Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa
File:                     4a2f858b-513e-375a-88c7-94e0fe278bba.roa (raw, json)
Hash identifier:          j0UZvo50LYbQuKJZPrLn1R4ovGtuwiJf7fxXTmTkEXM=
Subject key identifier:   77:FC:03:FF:B7:D6:1C:BC:45:BC:C4:83:7A:B9:2B:8E:11:33:A0:CF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849ABB4926B6B60F0A81E29F080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        98.17.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:92:6b:6b:60:f0:a8:1e:29:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=e57afaf6-7027-4e8a-b806-fb671fd71aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:45:0f:1c:35:a6:3d:a0:9b:29:42:fe:3c:
                    00:54:bc:60:d1:39:60:17:9b:04:62:68:f2:a8:4f:
                    ef:e8:58:b1:7f:ce:c7:99:64:6e:c3:2f:ea:d4:b8:
                    09:5b:98:d6:ee:4a:ba:be:f0:4e:44:bb:6f:da:b0:
                    8c:fe:07:a3:d0:b2:c6:80:ae:94:ea:60:fc:78:63:
                    54:81:a4:d7:8b:42:d1:e8:b2:cc:00:2b:62:c0:1c:
                    8a:f2:d3:c1:95:ae:f9:0e:3a:bf:64:bb:0e:af:28:
                    ab:ee:33:04:9d:49:81:25:ca:a2:31:33:8a:75:e5:
                    b9:95:0e:7b:49:a2:23:5c:bc:61:5a:81:5a:3e:08:
                    73:8a:37:42:47:e3:3e:36:4a:41:2f:eb:0e:be:02:
                    a2:c6:4f:f4:76:1a:ee:43:5f:09:a7:4f:c6:c1:68:
                    d2:86:7a:06:f2:03:78:7d:d5:44:7d:ed:c1:84:36:
                    3c:0a:30:dd:03:8d:fe:2b:4a:df:35:13:59:58:47:
                    7d:f5:4c:7c:9d:02:0f:d0:6a:04:91:1e:d2:18:1a:
                    f5:0b:dd:b0:8a:ac:db:0b:31:2f:41:09:d1:6c:1a:
                    81:10:1f:23:bf:d7:ca:89:a1:79:11:83:06:eb:4f:
                    0e:3a:53:7b:10:01:2f:ea:21:03:48:b5:1b:17:e6:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FC:03:FF:B7:D6:1C:BC:45:BC:C4:83:7A:B9:2B:8E:11:33:A0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:22:b3:cc:06:ed:93:2f:d7:6e:f2:74:52:ed:b1:6c:2d:f7:
         b6:77:d0:44:9c:c8:a3:c9:1b:ef:a4:28:5c:1b:a4:bb:95:86:
         2d:00:31:17:02:a7:b2:70:3a:3e:02:04:f2:90:10:71:c0:b0:
         24:cd:2a:45:8f:4b:5f:05:5c:cb:8c:bb:69:95:85:17:61:1e:
         58:92:96:70:bf:6d:fa:1a:cc:b0:92:6e:29:1c:e5:52:e0:37:
         2a:d7:bf:c0:e6:64:df:5a:23:73:87:03:7a:f7:aa:10:e6:19:
         4b:2f:b8:75:1a:03:a5:01:6c:00:dd:9b:32:c6:30:50:b3:68:
         06:4b:31:19:24:a0:a6:62:f9:02:dd:1b:21:e2:14:fe:53:40:
         9d:30:e3:c1:25:bf:40:3d:08:ba:17:4f:d2:4b:1a:46:9a:41:
         a7:12:39:7a:69:a7:ce:4f:75:e7:e6:a2:c8:1e:16:70:7e:01:
         3d:b8:69:8d:53:08:fe:3b:e0:8b:cc:5b:c2:43:1c:8f:93:32:
         37:1a:48:e2:e4:c0:6e:5d:dd:4e:ee:83:51:d7:24:9c:3c:de:
         66:c6:ea:32:7c:d3:b1:aa:60:fb:d4:f9:a4:37:53:36:6b:58:
         0f:a8:60:f9:84:9b:e1:11:81:63:16:99:36:e1:1e:7e:e0:1f:
         33:f0:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:25:27 2025 by rpki-client