Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2498679f-c646-3f82-9b20-5c40474821c2.roa
File:                     2498679f-c646-3f82-9b20-5c40474821c2.roa (raw, json)
Hash identifier:          uSfOzPt1WHn8E37Xj1QJanhW7gtt6XI4fACIUd4h1UQ=
Subject key identifier:   A3:67:D9:FF:D6:65:94:73:42:2F:8B:86:02:25:FF:43:23:AD:06:DE
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849D42FB15B02429B4FAE7F45E8
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2498679f-c646-3f82-9b20-5c40474821c2.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     14956
IP address blocks:        144.172.80.0/23 maxlen: 24
                          144.172.82.0/24 maxlen: 24
                          144.172.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b1:5b:02:42:9b:4f:ae:7f:45:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=244fbcb7-53fe-4348-adcf-a23838f92de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:7c:22:d9:86:42:ec:74:90:0e:ff:d3:62:
                    88:77:31:47:2f:87:db:9e:dc:c1:c9:d7:91:83:68:
                    02:a3:c8:95:e4:0e:bf:5a:1b:19:43:68:07:a7:36:
                    31:9d:1d:76:b9:19:3d:81:a1:65:06:85:6c:87:22:
                    e7:84:8c:61:e7:76:5c:c6:27:5e:39:7b:08:2f:d5:
                    9b:5a:2b:76:6b:6a:a7:23:25:aa:51:1c:36:bd:f1:
                    15:db:86:f1:c8:36:8a:6e:e9:ae:50:7a:1d:a6:1d:
                    d7:ad:f7:d3:9b:04:0d:7a:28:42:e8:74:f7:2d:9a:
                    cc:84:ff:2e:c8:b4:35:5f:d1:43:e5:de:e6:c4:02:
                    88:55:f7:ef:d9:c0:ae:c4:19:d1:d8:f9:a9:1c:28:
                    0f:ba:25:26:6b:b7:da:36:a1:7a:14:b5:c5:cb:37:
                    ac:35:64:70:75:94:a1:6c:26:67:d8:73:fc:06:a8:
                    16:ce:3a:10:b5:a3:54:77:4a:ba:27:cf:fc:c9:9f:
                    d8:43:42:70:c6:e3:be:ac:90:50:e1:c9:73:48:9b:
                    81:d1:9b:5c:02:98:b0:4a:15:24:cc:4f:4d:df:08:
                    06:fd:1b:27:f8:3a:10:b4:61:fd:42:85:54:8c:18:
                    fd:b5:51:6a:6a:49:92:89:52:54:db:4a:07:09:5d:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:67:D9:FF:D6:65:94:73:42:2F:8B:86:02:25:FF:43:23:AD:06:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2498679f-c646-3f82-9b20-5c40474821c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.80.0-144.172.82.255
                  144.172.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:08:22:fc:31:2c:fb:7e:82:b0:c2:22:8b:c5:d8:59:d2:d4:
         8d:98:be:1f:4d:e7:34:80:fb:d8:a4:56:e3:1a:3b:52:7f:3b:
         f2:df:af:ff:85:af:51:6d:30:05:f3:69:66:8e:87:04:d2:f8:
         8d:7c:f5:7c:c9:fb:dd:52:c1:12:a3:4e:96:45:da:0d:34:64:
         10:ff:f4:55:89:dc:b7:c7:a7:69:8b:62:48:a3:5e:d8:c8:32:
         cc:6e:d2:db:65:b8:19:80:d4:4e:eb:dc:21:66:72:d1:d5:df:
         e3:0f:70:c2:47:dc:0c:cb:26:47:a1:56:38:2e:5f:4d:7b:a3:
         24:6a:b6:b6:97:f1:00:cd:06:0a:70:24:d3:de:0f:c7:c5:1e:
         85:32:3c:2b:7f:99:d9:37:e7:e3:41:e2:b8:5b:64:3d:66:c6:
         e5:06:08:08:84:dc:cc:e5:32:f8:74:f4:dd:41:70:17:5b:7e:
         16:2b:1f:02:42:06:9c:c9:a0:a8:9b:d0:40:75:1a:b5:b8:fe:
         bb:6b:52:c6:4d:c1:c9:50:ce:c6:ef:f7:37:b3:dd:a2:f2:69:
         4d:18:4d:43:8b:74:73:71:08:c4:34:7c:79:50:11:43:6c:fa:
         12:12:3e:8f:22:09:36:dc:9d:ab:a3:0d:71:8b:fa:ef:f9:b7:
         21:fc:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:07 2025 by rpki-client