Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098ae1e9-b59f-3b5d-b7df-ab8059192c65.roa
File:                     098ae1e9-b59f-3b5d-b7df-ab8059192c65.roa (raw, json)
Hash identifier:          XAirJkAI0wDyLU9c7sgh73r9FxS/km/eIATxB4jNbQc=
Subject key identifier:   C2:09:4B:C7:86:00:F6:D6:C2:8C:4C:A6:AB:FC:80:10:8D:B0:83:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43162A365A3354865841E9C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098ae1e9-b59f-3b5d-b7df-ab8059192c65.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.218.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:62:a3:65:a3:35:48:65:84:1e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=02ebd9a2-20c7-494c-849d-7cff53f6af3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ed:44:66:b8:d3:0d:96:a5:57:3c:a0:30:28:
                    09:d9:18:6c:e2:d4:1e:3e:d9:09:13:8d:d9:41:c0:
                    78:61:63:b6:63:39:b2:3b:a0:e8:74:f0:1b:b1:83:
                    03:74:d2:da:99:7f:f7:96:15:91:a7:f3:fe:71:a8:
                    2c:8a:c6:af:08:94:49:fe:a6:d5:fb:41:fa:34:64:
                    e8:78:71:c6:bd:58:72:87:08:84:4d:da:09:c5:4c:
                    fb:9c:41:e7:f1:62:83:c6:1c:d2:c5:8e:18:5a:ce:
                    6a:d1:83:45:da:3f:7a:14:b1:54:34:23:15:fe:63:
                    92:08:aa:21:66:65:64:6b:51:8f:19:1e:85:50:79:
                    e0:fb:9e:ad:2a:6e:20:c4:43:37:f2:f0:73:a3:99:
                    36:ca:a4:7f:b2:3f:62:f2:5c:db:89:a2:34:6c:11:
                    5d:b6:a7:d1:93:06:a3:f0:65:47:8f:f7:a4:9a:c7:
                    92:5e:f4:0b:35:6b:74:8c:9a:88:68:fa:d1:a7:fb:
                    42:3e:b1:d0:3b:3c:74:63:59:f4:c6:ad:cd:54:52:
                    12:d7:6f:42:d1:73:27:e7:62:bb:52:c3:4d:ce:85:
                    71:8a:60:f2:50:ac:1e:25:f0:51:31:c3:cb:32:6c:
                    8b:32:c7:93:5f:18:6b:f2:de:f4:b6:82:4e:ef:62:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:09:4B:C7:86:00:F6:D6:C2:8C:4C:A6:AB:FC:80:10:8D:B0:83:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098ae1e9-b59f-3b5d-b7df-ab8059192c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:e7:74:25:d6:f0:6f:cb:5e:6b:d4:61:bb:6e:3e:46:f2:
         fc:62:41:1c:27:59:ba:24:77:8a:b4:b8:54:b4:34:38:22:1c:
         34:83:e6:9a:65:43:a8:92:1d:e3:ce:9a:a4:c3:59:82:24:c5:
         78:ff:d2:bf:3b:74:02:f2:7c:fb:c8:0d:93:ba:54:7c:a8:34:
         4a:3b:56:b8:19:aa:1d:37:c1:04:dc:b0:09:ae:b9:77:86:74:
         23:94:18:7b:68:19:86:ea:8d:7e:fb:28:91:de:07:5e:cc:cf:
         19:e3:58:5d:ca:14:6c:72:24:fc:93:81:a0:82:86:1c:ff:ad:
         a4:1e:81:be:10:43:e9:9a:b0:5b:e8:90:48:a6:9d:c9:7d:96:
         14:ac:c8:a4:b6:d9:67:43:c5:14:5a:4c:c9:40:72:79:80:c5:
         ff:4e:46:8f:e3:f8:97:04:38:ee:76:b8:a4:a3:c0:15:c7:02:
         75:dd:74:f5:c7:eb:4b:b4:66:db:e7:5f:ef:b7:c9:f2:e0:14:
         07:a3:e5:13:41:7b:7b:b8:4c:40:25:71:d2:3d:05:d4:25:b4:
         2f:1d:e0:ce:03:4d:c1:11:db:f3:8b:f3:cd:9b:e6:e2:a6:5a:
         96:d6:32:32:81:ce:c3:b3:43:87:d3:b1:8b:4e:72:4a:7d:24:
         3d:02:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:16:15 2025 by rpki-client