Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ea8abd-b491-33dd-99f7-f006786f0bbb.roa
File:                     90ea8abd-b491-33dd-99f7-f006786f0bbb.roa (raw, json)
Hash identifier:          jIo7AnfhZd3Q3+pEG/g3xJyYHnlSr98/lRjYhYID300=
Subject key identifier:   E8:EF:23:64:4E:42:F2:26:D7:FD:52:AD:65:EB:8C:D4:15:A5:3A:5B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849AD1A1AC19FC676B39179D640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ea8abd-b491-33dd-99f7-f006786f0bbb.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     7029
IP address blocks:        98.16.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:1a:c1:9f:c6:76:b3:91:79:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=5f7dac33-2f38-44e3-bd2f-6b4fc0c5ee90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:c9:2b:5c:36:f8:42:ef:28:78:63:6e:47:
                    c0:d1:58:54:87:4d:77:3b:29:3a:4d:19:d2:c7:78:
                    e5:b3:a6:19:74:16:0a:a9:01:a7:c2:c0:39:60:36:
                    5d:80:71:40:a7:cc:7b:14:96:49:d8:05:0b:c5:cf:
                    e6:89:8d:13:b9:64:3a:08:5a:11:1c:05:d3:29:e0:
                    09:c3:8e:24:94:0e:26:31:9e:f0:a1:32:c1:54:a7:
                    e1:92:8f:f2:db:31:1a:7c:92:71:74:78:a4:78:45:
                    7a:d0:bf:af:2f:1c:ae:53:ec:9c:89:43:f6:f0:57:
                    43:7d:fe:93:8e:8a:c9:95:12:33:5e:cc:1d:78:40:
                    74:2a:04:1f:21:a5:c3:eb:a6:be:e1:12:44:95:3c:
                    83:06:76:e5:1b:f3:20:80:b3:7c:74:07:70:ec:47:
                    62:bf:bd:d7:ad:83:86:b6:59:e9:24:f2:c5:eb:b2:
                    b6:ab:67:e1:44:83:6c:61:4e:dc:5d:7a:83:41:38:
                    a9:31:68:cd:80:c2:b3:4d:fb:c8:b8:a5:d8:a8:cb:
                    f0:e1:92:d8:22:8a:8c:d4:f8:7e:2e:1d:19:af:1e:
                    f6:64:49:d6:ac:9c:a7:03:a2:76:7b:3c:12:23:98:
                    b3:f7:97:3e:00:67:f5:26:6f:cb:a3:c9:97:b1:c8:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:23:64:4E:42:F2:26:D7:FD:52:AD:65:EB:8C:D4:15:A5:3A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ea8abd-b491-33dd-99f7-f006786f0bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:fe:5c:69:d8:e1:8e:6f:59:74:fc:c8:a0:ca:52:3f:5a:
         14:a3:ac:53:ff:ef:70:77:bf:31:3c:a2:45:de:1f:ed:24:1b:
         5f:bf:4a:eb:ae:63:30:7d:8f:76:a9:19:02:78:da:d9:4e:d1:
         0f:db:ee:38:dc:52:f3:ae:9b:ca:1d:b6:4e:63:b2:4d:2a:b7:
         d7:f5:8b:7c:2e:b8:bd:4e:8f:53:b7:91:cf:68:c8:b0:f1:f4:
         4d:9f:78:75:37:e9:f8:77:8c:45:45:fb:14:8d:80:62:7f:5c:
         ff:c8:05:75:f2:f8:f5:2d:45:d7:8b:76:3d:91:96:21:0c:d3:
         db:3b:1c:22:ed:9f:d7:41:e8:61:ec:83:5d:33:03:a6:9c:8e:
         2f:8c:a1:2a:db:77:fd:cf:a7:49:00:ee:af:90:34:e2:10:7a:
         0a:44:9c:4c:21:cf:8c:d1:ac:50:ce:da:55:1a:a3:5c:57:30:
         4b:2b:15:d4:41:22:6e:c0:7b:ad:13:e1:f6:ca:ae:99:26:76:
         54:a1:0f:34:2a:ec:fd:80:6f:4b:e7:58:54:ee:8f:ff:95:b1:
         fd:f7:ec:c5:e5:58:a2:44:13:6f:1d:1f:a2:1c:a6:6b:06:f8:
         b7:66:37:28:72:48:f2:61:9a:23:de:40:0a:e5:90:a1:48:37:
         a7:e1:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:51:05 2025 by rpki-client