Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57b0ef04-5df8-3019-bb6d-798517749e87.roa
File:                     57b0ef04-5df8-3019-bb6d-798517749e87.roa (raw, json)
Hash identifier:          cJKy4SjLwkVQ5aWLFoFc4LkBoy9ZBKFNRm6+dh0erak=
Subject key identifier:   F1:96:16:35:7F:39:29:7D:8B:04:EB:DF:E7:4F:9A:9C:E7:BC:E5:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCCA3B274BE05D692ADA60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57b0ef04-5df8-3019-bb6d-798517749e87.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        98.240.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:ca:3b:27:4b:e0:5d:69:2a:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=6df5cd83-3eec-4bce-a103-313c014247cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:8f:ff:6b:70:f5:21:01:3d:13:09:65:34:
                    08:27:ed:2d:32:db:65:9f:d5:d3:8b:e1:62:ff:42:
                    80:06:f3:a0:fd:5c:eb:70:e9:47:06:7b:73:0c:02:
                    c2:34:35:bc:77:95:0f:d0:e6:fb:d2:8f:c6:cc:8d:
                    d5:2e:0e:12:fe:a1:19:ef:62:f0:fc:3d:dc:25:18:
                    9b:71:6d:3e:a3:6e:8a:20:66:e5:25:66:94:f2:e1:
                    50:12:e6:13:70:94:17:ba:85:91:21:b2:5b:a2:40:
                    ef:d5:ab:b7:65:de:e4:0d:c0:5f:65:11:90:ac:5f:
                    c1:c2:64:d7:4d:7c:b7:42:3c:de:4d:9f:7e:af:47:
                    09:14:01:4c:1d:68:56:50:50:c5:9d:90:15:cf:dc:
                    16:f6:e1:e0:80:6f:ba:aa:31:93:cd:f9:5e:84:87:
                    f2:b2:bd:78:9f:d6:59:4a:7f:4c:70:d4:8b:6a:64:
                    de:88:09:b2:51:14:2a:91:ce:3e:72:41:81:ed:3a:
                    78:21:8a:91:f6:89:34:68:2b:e6:77:fe:74:82:62:
                    5b:78:9f:a2:2a:83:13:f7:8a:37:f2:ed:6c:f4:9a:
                    42:05:66:40:ca:01:35:45:da:d4:91:28:a9:e4:60:
                    0c:77:31:40:65:4a:a5:71:e0:9e:b5:4f:57:99:8d:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:16:35:7F:39:29:7D:8B:04:EB:DF:E7:4F:9A:9C:E7:BC:E5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57b0ef04-5df8-3019-bb6d-798517749e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:f3:ad:a5:df:8a:c8:31:a1:20:a0:e2:6d:a3:e9:c1:c9:
         bf:15:04:f9:14:0b:8a:b3:be:3d:8d:b2:23:76:46:5b:e3:d7:
         e6:69:d0:83:ca:bd:f1:f7:1d:a5:db:e2:03:42:d2:ec:c3:05:
         a1:fd:ed:05:86:0e:7e:55:01:f4:ee:36:a0:cf:4a:67:e8:b9:
         8e:b3:62:00:58:52:e6:36:9d:39:29:a8:84:e4:fe:bb:d0:f1:
         90:74:20:e0:8a:77:7d:3f:30:d7:59:bc:38:6d:b9:87:77:1f:
         3b:99:ad:af:44:c2:75:4d:6f:e1:f4:54:36:e5:f0:59:f5:dd:
         a6:eb:43:2c:79:04:9e:71:de:24:84:3b:70:74:d6:55:92:26:
         63:42:21:a6:b6:84:e1:22:74:01:f6:ed:5f:36:a7:eb:be:82:
         c4:d6:f0:33:d1:d6:84:6c:11:f8:46:93:05:ef:d2:ed:88:2d:
         03:b6:31:29:97:63:d9:96:97:96:b9:b3:37:c2:16:66:59:1f:
         be:1a:34:f5:80:2e:81:ce:58:e8:85:37:9c:ff:a2:93:a7:ba:
         24:da:ce:d1:48:29:f6:2f:8d:9f:15:1c:16:06:38:8b:df:88:
         9a:f1:c2:c1:17:43:89:71:24:1d:c1:dd:3c:c7:37:8a:f4:43:
         4d:30:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:45:56 2025 by rpki-client