Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/31bbbe9d-5df0-39ac-a392-b396fbbb1d35.roa
File:                     31bbbe9d-5df0-39ac-a392-b396fbbb1d35.roa (raw, json)
Hash identifier:          3/fndgHrrRmCuYXgjEYEswi3XghADuh2Z2N9YTvmc1I=
Subject key identifier:   25:57:B5:43:C7:FA:BB:B8:79:08:68:D8:B0:9D:1F:67:C5:69:FF:CF
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A30502D53487C126FEC28D300
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/31bbbe9d-5df0-39ac-a392-b396fbbb1d35.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     14956
IP address blocks:        144.172.89.0/24 maxlen: 24
                          144.172.100.0/24 maxlen: 24
                          144.172.101.0/24 maxlen: 24
                          144.172.102.0/24 maxlen: 24
                          144.172.103.0/24 maxlen: 24
                          144.172.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2d:53:48:7c:12:6f:ec:28:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=3be87f77-003d-410e-9c76-553d123ee240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:d4:64:d5:73:b5:50:f0:ac:6a:a5:ed:a5:
                    2d:85:2d:d8:ae:1a:7a:09:66:ed:60:53:54:f2:a8:
                    24:2a:51:24:46:46:c8:5b:6b:4c:2c:07:71:35:c8:
                    d7:94:46:eb:f5:8f:15:74:c3:02:3b:da:61:76:5b:
                    40:c8:6d:cf:df:87:fb:d1:3d:c6:c4:2d:d5:05:e1:
                    9d:4e:d6:33:d4:80:1b:8a:71:ca:bd:e4:77:f1:30:
                    02:94:4b:db:86:cd:c8:e9:d1:dd:26:52:d3:29:36:
                    af:80:ed:66:c2:56:ee:40:fc:bb:49:7f:65:38:44:
                    eb:0c:98:f3:80:39:eb:e7:6e:04:62:f3:07:7b:78:
                    a8:ee:b5:98:a3:5b:f9:10:0f:f9:57:ac:8c:19:b6:
                    d1:71:c2:c5:ee:fa:64:11:d9:81:f4:bd:90:b7:71:
                    c2:7f:f5:d9:f7:64:ff:a2:9a:f8:ee:2a:80:4f:14:
                    66:16:0a:c0:80:d7:53:5b:75:d2:eb:d3:48:20:56:
                    f2:08:58:6d:64:c9:df:a0:ce:7a:35:90:e0:92:34:
                    e7:dc:59:9e:db:06:91:e6:28:af:aa:e3:70:62:d2:
                    96:4f:2b:52:c7:71:4f:4d:a1:06:26:21:39:8d:fe:
                    43:be:75:7f:60:99:20:97:59:b8:98:41:96:4a:cf:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:B5:43:C7:FA:BB:B8:79:08:68:D8:B0:9D:1F:67:C5:69:FF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/31bbbe9d-5df0-39ac-a392-b396fbbb1d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.89.0/24
                  144.172.100.0-144.172.104.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7b:bc:ba:73:69:13:c5:50:a6:83:eb:93:6e:71:19:ee:52:
         7b:80:a6:f4:cf:7d:f3:4d:2a:b8:27:5c:88:c1:95:41:02:78:
         5e:5d:50:87:67:8c:ba:39:ac:d3:0c:78:c6:fd:99:f5:9e:79:
         8e:19:b0:12:3c:1a:85:0b:a0:4e:cd:57:3d:88:eb:61:11:0b:
         d0:57:d9:9a:39:17:0a:6b:55:57:3f:5f:24:02:44:ec:16:f0:
         d5:97:4d:dd:a1:a2:e3:90:07:02:65:c4:24:da:e7:b3:54:3c:
         7b:fc:14:8a:40:22:c7:2c:7b:39:f8:0d:e5:4a:eb:fa:d5:8e:
         07:5b:5e:c8:ab:db:56:7c:5a:99:ee:ca:9f:0d:2a:09:18:e7:
         97:b5:75:8e:b3:d2:23:eb:e8:07:3f:cd:87:62:17:37:82:14:
         a6:a8:dc:8a:50:b2:ac:77:fe:8f:a4:b2:4d:80:00:c8:db:e0:
         81:54:03:eb:c3:ce:32:bb:4d:fd:47:cb:dd:38:db:1e:9d:e3:
         4e:dd:89:5d:94:90:ea:9f:51:b1:4c:34:ea:ae:dc:b9:31:36:
         12:3a:28:70:27:82:53:95:a0:3b:a4:bc:27:b3:bd:34:c1:2a:
         a6:74:e7:e1:94:d9:6b:e6:b2:d4:71:3b:63:86:88:da:3c:3e:
         50:25:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:35 2025 by rpki-client