Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa
File:                     4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa (raw, json)
Hash identifier:          xQTw7i7lJMGgniPl5B+HaLK25gYYMzMz6fcUbitYiVY=
Subject key identifier:   06:0B:6B:FD:1A:D1:2A:3E:79:61:B8:53:12:9C:5E:52:83:3A:5B:EF
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A4F05BCEDF3975BCE2EB4B240
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     62610
IP address blocks:        98.96.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:bc:ed:f3:97:5b:ce:2e:b4:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=fc488245-79d9-429d-aa16-4ecbf91cf81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:09:16:fc:72:d2:d5:99:7c:ad:12:f9:93:
                    85:52:f6:15:3f:51:bb:ff:41:ce:7b:ac:3d:0b:ff:
                    43:f3:2e:8d:7d:6f:14:7a:ff:e3:c2:29:9a:85:34:
                    61:fd:2b:c9:c8:05:eb:8b:5c:89:fb:14:0b:0a:58:
                    ac:76:1e:68:21:37:f1:9d:31:21:69:04:44:92:53:
                    74:22:8b:1e:95:52:a6:cc:6e:72:c3:80:c9:80:db:
                    13:e0:9d:a0:0e:ab:8e:39:11:3e:48:2a:8b:06:79:
                    8c:1b:55:aa:47:27:39:98:16:ca:45:76:41:1f:62:
                    b5:3d:50:38:50:9a:82:92:d5:c1:1f:d0:77:d2:39:
                    55:bb:68:46:df:d4:4a:a4:0e:96:67:52:ee:97:3b:
                    af:d9:8f:da:77:9f:08:9f:cb:e1:53:27:b8:15:d1:
                    16:db:1d:e2:20:13:70:25:15:6c:ef:c6:af:86:03:
                    41:a5:8d:3b:65:af:91:81:e8:90:33:76:49:04:ed:
                    18:03:f0:d2:66:33:ba:e1:a5:56:a0:cc:41:05:0d:
                    8e:a0:d5:ad:eb:b2:76:75:6c:51:2a:4c:4f:b6:ca:
                    c6:33:d1:11:5c:52:8a:a2:9d:6e:eb:31:d9:27:65:
                    95:f6:1b:5d:d6:56:22:b0:38:2c:bf:5b:77:48:e8:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:6B:FD:1A:D1:2A:3E:79:61:B8:53:12:9C:5E:52:83:3A:5B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:20:44:c0:24:64:71:c8:92:e6:bc:d8:40:06:e9:33:61:
         ad:01:f5:fb:00:5c:ef:98:47:c9:3f:38:5b:b8:e4:a2:4f:37:
         e6:20:26:f9:18:74:64:65:db:93:b9:55:a4:9f:0f:87:be:e7:
         5e:1c:6c:5c:03:6d:98:7c:01:23:cf:62:6e:30:43:07:4f:08:
         41:64:9e:d5:b4:bb:67:c9:72:80:43:a4:b3:f5:2c:fd:02:d9:
         d6:5f:42:28:28:d9:e6:93:08:88:e6:3e:1d:8c:d0:61:f1:53:
         ca:71:25:14:d7:3a:a8:3d:51:2b:68:3e:6c:3e:77:30:68:45:
         ad:28:2f:11:70:65:84:1e:2d:80:b1:51:c2:2c:c0:33:e7:fe:
         6d:5d:6b:32:aa:37:73:25:d7:f6:b6:dd:71:be:30:c2:f4:89:
         10:bb:a6:2a:d0:3d:0f:f4:25:29:25:0a:f4:f6:f4:c9:ef:ef:
         5b:cf:dd:4c:08:5d:04:c9:3d:7a:48:e2:54:ae:4c:15:0d:28:
         7d:16:f5:af:91:33:3e:1c:a7:32:3a:b3:41:4d:db:ba:31:cd:
         c5:a6:aa:32:94:1d:be:4f:3b:79:a9:63:f9:39:8e:b1:51:ff:
         38:8a:a6:ec:c9:a6:8a:41:35:e7:33:ef:fe:72:2c:bd:43:70:
         e7:29:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:04:06 2025 by rpki-client