Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fbfd387-d151-3f6a-8ce7-553ebfc2e3b7.roa
File:                     6fbfd387-d151-3f6a-8ce7-553ebfc2e3b7.roa (raw, json)
Hash identifier:          yEFhAaEzq16LcabRurGcShaFAT+pKeLWVa4kPb//ksY=
Subject key identifier:   AD:EF:10:CC:D4:A8:48:21:BE:81:44:18:93:D3:B7:30:D9:94:14:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849929488B56F52AFC33AB79200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fbfd387-d151-3f6a-8ce7-553ebfc2e3b7.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        98.63.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:88:b5:6f:52:af:c3:3a:b7:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=f9aa55df-f7e8-4826-afca-7736b586bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:78:eb:2c:2b:86:0b:95:d3:14:dd:26:dc:
                    37:bc:48:ae:a2:b8:b8:15:42:96:65:97:3d:7a:47:
                    72:95:8b:35:b5:35:8d:e3:43:77:8b:c1:53:63:b7:
                    2f:b5:73:96:22:44:4f:ab:d5:bc:bc:f7:c1:c0:fd:
                    dc:01:92:4e:31:e4:04:e4:f6:62:d2:d2:69:a2:e8:
                    64:e4:40:85:bd:74:5a:8d:35:88:1e:2b:7c:03:2a:
                    ae:70:c1:6f:1f:13:78:84:0a:8b:b9:73:b7:9c:f0:
                    86:6d:6f:06:45:fa:a6:43:ac:3e:68:80:5c:60:71:
                    a9:e8:3f:e5:c6:49:ec:6b:1e:ab:8e:4b:dc:52:7a:
                    01:2e:ab:77:f7:2f:05:94:dc:ae:ee:54:b4:93:b9:
                    0a:22:de:dc:21:ad:ae:fc:c1:5d:ce:28:6c:99:1c:
                    dd:fe:fe:4a:4f:b4:88:31:07:72:10:aa:13:50:f2:
                    4e:68:bd:26:3f:9a:8d:8d:7e:e5:c6:78:47:1d:dc:
                    86:9a:75:83:82:80:93:12:99:01:98:c1:11:8e:63:
                    93:d3:75:3f:1b:a5:d1:cc:44:70:1c:8d:fb:8d:9d:
                    0d:ff:fd:23:b7:05:c1:a3:05:a4:d9:02:2a:51:27:
                    41:01:b5:12:8f:32:90:41:06:34:05:c8:31:a9:5c:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EF:10:CC:D4:A8:48:21:BE:81:44:18:93:D3:B7:30:D9:94:14:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fbfd387-d151-3f6a-8ce7-553ebfc2e3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.63.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:bd:55:fe:2f:cf:15:85:cd:36:27:ff:16:ab:00:2f:db:
         24:6f:7b:b6:42:b5:a0:32:85:5f:d3:46:bc:3a:27:05:e7:81:
         9e:7d:a7:99:76:bf:2a:34:1d:cd:ad:8c:45:10:8b:59:44:65:
         02:57:de:01:d5:83:91:23:ea:98:19:4b:d0:fb:14:d8:5f:1b:
         ae:03:73:00:cb:f0:a0:68:28:e4:97:ae:9f:07:38:bc:74:65:
         a7:05:a2:5b:bf:7f:5b:59:45:d2:28:3b:e0:8a:5e:d5:55:68:
         a3:3e:d7:47:b4:fd:3e:5c:5e:d1:44:7e:4f:a0:78:f9:ca:7b:
         17:89:e0:52:46:08:56:6c:31:39:25:3e:73:15:93:91:87:f0:
         3b:d4:89:1c:a1:b6:ad:d2:40:12:79:06:45:30:fb:17:a6:a8:
         5c:f3:e6:16:b9:c3:61:b7:f5:8e:2b:28:84:42:2f:c9:22:93:
         ea:eb:7b:12:a6:d7:8b:cb:a8:d1:03:a5:48:0d:d4:db:d0:b3:
         24:6c:79:f7:f5:82:1d:3b:75:ab:50:d3:a5:d6:43:b7:b3:8c:
         a3:e8:49:f7:bb:e1:9a:b8:98:d6:70:37:19:39:62:ec:34:d9:
         76:83:dd:41:b7:74:2c:16:af:62:75:81:07:a3:6b:64:42:a1:
         3d:66:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:40:29 2025 by rpki-client