Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7468ea79-18c6-3bed-9e98-b3841d38cb06.roa
File:                     7468ea79-18c6-3bed-9e98-b3841d38cb06.roa (raw, json)
Hash identifier:          lnQldMtKdq1mNPH/Nh/4ikGZenFQWyhU1xCYJiK+RoY=
Subject key identifier:   11:FD:A7:86:94:3A:DD:EC:D1:7E:DA:A7:E5:5D:7D:51:C4:4D:29:D3
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849C904ED8C23E05E1E6184B460
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7468ea79-18c6-3bed-9e98-b3841d38cb06.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     21859
IP address blocks:        98.98.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ed:8c:23:e0:5e:1e:61:84:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=f5107fd6-080d-4f6a-8fcc-4e32e44c08e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:25:96:b9:56:45:bd:cd:bf:21:e1:c3:06:
                    40:1b:de:00:47:c8:70:f6:be:3c:c4:b7:c2:8a:ef:
                    6c:66:d4:74:d8:8d:c0:45:27:02:2f:e9:07:75:1a:
                    87:54:96:0f:38:e9:f6:ac:1c:e6:93:29:14:24:1c:
                    32:c3:c0:16:a5:a4:a3:f3:23:54:74:eb:91:41:33:
                    b5:68:31:28:6f:41:e5:53:cf:9c:81:05:d0:da:2a:
                    2d:bc:9f:47:bd:b5:f6:f8:0d:59:67:25:cd:66:09:
                    af:64:e9:74:52:a4:23:37:c9:eb:b8:3c:89:b5:1c:
                    cc:9b:dd:24:23:8b:88:8f:c1:3d:9a:1b:83:be:99:
                    3d:ac:0e:f8:76:ee:14:50:5f:98:ac:a5:97:ce:92:
                    14:51:4d:74:0a:de:c0:53:c4:39:04:5a:4b:55:31:
                    1a:b7:95:e2:1c:2b:60:8a:d7:99:76:e2:4d:6b:60:
                    14:58:b1:3b:e9:51:41:7d:bd:fa:5c:e3:7b:a3:02:
                    82:bd:4c:de:a9:e1:95:d0:33:6a:e9:64:0f:5e:bc:
                    02:81:07:52:cc:1f:09:2e:68:bc:db:57:67:3f:58:
                    1f:39:38:1d:3a:4a:c3:d8:78:ba:7c:b7:fb:77:6c:
                    3a:fe:41:05:1a:6d:6c:3b:1c:7d:1c:ac:81:a9:0c:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FD:A7:86:94:3A:DD:EC:D1:7E:DA:A7:E5:5D:7D:51:C4:4D:29:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7468ea79-18c6-3bed-9e98-b3841d38cb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:97:b6:65:0c:47:c6:07:4c:21:11:64:83:98:8b:75:f9:0c:
         c6:92:45:15:9c:44:d1:1b:89:64:87:39:69:12:c2:7f:da:3f:
         16:5d:dc:ce:9c:18:bf:44:14:14:0e:24:f0:07:59:9a:a0:04:
         94:c5:d3:b6:86:a4:7f:bd:a3:0e:19:30:b8:f8:95:31:e0:71:
         dd:60:95:06:38:fa:39:de:0d:ff:8f:90:dd:dd:00:06:f2:da:
         f1:55:01:c2:14:a2:4a:d6:15:f4:ba:0d:33:d5:01:cd:cf:2e:
         39:c8:99:1c:8c:17:1d:9d:13:74:8b:5c:dd:4c:a3:59:0b:28:
         58:2f:9b:a0:c7:bc:21:f5:be:07:7b:4b:fa:9e:6c:46:10:cc:
         c8:68:6f:7a:25:0f:ed:15:fd:f2:a7:36:86:55:e0:9d:ed:fc:
         42:4a:f6:54:82:5c:24:31:f0:c5:1b:07:8c:d9:60:78:44:c1:
         7b:7a:16:c1:8e:4b:73:05:ce:19:d0:56:e9:bd:54:09:77:4f:
         6c:4b:22:3d:57:5b:ab:00:d9:f3:9a:a5:bf:4d:1c:1b:39:8c:
         65:32:8c:c2:7d:3d:dd:83:bc:5c:73:21:ff:d1:d4:9e:58:41:
         30:70:94:a9:56:1b:d8:73:20:8c:06:88:b2:b2:1e:2c:ff:f1:
         7c:7b:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:44 2025 by rpki-client