Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa
File:                     500c5bf6-3565-3f91-9cf6-0035394891a6.roa (raw, json)
Hash identifier:          alRh/RkYWHCrkmYF1r3ySTidw6M/sXUa26sFFPwiA5Q=
Subject key identifier:   E5:8B:9C:88:60:FC:42:A4:DB:D8:03:2E:5E:A7:2A:50:F5:7C:96:15
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849C904F5BA4D98115612D09880
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     30823
IP address blocks:        172.86.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f5:ba:4d:98:11:56:12:d0:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=5484eec2-4ac8-40cf-a90f-7351b5710a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:46:4f:da:79:99:6c:ca:4c:81:eb:1b:84:
                    26:01:f1:d3:6e:ab:08:b2:f6:d0:1e:46:1d:27:60:
                    c4:62:53:b4:8c:9b:85:63:45:59:10:65:66:ac:4f:
                    34:cb:79:d8:c4:b1:2b:0b:a9:95:fe:8e:ce:f5:02:
                    09:d0:2c:74:d8:70:49:1c:cb:05:b5:59:a8:28:86:
                    56:77:a5:58:83:bd:7b:78:64:7f:3b:9b:b1:b7:9b:
                    73:19:ab:5f:29:ad:65:07:61:19:99:97:64:c2:99:
                    10:47:dc:de:7e:91:b6:92:3a:7f:79:e4:87:43:5e:
                    89:6e:87:b5:3d:a7:c6:4b:42:60:c0:cd:53:3f:20:
                    03:10:e7:0f:09:6b:f0:e2:44:6f:97:cf:e2:b7:42:
                    ff:93:64:a4:17:ed:1c:db:1c:04:ad:6f:28:58:69:
                    ad:7d:7f:18:fd:a4:1b:7c:ba:ca:f6:fc:13:7c:2d:
                    76:03:e2:19:96:01:82:9b:63:5b:4f:a0:3e:8f:ea:
                    d0:a9:85:62:66:60:9e:62:19:2b:13:6d:c7:5a:1e:
                    98:06:6c:d6:5b:85:6c:dd:4d:a6:01:61:1f:b1:78:
                    d7:6d:c5:aa:5e:2f:18:8f:60:af:89:f5:d2:6b:8c:
                    c6:b7:a2:24:11:30:95:69:a7:f1:e8:c4:4c:6f:c2:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8B:9C:88:60:FC:42:A4:DB:D8:03:2E:5E:A7:2A:50:F5:7C:96:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:59:d0:f7:44:fb:f8:67:e1:45:a4:b8:b5:30:9c:00:15:8a:
         d0:e3:7f:e6:68:82:e5:2e:34:b0:b1:3c:0c:c5:33:3b:54:58:
         58:32:51:1b:a0:ee:5e:d8:ef:03:e5:99:ba:0f:a0:82:78:e0:
         dc:9d:44:e7:bf:b6:75:b1:d8:07:7f:5d:0a:91:e2:f9:a0:81:
         ac:5f:17:21:0c:0e:ca:51:56:48:01:82:b3:e1:23:be:d8:3b:
         44:df:69:13:76:1f:11:7c:d7:10:d1:da:32:c9:14:f7:62:ae:
         76:43:7d:71:9b:f6:ab:cf:28:83:56:05:f0:78:ab:c8:d2:42:
         b4:ca:05:a2:52:48:59:a4:e3:8d:fa:25:02:1b:d8:9c:1a:5b:
         cf:93:18:4b:6e:ed:fe:6f:a0:aa:bc:d3:bf:e8:be:4a:e8:4a:
         b9:2e:34:a3:63:6d:15:89:0f:91:97:b6:36:7b:0c:03:5c:c5:
         06:c1:05:0a:a8:19:31:ee:09:c6:ec:d4:78:3f:54:bb:a1:1d:
         f3:48:7c:a6:a1:91:56:46:c6:2d:18:a8:fe:03:b1:63:38:cc:
         e6:48:13:41:a8:a9:c7:1d:8a:0a:0f:75:c7:dc:8f:dd:61:0b:
         0c:01:8c:eb:59:3a:aa:08:67:f1:47:53:67:42:20:38:b2:b8:
         b1:3c:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:14:21 2025 by rpki-client