Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/92cfbf9a-a62a-32a5-b901-bee09fee1072.roa
File:                     92cfbf9a-a62a-32a5-b901-bee09fee1072.roa (raw, json)
Hash identifier:          ZAN3LDjgrXHm8FfwI+ft+0oD0cFJ8g1PsuGSvVA63pU=
Subject key identifier:   19:2D:C1:1F:DC:2B:11:8C:DF:47:19:45:E5:9B:8B:F4:80:FA:93:5E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858490881700568FC15495EFDEA00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/92cfbf9a-a62a-32a5-b901-bee09fee1072.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     198983
IP address blocks:        172.86.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:70:05:68:fc:15:49:5e:fd:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=8fc1a261-6458-41a1-b00b-03ca66d80468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:b1:67:00:72:f4:9b:67:28:1d:f2:4a:1a:
                    73:d6:e1:bb:be:98:f8:e0:09:ab:b4:5c:28:93:21:
                    4c:60:16:9b:aa:d5:0b:fe:4c:c0:5f:51:99:f4:68:
                    8c:57:16:e5:90:8d:12:e7:da:31:9b:2a:90:51:a7:
                    1e:48:e2:36:4e:24:ce:76:23:bd:82:1e:4f:4b:59:
                    ff:99:c5:87:42:a2:87:f8:b9:1b:30:4f:c8:19:5a:
                    7d:ad:5b:f5:34:7e:5e:74:bf:26:9a:26:ab:ef:02:
                    b5:ec:0e:9f:a3:67:0e:5f:ae:17:3d:43:5d:a1:67:
                    50:33:f8:86:78:f0:0e:61:03:90:b6:92:61:2b:19:
                    05:38:dd:42:63:5a:49:b5:d4:f7:64:92:0d:37:18:
                    82:be:1b:ef:9c:40:7c:d6:10:f3:3b:7d:7c:63:73:
                    cb:11:5e:e7:78:7b:3e:65:3e:81:53:d9:51:31:09:
                    2d:61:d1:cb:e4:6e:8d:3e:b2:44:5d:a6:a7:3e:56:
                    2c:fa:f9:09:c9:87:04:71:05:d7:03:e5:af:59:72:
                    80:67:26:3f:bb:bd:60:3a:54:51:b6:46:f3:fc:91:
                    da:52:ce:b8:dc:56:f7:96:2d:ff:8a:8f:8c:bb:6d:
                    a0:e7:52:11:47:b2:1b:7e:fd:57:23:ad:66:7a:17:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2D:C1:1F:DC:2B:11:8C:DF:47:19:45:E5:9B:8B:F4:80:FA:93:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/92cfbf9a-a62a-32a5-b901-bee09fee1072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e9:01:a5:a6:83:72:70:fd:5a:69:bb:e2:77:39:22:b0:2e:
         a4:1d:ae:98:51:4e:bd:12:f8:39:be:95:01:a5:60:8a:7a:3d:
         1c:3c:cc:13:91:61:d5:15:a7:8b:e1:54:11:7d:c3:4b:8a:73:
         69:a1:b7:53:63:26:a4:53:ca:f8:a5:e5:8e:69:81:8e:8e:c4:
         58:4d:38:43:74:37:4d:82:96:55:2a:26:9a:52:e0:6e:3b:ee:
         79:21:10:a1:b3:bb:a7:50:d5:4e:4a:60:f3:a9:10:b4:90:9d:
         63:8c:35:ce:e4:83:5b:5f:9e:8d:7d:86:c2:8d:7a:d1:84:5a:
         7e:e0:40:e2:ee:7f:7a:a8:54:ec:18:98:da:2c:e1:1d:6e:c9:
         63:34:a5:4e:09:91:d8:ff:33:16:54:95:12:0d:48:2c:b7:d3:
         b4:d1:d0:64:80:38:71:9b:74:d2:5a:49:e2:e1:75:dd:ea:07:
         b1:24:07:bb:3d:57:f9:19:a6:ee:1d:ef:d9:93:de:79:2b:d9:
         41:e1:06:ba:1c:44:84:3d:53:17:49:de:07:d0:6b:ca:2e:ea:
         52:67:cd:93:7f:3d:42:d1:cb:1d:fa:cd:5d:cf:ba:4d:41:da:
         b7:87:6d:21:fc:7c:05:a6:78:58:dc:60:3b:46:ef:46:7c:3a:
         a7:0b:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:16:50 2025 by rpki-client