Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7e92a61b-07c2-3472-9f48-2574038ebc84.roa
File:                     7e92a61b-07c2-3472-9f48-2574038ebc84.roa (raw, json)
Hash identifier:          opJcnuGZrQIncpBuyLUYfbQiMkmwP/tbivMMXZu0vn0=
Subject key identifier:   1F:B9:74:DE:A3:C0:09:28:4C:DC:E0:33:66:69:F1:C7:2E:A6:BC:EA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ADB3B34C349CFA171AA00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7e92a61b-07c2-3472-9f48-2574038ebc84.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11674
IP address blocks:        98.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:db:3b:34:c3:49:cf:a1:71:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=cb644285-25fc-49fb-b439-452c9989cdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:4e:15:49:41:12:aa:b4:49:4c:1f:a2:91:
                    fe:43:4a:91:d5:07:98:d1:8d:1a:33:67:5e:7e:f1:
                    a2:fa:9c:f0:00:04:97:cf:37:a0:15:d3:de:32:0c:
                    1b:f8:96:28:e2:0b:aa:1d:26:c8:ca:d9:04:74:42:
                    c3:6b:c1:85:33:63:f5:ce:39:d4:5c:71:96:66:77:
                    8f:c8:56:88:23:d8:49:c6:34:70:3b:e9:fe:75:03:
                    5f:35:9b:0a:33:f5:f9:6f:e4:93:ad:d5:92:22:be:
                    92:76:91:32:29:2c:1d:c8:a4:c4:27:fd:d3:7b:b2:
                    6a:26:12:01:82:db:9d:51:c5:cc:86:6d:9f:8a:d8:
                    0d:ff:82:7b:2e:af:8d:64:ba:3b:21:68:9c:e4:e7:
                    57:03:24:a6:7e:d4:5d:05:5f:58:39:be:b2:27:2e:
                    20:8d:72:40:58:bc:fa:af:de:d8:e3:1b:b7:6e:dc:
                    22:2a:09:35:2e:72:f8:a6:c7:f2:d5:79:4b:8b:41:
                    ea:c1:9c:2a:0c:3b:67:af:ba:c6:9f:23:de:87:b4:
                    0b:02:9f:dd:56:e3:7c:17:8d:a4:a7:f0:26:83:d7:
                    62:cd:4d:41:37:4f:23:ee:95:14:01:96:92:24:64:
                    67:41:a2:53:c7:da:6b:17:c4:c8:f7:83:09:82:86:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B9:74:DE:A3:C0:09:28:4C:DC:E0:33:66:69:F1:C7:2E:A6:BC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7e92a61b-07c2-3472-9f48-2574038ebc84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:03:9a:70:47:8f:e2:9f:36:c9:f0:11:dc:b8:5e:d7:92:
         f4:08:ef:b0:67:98:d8:38:07:d2:4e:88:36:01:09:ff:ac:b2:
         6b:5d:fa:9c:ae:a3:d8:64:be:ad:1b:3f:cd:30:56:9a:c3:d9:
         1f:be:0a:a5:68:50:d2:3c:7e:00:28:a8:a8:bc:3a:2f:f2:e9:
         ab:40:ee:6f:9b:e0:2b:67:77:1f:43:87:1e:b2:ca:66:8e:26:
         5d:d2:ff:0e:64:fe:3b:f8:b5:73:b9:1a:fd:48:f5:47:fe:60:
         f5:f1:78:ce:42:e8:a0:db:e5:1c:a5:7a:52:9c:40:b0:93:0e:
         37:65:d5:89:fe:3b:a5:bd:3f:16:83:62:cf:0d:9e:77:c7:e9:
         70:2c:b6:2e:bf:b3:ec:54:2d:4e:f7:dc:61:65:60:c5:c7:5c:
         d7:96:4a:6d:96:8a:a8:29:9e:e1:d8:26:bd:eb:cf:a8:69:30:
         7b:1a:8d:db:7e:4d:91:b0:c7:27:82:24:b7:8d:2e:fc:f9:8b:
         79:3b:98:2f:17:0b:d0:f5:d1:5c:dd:be:d2:de:c1:88:06:3e:
         c7:f5:84:d9:61:a0:db:1b:72:26:b6:25:17:8d:79:a6:1e:11:
         09:34:75:7b:3e:62:4d:24:17:6d:1b:3e:da:94:ee:06:89:00:
         09:7d:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:11:26 2025 by rpki-client