Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/248ae82c-8f33-3a98-8359-2f9f24908317.roa
File:                     248ae82c-8f33-3a98-8359-2f9f24908317.roa (raw, json)
Hash identifier:          4shmylthtM+66yIt7ox3E+jTcS8D6zEUJC86oCKHNfQ=
Subject key identifier:   49:4D:2A:74:35:97:DC:45:4A:D5:C8:F1:ED:FE:6D:3C:BF:BC:09:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431D98C0B6FD68142598680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/248ae82c-8f33-3a98-8359-2f9f24908317.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        98.216.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:d9:8c:0b:6f:d6:81:42:59:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=5521016e-8d75-4197-94b2-71df6a65e525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f1:4c:58:ee:c1:a3:59:26:e1:a8:a1:cd:e5:
                    79:10:f9:8d:66:29:6d:de:dc:de:89:af:eb:e7:01:
                    2f:ce:39:35:c3:7d:c5:de:3f:c6:d1:c5:59:39:df:
                    32:56:a8:49:f3:9f:7a:73:bd:5d:6c:59:02:8c:36:
                    05:9c:55:ec:46:f0:22:dc:57:34:cf:bd:11:e6:af:
                    05:42:24:dd:fe:68:01:9f:88:97:d0:1f:11:03:4e:
                    4f:f9:40:d6:9d:28:bf:13:5b:16:ba:b7:60:cd:af:
                    5a:f9:53:28:b7:51:09:02:fe:ce:dd:c2:1a:94:f8:
                    6a:1c:84:6f:94:2e:1c:6a:b1:4c:06:4b:76:44:4e:
                    39:4b:eb:e4:c1:96:2a:8d:f1:82:ea:a2:1e:4f:65:
                    4c:59:ef:13:bf:f6:48:07:68:67:64:ef:18:04:8b:
                    26:a3:90:55:ac:8d:16:f7:44:a9:bc:5b:fe:ae:b6:
                    2b:d7:5f:ae:01:1a:e3:29:52:c8:9b:ca:87:c9:75:
                    0c:45:28:91:f6:d4:b1:a6:4b:53:5e:af:84:fa:83:
                    c9:cc:41:41:e6:c4:27:c9:2b:b6:05:3b:02:56:90:
                    cf:29:ed:a8:fc:7d:74:11:c4:6e:b5:7b:31:9a:6b:
                    c2:ac:fd:3a:a2:21:7e:12:f7:30:82:7e:6b:8b:46:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:2A:74:35:97:DC:45:4A:D5:C8:F1:ED:FE:6D:3C:BF:BC:09:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/248ae82c-8f33-3a98-8359-2f9f24908317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.216.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:61:00:f9:a1:41:14:0c:5f:b2:bd:53:2b:69:e0:c0:b9:9c:
         2e:0d:34:ef:6a:6c:60:57:f8:6d:43:2f:2d:50:88:ba:54:b8:
         42:e9:e0:56:02:58:9b:39:65:61:23:7e:f9:4a:07:1b:45:1c:
         ec:5f:0d:0c:05:ff:1b:04:8d:51:82:67:fb:11:15:0e:fa:ae:
         8c:e2:66:ed:84:eb:22:a0:60:5d:72:2f:5d:7d:6f:2a:3b:ed:
         55:ab:8a:31:12:c1:b4:79:cc:8e:b9:09:ee:01:56:68:08:b6:
         a6:40:ac:36:27:1f:01:f0:4a:d9:21:cb:3e:63:45:66:c9:a6:
         b5:11:d4:1d:48:7a:f8:01:de:e0:b5:1b:a0:31:72:42:96:75:
         25:0d:0d:39:9b:30:69:70:59:69:15:a0:64:90:69:21:ac:b9:
         83:a9:d3:df:21:a2:e3:39:c4:54:c7:4f:94:14:e8:70:71:b4:
         44:40:63:88:16:7e:f7:a8:94:0f:4e:f8:3b:79:08:35:21:4c:
         a6:d4:4e:d1:5e:ab:e3:72:4c:8c:2e:90:a3:31:41:bd:a9:47:
         36:b4:b7:12:a2:00:c4:a5:c7:0b:e1:27:f4:8e:14:c2:69:5f:
         c5:2d:c2:c7:5e:e9:66:ef:7a:ce:ab:2b:fc:38:e4:36:d4:e3:
         79:e1:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:54:08 2025 by rpki-client