Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0eb9dfa-effc-3571-99e8-9008500ffd76.roa
File:                     a0eb9dfa-effc-3571-99e8-9008500ffd76.roa (raw, json)
Hash identifier:          rTCOscWUklSMbHofEZKy/MAz+p5aHlGl57AfAnlYBEw=
Subject key identifier:   C4:32:F0:CC:80:DB:69:CA:B0:D2:72:68:50:C5:1B:6B:58:71:A2:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432892D5A0965B7D17DE180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0eb9dfa-effc-3571-99e8-9008500ffd76.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.57.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:89:2d:5a:09:65:b7:d1:7d:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=89fc3be3-d6b4-46e6-9d9f-c282e192b6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:98:50:10:f4:d4:04:0f:e7:e9:cf:33:f1:
                    2d:77:3d:dc:ac:bf:98:ef:66:b3:53:e4:dd:8b:65:
                    28:51:72:95:ca:df:1c:a4:cf:46:f5:06:c3:3c:37:
                    a2:23:3d:01:1f:57:36:b8:dc:8d:f4:86:32:17:70:
                    c4:eb:26:0c:98:6e:93:89:9f:a7:9d:dc:22:73:03:
                    7e:3a:f4:d3:ee:3d:0e:cf:b8:8b:68:63:6d:f5:fe:
                    1c:ff:5f:b4:2c:38:ba:d7:4b:d8:b8:5d:9d:65:5b:
                    ad:ba:70:9f:87:02:56:2f:c3:9b:9b:3e:7e:52:3c:
                    a5:c5:2c:9a:cd:7a:51:78:6d:63:d7:86:23:df:17:
                    7a:ba:51:5d:a2:be:52:0b:ef:a0:35:12:df:1f:55:
                    56:0e:48:f4:5e:b0:8a:10:89:a8:86:ac:af:1c:68:
                    0a:c9:96:ba:66:00:30:c3:dd:c1:27:ea:89:7d:30:
                    59:2a:e6:0a:ea:71:d9:2e:16:27:da:f7:bb:ef:82:
                    7c:a0:dc:e8:e6:75:36:ac:08:38:fc:53:10:7c:72:
                    48:5d:32:17:fc:db:86:7c:04:0d:53:ab:d8:29:de:
                    e9:1c:33:fb:f5:6d:ef:01:0a:d5:12:4f:ba:7b:10:
                    35:6c:08:87:88:70:78:bd:1e:1f:65:70:af:cf:b6:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:32:F0:CC:80:DB:69:CA:B0:D2:72:68:50:C5:1B:6B:58:71:A2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0eb9dfa-effc-3571-99e8-9008500ffd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:cd:ca:72:c4:a3:b8:fe:33:16:27:e2:25:a8:11:15:41:1e:
         c9:50:32:c5:7f:25:dc:77:d6:3b:4f:43:eb:17:99:9e:d3:90:
         b9:f4:05:5e:85:48:99:08:ba:03:3b:2e:48:32:90:8b:06:6b:
         91:3a:77:b2:8b:d2:4b:bb:ed:6f:8a:a2:32:76:6c:d8:eb:b0:
         77:78:98:3a:d8:f7:26:4f:7d:d0:85:df:e5:13:5a:6f:53:c7:
         a5:6e:ae:98:af:63:3f:55:20:cc:3a:a0:6e:47:57:52:43:b9:
         cd:5d:cf:54:9d:2b:71:2b:05:1e:4d:53:b1:9a:89:24:23:61:
         50:ba:d9:14:e0:e7:f0:62:ba:46:a2:e6:24:ec:9d:a6:13:6e:
         ec:d9:39:55:55:da:3c:16:f5:1c:1c:67:7c:97:ec:b0:7f:97:
         ae:59:28:96:60:08:0e:27:ad:32:43:b4:89:24:8c:29:49:04:
         e3:a4:65:5f:3c:b4:bf:99:69:47:32:4b:80:60:e3:5f:b2:4a:
         72:a3:6c:3e:29:49:c4:de:47:a4:2f:10:7e:84:b1:16:5c:06:
         62:6a:c2:1a:c1:78:cc:31:a9:7c:71:b7:04:c2:ed:94:ef:5a:
         b2:48:3e:a7:94:d8:36:21:ff:bb:25:19:84:01:6f:fb:8b:d5:
         3f:8e:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:33:44 2025 by rpki-client