:9a:80:cb:7d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=919beaa5-ebf4-44bc-ad60-11c1d10a692b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:94:31:0a:10:ea:96:46:89:25:26:3f:fd:
                    af:ff:56:78:6f:0f:5c:42:b3:72:50:44:25:db:e1:
                    3a:c9:0e:a2:f3:8e:e6:f9:18:79:52:e8:48:78:6b:
                    f6:9a:92:5e:7e:06:90:06:dc:4d:bf:72:d2:10:d6:
                    47:53:98:3b:bd:59:90:d9:ef:a0:52:80:43:c7:3e:
                    ce:c8:35:e3:93:8d:54:42:e1:38:cd:8a:50:a1:80:
                    82:ab:65:25:39:99:3a:1f:5a:20:60:6b:2b:e4:ae:
                    3f:de:1e:06:aa:b7:eb:9a:37:c4:5e:ef:9a:13:5b:
                    3c:d6:c0:e9:a8:e2:01:82:b7:5c:1c:0b:6c:87:9c:
                    31:1a:62:04:0a:1c:87:3f:6b:46:31:64:51:a4:25:
                    54:7e:58:bb:ab:4d:1b:1c:04:0b:85:25:cb:13:d8:
                    3a:3c:8e:5a:2d:10:d8:94:93:79:15:35:5d:1b:d5:
                    00:b6:53:90:5c:8b:e4:b0:e8:2a:bf:5c:90:04:aa:
                    23:26:1c:ef:15:d2:23:c9:d6:1a:39:13:1d:18:89:
                    6c:83:b3:79:bd:87:ff:8b:64:44:90:41:47:a9:6f:
                    6c:87:9f:b0:2a:42:fe:b9:4a:b1:31:c0:97:b4:76:
                    da:06:85:b8:3b:f8:72:86:66:42:fe:04:32:d7:02:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:3D:DD:84:C3:C4:D2:41:E8:94:FE:C8:51:B7:B6:2D:47:FB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl

            X509v3 Authority Key Identifier:
                keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:16:76:de:88:5a:e9:9a:ff:a9:ea:db:1b:28:4e:8a:1a:3a:
         58:53:94:6f:9a:fc:fc:f8:10:e0:0a:6b:c8:91:96:e5:69:0b:
         d8:20:d2:66:20:a8:05:b0:d8:9b:93:90:51:2b:90:7b:93:af:
         e2:7c:73:25:59:b3:10:57:46:f8:c9:72:aa:a6:2a:6e:90:7f:
         d3:4e:3c:4d:cc:3e:71:18:61:85:1a:b3:3b:f8:22:bb:b2:d4:
         03:0f:ed:20:a9:c0:18:52:44:14:72:fb:26:31:10:d9:5d:52:
         79:39:41:2f:3c:7f:14:ae:c8:0d:d9:77:65:3f:b9:45:fe:ec:
         54:23:d3:74:95:22:87:3a:bc:5e:2d:2f:27:32:b2:2a:8c:d9:
         d3:8d:16:d9:b1:7e:5d:9e:45:d6:9d:67:51:b9:c1:5b:6c:27:
         6c:14:9f:eb:8e:0b:d1:57:af:64:cc:37:55:20:95:3c:18:b3:
         a6:d0:c2:27:ad:1a:03:c2:2f:8a:d7:78:01:72:7a:c6:1e:dd:
         75:47:c2:d4:59:2c:d4:14:7d:f9:31:6d:56:c1:0a:35:30:0b:
         a9:cd:e8:a7:0e:fa:87:b0:33:fc:12:48:23:a8:e5:1b:ad:82:
         a8:cb:60:fb:6c:ef:d7:5b:94:7b:35:4d:f9:b2:37:9f:53:c9:
         db:56:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:42 2025 by rpki-client