Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa
File:                     94db8629-2876-31c3-a4a8-c3035a36f079.roa (raw, json)
Hash identifier:          PgYp+lpo/YZV+PnwWvkeexRnofcqFa43/wyo3T+a5eg=
Subject key identifier:   0E:CC:40:E6:65:77:90:F0:BC:55:09:25:84:34:D6:A1:69:9E:1E:65
Certificate issuer:       /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
Certificate serial:       010D0C9F4328584924D35F92C76609C394264C80
Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa
Signing time:             Mon 10 Mar 2025 17:28:49 +0000
ROA not before:           Mon 10 Mar 2025 17:28:49 +0000
ROA not after:            Sun 08 Jun 2025 17:28:49 +0000
asID:                     14618
IP address blocks:        216.153.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:d3:5f:92:c7:66:09:c3:94:26:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
        Validity
            Not Before: Mar 10 17:28:49 2025 GMT
            Not After : Jun  8 17:28:49 2025 GMT
        Subject: CN=0d22a35d-f45a-49f7-a482-1df105eda90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:c0:7e:42:95:4d:c0:d7:3e:db:e3:88:00:
                    31:aa:cd:31:3f:e0:5d:72:96:dd:75:48:3f:70:26:
                    33:b7:b3:6b:d1:63:99:8b:c0:f1:6c:61:2c:61:41:
                    c4:b3:ac:98:b8:b1:2a:d7:19:d2:a8:9b:07:53:83:
                    60:8a:6e:ee:5d:52:c9:10:00:44:ce:ce:26:c3:0d:
                    ea:69:79:dd:14:d4:19:b6:d7:cc:6b:6c:f3:ab:04:
                    8b:88:20:b6:fa:0d:1a:87:37:ed:1b:fe:79:18:20:
                    0b:01:8f:af:4b:b7:be:47:fa:a4:98:27:4b:d2:08:
                    cd:7a:6d:b2:95:9e:a7:40:37:b3:38:02:72:ab:cd:
                    34:71:95:a3:6e:44:cb:a3:83:81:0a:68:80:fd:dd:
                    4d:f4:51:72:1a:8f:b3:a5:91:35:31:4d:d6:ef:32:
                    ee:b0:ac:77:8d:06:11:d9:29:cb:24:37:55:ad:cd:
                    c9:85:2b:b9:a8:f9:2e:21:4b:d9:f3:9a:5f:65:21:
                    96:ea:27:98:39:14:27:37:6f:ca:01:b3:0b:59:bc:
                    82:c9:8e:05:ea:97:c5:fa:fd:f0:60:d8:d6:39:f6:
                    f9:ab:aa:4a:64:4a:f7:90:03:39:17:20:e0:eb:6f:
                    ca:5f:4f:a9:60:c9:a5:44:7b:88:e7:4c:3a:6f:14:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:40:E6:65:77:90:F0:BC:55:09:25:84:34:D6:A1:69:9E:1E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl

            X509v3 Authority Key Identifier:
                keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:12:c9:24:d6:fc:e9:84:2c:f2:e4:49:25:ad:13:02:bd:
         54:3b:90:3c:94:b0:65:ea:8a:a9:0b:42:df:3d:2f:d0:5a:68:
         ca:4c:59:cc:6b:87:fb:61:e7:4e:d0:ce:d7:c1:68:21:b6:c0:
         5d:07:73:24:93:f0:0d:4f:07:47:0a:4e:18:fd:82:af:6e:c9:
         2c:39:dd:14:27:6e:b1:9c:58:87:71:16:e7:75:0d:09:c3:04:
         93:b4:6c:61:5e:1b:94:63:54:3e:f1:45:bd:7f:41:ff:fc:20:
         57:de:b8:7c:10:15:f7:95:8d:02:64:c8:33:35:7b:b9:a5:fe:
         c3:d9:9d:1a:9f:ad:7a:86:7c:54:25:43:d0:0d:fa:94:c4:cc:
         d3:73:b2:ca:52:ba:25:18:6c:7c:23:36:53:60:2f:26:fc:b0:
         fe:38:5a:6e:b3:9c:80:1b:4e:80:2c:9b:71:e3:4f:a5:ca:bc:
         8b:9c:80:2f:83:f4:3d:37:1b:d6:82:be:f5:20:2a:a2:2c:df:
         b2:3e:54:c8:26:4a:c8:70:40:41:82:a7:e8:d0:18:80:ad:c9:
         69:45:66:e0:ae:84:89:e8:d2:2e:1b:00:ca:62:03:30:e2:bc:
         db:cc:19:66:44:db:8c:b4:f1:20:01:53:4a:0e:f9:ae:1c:66:
         e3:ca:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:25 2025 by rpki-client