Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b53092bf-3a1c-30b4-8074-bae595d50ce8.roa
File:                     b53092bf-3a1c-30b4-8074-bae595d50ce8.roa (raw, json)
Hash identifier:          yfvx71vr/Ffm+E8l7RpPXB+F9HUm04MhPj9/qbJwwys=
Subject key identifier:   E6:98:5A:96:14:93:4D:73:D6:12:19:77:D4:0B:CF:A8:A8:23:BB:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849929496495D6B4E77A838E800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b53092bf-3a1c-30b4-8074-bae595d50ce8.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        98.207.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:96:49:5d:6b:4e:77:a8:38:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=4da8aa4d-fa07-4f9e-aace-6271ff3e7304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:ad:94:d4:be:ea:64:1a:cf:53:1b:a8:b5:
                    da:29:a2:db:c9:4b:e2:c8:2a:18:02:bb:b0:a4:88:
                    4a:01:49:94:78:f3:75:76:8e:f8:ac:ab:48:49:18:
                    a3:6f:98:fb:28:30:83:43:1f:1a:44:ae:6e:0e:da:
                    7d:e9:97:df:01:e6:ed:79:b6:9e:f2:29:25:8c:b0:
                    8e:a8:e3:1c:08:bb:b2:da:71:f0:96:46:df:cc:d0:
                    9c:53:e7:14:06:86:0c:b5:8d:05:13:5b:33:58:ef:
                    13:74:8b:1c:90:4e:10:c0:02:14:72:d4:27:f6:4a:
                    6b:21:70:92:89:da:0c:17:ea:fa:a2:00:d2:7e:5f:
                    44:c0:f8:e5:d2:aa:63:45:7a:86:99:c1:ad:ce:66:
                    49:b1:1d:87:33:b5:da:7f:05:81:e2:8a:18:e6:09:
                    4e:29:f3:15:9c:76:97:0a:f6:36:45:f0:c5:0e:ba:
                    35:7f:77:be:f1:07:ed:3d:c0:8a:72:ca:7d:eb:d5:
                    77:93:89:96:63:99:b6:b6:b0:e8:4c:48:95:b2:b9:
                    99:8d:2b:0a:a4:b8:be:47:a7:c4:76:67:14:e8:8f:
                    1a:d0:2b:9b:28:f0:ab:9a:09:00:09:01:e7:07:f9:
                    c3:79:5c:40:37:85:9d:c2:d1:da:41:fd:92:b6:1e:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:5A:96:14:93:4D:73:D6:12:19:77:D4:0B:CF:A8:A8:23:BB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b53092bf-3a1c-30b4-8074-bae595d50ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.207.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e5:82:3e:8a:f6:56:24:02:60:7b:55:58:35:1e:a3:87:00:
         5b:6f:00:12:1e:6e:86:7b:c7:aa:19:0b:3e:a0:2e:4e:0a:57:
         54:36:ae:30:ed:83:aa:06:63:fd:a3:72:5b:c3:f9:fb:02:cb:
         99:7f:52:aa:a5:d1:d4:56:88:ad:d9:3b:5c:64:16:bd:04:7b:
         83:f0:10:a6:e4:a4:0d:0f:29:87:12:b9:1a:49:6e:e2:a2:cf:
         8b:3f:d2:03:a2:5e:97:b9:73:5d:dc:2c:51:db:f8:a2:25:4f:
         19:59:91:14:6f:33:e7:2e:15:11:9b:d1:e6:f0:20:d1:e6:ca:
         41:59:61:7c:f0:b7:4b:42:ae:20:51:57:16:6b:5d:53:ec:ae:
         e4:8e:64:fd:a6:72:72:52:85:f4:72:cb:11:3f:17:09:27:fc:
         bc:1d:06:15:8f:87:81:22:c7:bd:ef:30:0d:c5:f6:1c:27:4f:
         0b:5a:e1:1b:d7:27:9e:d0:29:d6:aa:b2:20:2b:36:f7:6d:61:
         4b:a5:df:b4:50:8b:5c:51:b4:ba:f5:42:db:5d:f9:a2:ed:29:
         a5:03:f1:11:93:01:79:f0:e4:4c:46:1d:31:23:70:15:56:6c:
         72:b6:7e:73:7c:41:56:c5:d9:d5:1d:90:ed:3c:85:2f:94:b7:
         65:54:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:53:13 2025 by rpki-client