Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/babd91e3-db38-39bc-9f04-ba41e5f94416.roa
File:                     babd91e3-db38-39bc-9f04-ba41e5f94416.roa (raw, json)
Hash identifier:          Q52ElgCPzsBXfVvVdrt/dpqdkjjKIJczGzm5Fn47ovo=
Subject key identifier:   E3:0D:11:8C:AA:B0:7E:C8:0C:40:FE:33:C7:13:85:0D:0E:C3:28:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85FAFE8529E7DAF428F7D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/babd91e3-db38-39bc-9f04-ba41e5f94416.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     36183
IP address blocks:        172.224.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:af:e8:52:9e:7d:af:42:8f:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=fee14243-5f21-4f3f-826b-74bcc7d591f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:06:dd:7e:8b:0c:33:3a:f0:31:20:d1:31:
                    5e:3c:6a:6b:02:58:70:a5:ad:e9:02:56:b3:f8:8f:
                    c3:fb:6d:04:a7:76:c7:ef:8d:c9:c9:cd:da:76:e3:
                    f5:ea:95:25:ff:18:d8:1f:e3:22:8b:fc:49:2f:53:
                    16:ec:d5:95:2d:0b:4c:d9:3b:11:17:76:bc:52:d3:
                    15:4d:2f:a5:35:a6:2e:7d:7b:58:9d:c6:5d:17:a2:
                    31:db:bb:16:b2:6d:92:81:fe:76:09:b6:f8:ac:c0:
                    03:2b:3d:d6:b1:83:ee:7d:98:b0:1a:b2:3d:4e:0d:
                    fc:32:a1:58:fc:4d:bd:11:cd:82:ef:43:c2:ba:e9:
                    8c:74:2b:d9:8c:97:d0:aa:f9:94:3b:7f:71:c7:cf:
                    38:68:5e:b6:f4:6d:50:4a:03:c5:c9:9f:29:78:d7:
                    35:30:97:5a:e3:8f:da:db:fc:b2:bd:94:7f:de:94:
                    98:f7:92:ca:f4:05:8e:e6:e6:fa:9f:28:78:b8:d4:
                    27:58:13:1e:79:b6:be:2b:6b:28:a5:f1:30:ed:86:
                    d8:0a:23:9e:d6:03:1e:7c:ed:28:93:fc:d0:ab:ed:
                    6a:59:a8:b6:c2:9d:59:29:87:b7:b6:51:06:ec:88:
                    2b:64:3c:f6:9c:3e:aa:29:e7:09:de:3b:a7:97:eb:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:11:8C:AA:B0:7E:C8:0C:40:FE:33:C7:13:85:0D:0E:C3:28:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/babd91e3-db38-39bc-9f04-ba41e5f94416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:87:8d:d7:6d:f9:c5:b8:6b:14:47:8f:b2:7d:4e:35:e7:e2:
         6d:a2:10:ca:b9:7b:be:b5:f2:c1:63:bb:9a:79:64:b7:95:36:
         89:fa:06:ff:af:e7:43:c8:5d:4a:78:70:41:a4:5e:90:35:fc:
         b6:08:46:ed:f8:34:47:e2:f8:4a:47:04:6c:01:e6:8d:e3:af:
         38:3a:62:14:67:32:7d:aa:e8:e0:ae:fc:6a:c0:97:85:64:e9:
         32:19:33:a9:c3:68:de:0e:a2:6a:8e:27:91:1f:70:96:fd:eb:
         46:29:6f:e6:39:0e:70:2d:22:fe:cc:25:3f:e8:f9:f7:15:dd:
         18:a2:13:d4:1a:b2:e1:2f:f7:40:5b:ec:56:e9:b5:e7:e2:f6:
         17:8e:65:bf:9e:22:7d:f0:f6:6a:f7:3f:22:b9:dc:18:4f:c3:
         f3:a0:cf:10:f3:a5:9c:d6:2b:5f:35:60:65:d4:85:69:38:e9:
         ed:43:23:f4:a7:5f:51:8d:6c:97:a0:14:2b:98:90:ac:88:ab:
         0f:75:71:ff:c8:e2:ca:95:24:e1:de:16:07:2e:20:a9:d4:67:
         f4:9e:06:81:fb:7d:f4:ce:0a:2c:d5:7e:56:96:ad:8b:6f:91:
         69:5b:a9:78:ba:fd:01:d8:49:04:71:48:4b:85:7f:b1:11:a5:
         c9:51:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:51 2025 by rpki-client