Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2dd4548-f5db-35a5-94c2-0332d488e953.roa
File:                     b2dd4548-f5db-35a5-94c2-0332d488e953.roa (raw, json)
Hash identifier:          Kfs/2YHVAKCsvuuc8Jl20UubMOHoFKb5483k9ZvPTr4=
Subject key identifier:   90:8D:59:73:45:B4:93:6F:E3:E2:7D:D0:7D:A0:EA:9C:C6:5E:27:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858499294847D00604C1BE582A6A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2dd4548-f5db-35a5-94c2-0332d488e953.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        98.222.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:84:7d:00:60:4c:1b:e5:82:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=e1760d0a-8dc3-44b8-b6d3-40eb1809f02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:1c:70:18:15:1e:0f:cf:73:b9:c2:aa:f3:
                    a4:7b:36:68:09:66:a9:1d:67:e4:2a:88:fc:ae:09:
                    ed:ec:ac:18:5c:06:60:fa:51:b7:88:20:3c:2b:4e:
                    f3:40:39:64:e2:7e:54:60:d3:c0:01:f6:76:0b:af:
                    9c:a1:21:02:71:e3:a7:89:cf:f9:e5:98:b2:6e:0a:
                    b7:e8:69:a6:bf:31:b0:69:69:9a:41:67:45:83:56:
                    55:86:14:1c:9e:3e:17:94:7d:cf:ef:2e:ee:e2:a1:
                    1f:61:46:48:2e:8e:ca:95:d1:49:01:67:f3:ea:bf:
                    27:4a:c2:97:99:58:14:97:dc:36:12:9c:f4:78:4b:
                    8c:48:d6:b1:6f:02:f8:4b:86:6c:d5:32:d4:4f:b1:
                    f1:92:64:cf:08:89:37:64:50:49:54:d6:1f:62:5e:
                    ce:e3:41:e4:2d:39:99:61:31:d2:92:66:6e:75:33:
                    b9:fc:08:16:9b:fe:0f:02:24:60:3f:fa:e8:0e:38:
                    13:d2:46:12:23:3d:74:50:3f:fe:5b:87:82:f0:d6:
                    a0:6d:79:0c:8f:bf:b0:07:66:7e:2c:48:c7:ca:d0:
                    6a:40:2a:6f:49:d9:9b:8b:f0:1a:34:24:22:48:0a:
                    e0:05:80:9c:34:7f:7e:7d:56:5b:d6:10:6c:48:93:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:59:73:45:B4:93:6F:E3:E2:7D:D0:7D:A0:EA:9C:C6:5E:27:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2dd4548-f5db-35a5-94c2-0332d488e953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:53:46:2c:7f:84:23:3a:6b:9f:39:96:8b:b4:05:c3:c1:
         98:c6:78:3b:eb:cc:eb:8e:8e:a9:6c:35:21:d8:aa:0d:9d:6f:
         51:9d:ff:df:6b:10:33:05:85:42:76:c4:b4:20:fc:ff:64:6f:
         f0:a0:59:16:5d:b5:a5:38:85:80:ad:e9:f0:f8:57:71:35:14:
         5b:8c:a7:51:2e:ab:89:76:40:25:c8:7d:e8:1b:9f:50:e6:9b:
         f2:a5:37:7c:b6:37:04:04:85:57:de:95:2f:56:25:1f:2b:c9:
         0a:87:25:1a:98:14:2d:72:4c:af:a9:47:a4:0d:f0:34:3c:c9:
         8c:24:85:5d:ca:bc:0f:8b:c9:aa:8c:a9:e9:a4:c6:be:66:09:
         aa:40:24:02:c2:c7:39:80:0c:3a:3a:e8:0b:35:c6:72:4b:38:
         73:84:24:28:9b:60:11:67:c5:3d:11:7b:39:b4:62:04:7f:0e:
         07:67:0d:69:6d:58:ac:29:74:b1:ae:41:e0:f1:e7:57:86:16:
         09:84:1e:ac:15:0c:bf:d2:29:8e:20:93:c4:9a:ae:6e:d3:fe:
         58:ea:0e:bf:cc:77:57:6c:98:0f:2d:2e:aa:43:d6:d4:bc:57:
         42:33:2a:91:09:09:2e:b7:26:8c:72:a8:2f:59:c8:ef:e8:03:
         f3:73:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:56 2025 by rpki-client