Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/34988284-ba6e-374b-b65f-0f7a99785401.roa
File:                     34988284-ba6e-374b-b65f-0f7a99785401.roa (raw, json)
Hash identifier:          OxhEhDZ8gEv7v+NcPTh3HvTiPnBQW+kMBwHc8073+eA=
Subject key identifier:   26:E6:73:7A:48:AC:59:AE:37:78:56:B6:06:7F:F3:B2:72:32:CE:6F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858498CA26FC608AC91FF7590E400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/34988284-ba6e-374b-b65f-0f7a99785401.roa
Signing time:             Wed 16 Apr 2025 21:54:17 +0000
ROA not before:           Wed 16 Apr 2025 21:54:17 +0000
ROA not after:            Tue 15 Jul 2025 21:54:17 +0000
asID:                     20001
IP address blocks:        98.145.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:a2:6f:c6:08:ac:91:ff:75:90:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr 16 21:54:17 2025 GMT
            Not After : Jul 15 21:54:17 2025 GMT
        Subject: CN=377509ca-ec68-4fa8-ac66-7672d4b0026e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:09:b2:23:48:d7:61:3c:15:8e:d3:af:01:f4:
                    50:8d:e8:2f:fb:9a:6a:fb:6c:bd:f2:f7:c2:8c:ca:
                    bc:7f:28:76:d0:dd:bd:87:03:49:67:46:09:7a:87:
                    05:10:15:de:01:e2:c1:ef:70:49:1a:59:50:13:c1:
                    d0:1b:2c:43:2c:ce:3d:24:a1:80:aa:f2:be:90:41:
                    49:5f:a7:e6:15:20:0b:15:18:2e:b6:b8:03:38:30:
                    78:27:24:a6:47:17:d3:67:e7:78:af:e9:e2:c5:54:
                    22:6e:7b:b5:cd:c9:33:4e:1c:d4:61:9c:35:fd:0b:
                    c6:9b:45:d7:61:a3:8d:fc:47:a2:eb:b6:36:14:3e:
                    e2:65:9a:ef:74:a9:15:15:b9:18:8a:db:45:c6:fd:
                    3c:b8:6f:63:30:b2:20:5c:b0:e7:40:dc:04:3d:ca:
                    0e:4c:5b:a5:4a:8b:2a:d0:07:72:17:38:49:f7:4e:
                    17:e2:79:8e:d9:8f:14:71:bd:30:7f:ce:eb:20:95:
                    31:1f:19:7e:a9:5a:7e:c0:2a:5b:ca:74:2c:77:01:
                    80:a0:8c:ab:e8:59:aa:f4:ec:61:22:1f:cf:54:02:
                    60:c5:9d:fa:87:5f:38:75:17:42:b9:97:d5:46:27:
                    6f:44:85:10:2d:f0:f2:0c:81:75:0a:22:d5:2b:77:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:73:7A:48:AC:59:AE:37:78:56:B6:06:7F:F3:B2:72:32:CE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/34988284-ba6e-374b-b65f-0f7a99785401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:9d:c5:17:6e:59:7f:69:43:9b:45:78:32:1c:81:90:b6:
         f1:08:64:b2:9e:ac:cf:79:e6:46:ac:f2:8a:c7:e7:22:05:01:
         ac:7e:23:99:ac:d2:54:42:59:52:56:bc:52:90:e2:94:ec:ee:
         cd:e2:55:91:57:72:40:d8:c1:12:47:4d:8d:1d:90:c0:ba:72:
         92:e3:86:ac:1c:d6:fa:c2:30:fd:5b:fa:c6:5f:0f:63:3b:5b:
         e5:d3:7a:90:32:01:f6:21:8d:d2:2e:95:38:bf:45:bb:c0:25:
         99:79:99:6c:70:67:5e:97:0a:43:33:7e:57:79:94:d9:c6:21:
         75:fe:d1:87:68:9a:76:53:f7:46:62:b5:f8:dc:a1:14:1f:cc:
         f4:83:a8:fe:2f:9c:36:33:81:2d:6f:fd:f1:b9:cd:04:ed:9c:
         40:9f:76:77:3f:09:71:ff:dd:7c:62:5b:88:42:97:35:83:50:
         d0:7d:19:b0:46:e8:b4:31:99:5c:3f:06:ba:87:b0:f3:85:7e:
         78:cf:2b:46:7d:40:c6:7f:ed:d0:94:60:4e:31:f9:d3:0a:fe:
         df:63:93:ce:91:e3:cb:13:3e:35:50:d4:e2:a2:20:3f:fa:ff:
         f4:e7:87:95:f4:8f:6b:ec:66:b1:28:f8:c3:72:51:43:8b:62:
         fb:f6:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:36:22 2025 by rpki-client