Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d587cfab-85f6-3b49-ab86-f6a131b97b91.roa
File:                     d587cfab-85f6-3b49-ab86-f6a131b97b91.roa (raw, json)
Hash identifier:          1NuDTLA7XOdk54JgmA5jPTYz7379JzrqHUf72IUPJ24=
Subject key identifier:   D2:8C:ED:D7:3E:1A:00:24:1E:C6:DE:BA:FB:FC:79:4C:FE:E7:3F:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246D127D428332AA2B5DAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d587cfab-85f6-3b49-ab86-f6a131b97b91.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        98.113.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d1:27:d4:28:33:2a:a2:b5:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=00f1b68b-557e-4131-94c2-0e243e583840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:bd:3e:b5:14:de:8b:8d:3c:db:ef:e0:f2:
                    63:6e:86:61:f7:2d:b2:70:07:cc:53:ee:96:0b:ff:
                    74:5c:44:a3:7f:d5:47:18:88:38:83:aa:9a:4d:25:
                    4f:60:c6:93:b7:8a:44:cf:4f:7f:26:3e:1d:44:f5:
                    8c:29:e3:f1:45:e0:f6:ea:9c:ad:22:94:18:a7:af:
                    83:05:f7:c7:a6:2f:3f:1a:68:ff:fc:c7:60:e6:8e:
                    84:5a:7d:67:9f:e8:c2:9e:9f:f9:a1:d5:15:1d:69:
                    17:31:68:72:e5:a7:7e:05:bc:7d:c8:0f:df:1f:8f:
                    be:5c:4a:ea:50:11:bd:bc:c4:91:75:24:ff:5a:2e:
                    1f:f9:5c:db:e8:7b:c3:8d:87:3d:4e:98:07:d3:2b:
                    06:aa:ac:7e:1a:75:96:54:84:f8:0b:a5:14:cb:fc:
                    e3:97:01:95:5a:6f:76:1b:ed:c8:f7:9f:ac:f6:d7:
                    39:ed:3d:c8:de:0f:22:42:06:39:68:5e:65:e8:81:
                    0a:2b:95:dc:a5:22:fe:a3:2c:27:de:22:78:76:6a:
                    8e:f5:03:37:c6:71:b1:e6:6c:9b:be:ff:ca:be:cc:
                    51:ae:f5:4c:03:16:a1:e5:35:1c:38:e2:c9:a4:a7:
                    50:2e:c5:03:37:dc:51:67:d3:22:9b:05:a8:81:66:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8C:ED:D7:3E:1A:00:24:1E:C6:DE:BA:FB:FC:79:4C:FE:E7:3F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d587cfab-85f6-3b49-ab86-f6a131b97b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:53:86:38:46:f4:c8:03:4c:14:71:3b:ff:df:e4:a5:81:
         3f:ef:e8:b7:81:4a:35:91:b7:28:8e:fd:58:57:90:27:7b:20:
         41:92:d0:db:ce:97:1f:8a:1c:70:32:6f:df:c1:6e:f2:59:3d:
         c8:14:17:92:58:8a:af:bf:7b:d0:0b:a5:be:69:5c:4c:3d:d3:
         42:58:c8:1e:ee:14:39:09:9e:7c:c5:85:99:b8:af:3a:eb:47:
         44:c4:e8:88:05:a0:64:e5:ce:3a:37:7b:7b:c9:8c:ec:dc:b3:
         44:c3:d2:b1:05:62:8f:a0:42:dd:00:10:ce:e8:62:d1:c4:44:
         44:59:0f:f2:d9:e5:63:53:f5:e1:80:2a:97:80:33:db:85:24:
         77:f9:a1:5b:9b:93:ea:1d:7f:70:fe:8f:95:5b:e8:d2:c9:38:
         d5:17:9c:bc:ab:64:a8:2d:a5:96:86:01:50:68:50:5d:f6:f2:
         07:76:14:4b:f1:7a:77:5f:62:27:e6:3d:c0:e6:65:cb:77:20:
         22:b4:f7:48:7d:0b:89:7f:82:4d:90:0c:a3:c3:6c:73:27:7e:
         d4:1e:44:db:b0:41:9b:8e:e9:e4:65:9a:97:16:e0:0a:55:14:
         8f:21:05:c6:50:47:08:8a:56:79:95:34:57:c3:b4:40:fd:c3:
         71:92:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:38 2025 by rpki-client