Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b6a40d6-d81f-3197-bb7a-b9d18e2664db.roa
File:                     9b6a40d6-d81f-3197-bb7a-b9d18e2664db.roa (raw, json)
Hash identifier:          v6g2G+ateb3GAqEpEzmk2juCydpjcQ972zaQ4Bo1fos=
Subject key identifier:   63:8F:FB:0B:EA:6D:38:6B:E5:0A:3E:C2:23:CD:4B:07:E3:77:2A:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4327845BF4300C928851A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b6a40d6-d81f-3197-bb7a-b9d18e2664db.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.199.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:78:45:bf:43:00:c9:28:85:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=74f62ce8-a02f-42b0-a44d-c9187a510ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:d5:fe:6a:63:b0:94:49:47:d8:fa:e0:1c:
                    fb:ae:53:d0:ac:75:fe:fd:de:1b:bc:1f:ec:ed:fe:
                    d9:10:d7:5e:9b:28:04:e9:4a:2c:34:68:a1:cb:22:
                    da:f5:3e:de:63:da:07:5c:a7:ca:ed:b5:56:a1:60:
                    37:21:0a:99:6e:3d:d3:ae:11:3e:70:6f:7e:81:87:
                    ef:11:46:82:56:8a:d8:bc:44:92:f3:5b:47:ee:65:
                    5e:11:96:52:5c:27:68:9b:a8:88:9b:c0:67:da:7c:
                    5c:72:ae:c5:aa:b8:6b:e7:fd:4b:6f:38:b0:ce:1b:
                    f2:d4:41:df:4a:1d:d3:2c:f0:3d:5f:5d:49:18:b5:
                    d6:8a:89:69:58:b5:dc:1e:9a:03:3e:71:f0:59:2b:
                    9b:9b:ce:7e:b7:49:a1:b9:ba:50:8f:b4:d4:f2:fd:
                    2f:2b:86:6e:f2:57:6e:9b:cb:32:da:4b:c4:ec:d7:
                    a1:ac:9c:95:bc:f6:d7:0e:63:e9:b4:5a:0f:ee:0b:
                    38:27:80:69:8c:26:8c:b2:f6:8a:81:29:f1:9f:6b:
                    33:7e:1b:fa:74:9a:ab:91:a6:52:fa:77:41:f0:0b:
                    e1:45:fd:ea:03:9a:16:e9:61:9e:80:c5:41:85:25:
                    51:8b:b9:e1:a8:f8:12:47:64:a1:de:63:d7:8a:78:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:FB:0B:EA:6D:38:6B:E5:0A:3E:C2:23:CD:4B:07:E3:77:2A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b6a40d6-d81f-3197-bb7a-b9d18e2664db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:ba:f8:34:5a:43:bb:80:76:17:52:3d:f9:a4:f4:ce:3e:9d:
         63:8e:2b:54:ce:ad:00:ad:cc:f0:4f:3b:ce:a2:e3:e7:62:39:
         52:58:5f:c8:78:bf:53:11:93:55:92:c6:3c:b1:ab:ac:73:70:
         36:5c:57:90:fa:b9:c5:02:c0:a1:52:48:99:ee:1e:8f:5f:16:
         22:02:8f:54:aa:5c:a9:ae:07:db:2a:ab:8a:be:16:6d:38:fa:
         49:df:c7:70:1d:3e:e9:40:3a:d1:f9:4f:5a:a6:6c:2d:10:34:
         a3:f4:7a:8c:06:6d:35:e8:4f:e8:86:77:db:e4:07:97:9f:52:
         0c:56:00:2a:35:fa:55:29:d5:36:8e:6b:7c:8b:e1:be:fa:d6:
         e3:8e:6f:ac:68:be:66:84:62:dc:60:f0:f6:ae:01:91:8b:0f:
         56:fa:7b:0e:6f:3c:ce:cd:5c:66:c7:59:bd:bb:2b:29:5e:fa:
         f0:a1:d9:6c:70:f7:5e:56:18:91:8b:19:e1:7e:57:2a:6c:f5:
         15:0c:77:0c:cd:5d:7b:23:e2:67:cb:29:dd:10:d3:ea:94:4c:
         23:1d:34:04:64:2f:cc:d5:fb:fa:0c:e4:e7:14:6e:9f:cf:2c:
         61:7f:db:cc:82:5c:6e:ca:87:a8:d3:5c:c0:d5:1e:7e:0d:03:
         d4:e7:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:38:56 2025 by rpki-client