Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa
File:                     d182f315-ad79-3ce1-af87-7b51558a1546.roa (raw, json)
Hash identifier:          U5fbDPZPpgPA9+dL5fuCIa0By0iuGRakDK41sTKGG6g=
Subject key identifier:   FB:81:17:55:C9:8F:37:D6:57:C3:0F:24:09:18:72:70:B0:EA:FB:FA
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F43285849E7BA784D6BD261E093928DC4
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     11425
IP address blocks:        98.143.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:78:4d:6b:d2:61:e0:93:92:8d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=644225b6-cfa2-489f-8fe2-067390d2a6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fa:9c:5e:7a:1b:5e:3c:00:73:7b:68:16:48:
                    7e:17:b1:11:e5:41:c3:18:a7:81:25:dd:52:f5:60:
                    bd:fe:86:61:42:e7:a9:5f:fb:81:de:05:2a:12:2a:
                    fe:5e:59:27:c8:49:e8:6b:1e:cc:4a:e3:dd:d4:43:
                    22:99:13:c6:0c:38:14:47:1b:c3:55:98:25:c3:a1:
                    29:c4:3b:cb:bc:a7:8a:d6:d7:e6:6e:9a:30:26:ce:
                    79:56:cf:3e:27:86:43:b8:0f:8d:a9:dc:20:67:3f:
                    79:01:0e:aa:66:a0:5c:03:67:7f:2d:e5:5b:0a:69:
                    94:bc:79:7d:f6:e7:42:e1:af:35:34:96:c2:86:1d:
                    45:f7:71:c7:8d:91:cc:63:e9:be:e2:75:cf:54:a7:
                    e2:90:f0:e8:2a:d0:88:8b:7d:7b:69:0d:58:3a:5e:
                    87:14:b9:40:dd:0f:b2:9b:1f:42:dd:37:25:99:83:
                    6f:45:68:5f:e4:b1:45:75:2c:72:1d:64:73:17:be:
                    3c:0f:c2:34:f4:99:67:96:6d:cb:6b:21:42:27:2c:
                    f7:a1:82:99:c2:28:73:2a:80:97:66:2a:51:73:dc:
                    4f:84:b9:29:a9:22:e8:07:86:fb:bd:d0:4c:a3:4b:
                    ce:be:0d:bb:54:46:64:95:db:c2:a6:c7:3d:df:40:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:17:55:C9:8F:37:D6:57:C3:0F:24:09:18:72:70:B0:EA:FB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:93:83:48:09:39:4b:8d:df:c2:a7:fe:8a:0b:17:87:c0:f6:
         44:1a:17:e0:8d:d3:7a:ca:70:f7:fc:e4:aa:21:85:63:50:3a:
         9b:cf:7d:06:0f:d2:fa:d7:e3:d1:cb:22:3e:06:d9:53:91:83:
         9b:ce:af:ac:fb:b1:13:ca:d4:04:7a:39:ce:38:c9:ba:af:c5:
         9b:c7:2b:4b:36:4b:e4:0a:4d:f6:e3:f2:ea:81:5e:a9:65:9a:
         9a:c2:3a:bd:5c:d8:9e:75:03:64:3d:6b:50:1b:17:ed:28:6f:
         b8:37:ec:a6:cb:57:c6:39:35:6f:33:93:72:c7:9d:d5:a0:61:
         19:c3:42:12:25:28:52:45:18:29:11:07:72:93:c7:b5:ce:91:
         fe:ae:23:24:0c:da:00:8e:0a:02:0d:82:c2:95:7f:23:d7:e5:
         09:f7:08:a7:c9:77:c5:5b:87:f2:49:25:62:c0:84:14:ef:21:
         60:e8:bb:f9:18:de:12:6f:83:2f:72:47:7d:97:94:55:fc:22:
         86:84:7c:da:f8:d2:fd:77:d7:25:f3:63:90:35:c9:8b:33:65:
         80:6a:a7:b4:e0:12:18:cb:16:22:7c:d5:1f:82:0b:5d:43:49:
         68:5d:ef:d5:ef:92:f8:67:9b:62:f4:b3:ef:47:97:48:5f:5b:
         65:cc:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:03:44 2025 by rpki-client