Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa
File:                     f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa (raw, json)
Hash identifier:          9/2I2oSoBINT1DeWLK5OCQ7L2pBV/N2QkTrTwyBXnGg=
Subject key identifier:   58:3B:7A:D6:5D:73:4D:FC:8D:92:70:61:4E:8A:FA:D9:43:94:3C:3E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849D594E8AFB29DC21ADC96B366
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     398355
IP address blocks:        144.172.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e8:af:b2:9d:c2:1a:dc:96:b3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=46a98ce5-7011-43ed-b661-96776017622c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:c3:df:c4:13:25:14:94:84:4e:46:d3:33:
                    f0:a7:9a:88:90:b8:c0:f6:b1:a1:c6:11:55:37:7a:
                    6f:00:ab:ca:5c:38:4b:be:4a:51:f9:ce:b6:96:1a:
                    ca:27:0a:85:e7:09:68:c3:78:cd:24:5a:e2:8b:4a:
                    1e:ae:eb:24:4f:7d:a0:f0:78:c6:3e:de:2a:55:28:
                    dd:9d:20:59:98:04:50:db:aa:6f:8e:e3:eb:2c:7a:
                    92:4e:48:12:7d:3d:7f:19:71:ab:77:33:47:55:6e:
                    f4:7c:af:57:25:ac:da:23:a0:46:52:e0:d5:b4:d2:
                    8b:76:99:74:c9:1e:b8:ff:c9:ac:af:20:0d:bf:7c:
                    d1:d7:38:32:b8:83:bd:35:a9:2c:1f:cf:ee:e5:bf:
                    3f:f1:0d:8d:ea:2c:1e:7d:82:46:c8:5c:b4:2e:a2:
                    df:d4:87:40:8c:31:49:01:7f:48:bd:c9:54:89:5a:
                    e5:71:38:89:e7:45:dd:eb:2e:cf:15:d1:dd:49:9e:
                    97:74:d1:21:81:19:c8:90:19:97:ba:73:16:7b:2c:
                    39:12:70:1d:60:c2:c4:89:5f:63:6f:cb:c1:ae:e6:
                    37:a0:a5:6d:7e:0a:ef:b3:45:98:29:d8:83:85:bb:
                    51:b0:67:67:c6:9e:46:8b:3f:97:02:58:8a:4b:df:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:7A:D6:5D:73:4D:FC:8D:92:70:61:4E:8A:FA:D9:43:94:3C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:3c:2e:5b:44:5b:7d:0c:1e:f1:83:96:6f:cd:8b:77:02:
         90:e0:23:2a:99:f7:9c:ba:7e:57:24:78:4d:fe:70:dc:0b:db:
         6f:75:99:80:53:1e:4d:ad:a8:66:28:6d:a7:94:4e:9a:db:7b:
         9f:d9:0e:f9:4b:3c:89:5a:b4:ba:57:b1:79:61:7c:ee:bf:ed:
         74:91:86:59:48:95:f0:a7:fb:b0:8a:3d:f7:9c:db:c7:f4:54:
         ea:38:27:8c:44:cb:e5:03:75:7b:1c:e9:4e:df:ac:fe:95:77:
         ee:77:5d:aa:e9:a2:5d:ca:bc:7e:3b:e0:58:f2:09:d1:63:56:
         98:b3:56:58:83:42:bd:77:38:90:f8:d9:13:54:05:04:8f:65:
         8a:95:f0:63:d4:08:80:26:54:b9:14:f6:f9:28:1b:36:d1:14:
         1b:81:de:4f:6e:c0:ed:df:1b:d2:b4:9b:6d:72:fb:3f:a8:88:
         93:4d:6a:d7:ad:97:1b:39:9a:2a:e7:06:c3:28:aa:13:f2:ce:
         e8:5b:31:98:d9:f6:05:b4:ed:0e:8d:af:d8:ab:7a:2a:a9:fd:
         1d:75:da:76:6a:4f:49:e6:4e:41:7e:f8:97:66:f2:50:41:48:
         d6:f9:c0:69:6b:27:6a:41:41:3e:83:27:e0:be:50:3d:ab:de:
         e0:0f:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:51 2025 by rpki-client