Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df1e154-7862-3902-bcfb-471e8a22a97c.roa
File:                     0df1e154-7862-3902-bcfb-471e8a22a97c.roa (raw, json)
Hash identifier:          k/70mqYlK/a2k0LGTK7md/Z9Q4kEIVe1IqY9FCkorOo=
Subject key identifier:   69:2C:62:25:1F:1B:A9:1D:8C:C0:12:89:48:D6:EF:10:F7:12:09:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED3E944856BC95A07D5C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df1e154-7862-3902-bcfb-471e8a22a97c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.44.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:3e:94:48:56:bc:95:a0:7d:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9366520e-f446-4b41-a978-9b270d9817ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:ab:e4:dd:ad:44:1d:b2:34:2b:c1:ff:23:
                    1b:8a:d3:6f:71:97:0e:c4:d4:a1:ea:8e:49:e6:84:
                    a9:ef:6f:05:3c:c7:f3:d3:bc:44:4a:56:08:47:24:
                    19:1e:47:96:53:2c:e2:3c:be:d1:a3:3d:b5:84:92:
                    0e:20:33:e4:a0:13:02:8b:3e:e1:03:f0:64:72:f9:
                    b1:94:61:05:a3:de:d5:c8:23:a4:61:8f:b5:ed:25:
                    e8:0f:3a:b7:c6:81:93:a3:e3:b4:cd:74:88:c1:68:
                    e3:9e:63:3c:6a:1f:80:dd:36:96:ba:bd:81:34:33:
                    98:8d:c0:80:90:aa:2f:b2:fa:3a:0e:9c:91:d1:ac:
                    1a:44:9e:55:2b:67:92:09:e8:b6:75:87:77:94:b3:
                    79:d6:36:dc:87:41:3d:63:66:15:71:9a:db:ec:cc:
                    a6:7d:39:ee:89:e2:69:66:c9:3d:38:ab:57:03:94:
                    c4:06:44:2e:86:8d:37:20:22:b8:14:be:a3:69:1d:
                    82:02:f9:e5:d7:f9:89:0c:c2:6e:a5:63:82:b0:2a:
                    a7:69:7b:36:fc:43:6b:b6:6c:8d:5d:f3:e9:49:da:
                    65:25:bb:be:63:1f:27:91:87:8b:be:87:1c:3f:2f:
                    09:59:f7:75:66:3a:40:47:41:11:5c:b8:6f:e8:23:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:62:25:1F:1B:A9:1D:8C:C0:12:89:48:D6:EF:10:F7:12:09:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df1e154-7862-3902-bcfb-471e8a22a97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:3b:34:25:6c:c7:75:cc:e2:60:2d:4c:7d:31:7e:3d:c6:
         0f:3e:46:0c:aa:c9:93:73:ee:26:1a:19:0c:f0:42:ff:c6:09:
         a1:d5:88:a7:78:05:20:07:58:4f:13:64:9b:c1:16:2b:ab:6d:
         82:0a:04:10:65:72:99:d1:f4:d8:b6:37:f0:94:29:c6:1c:53:
         78:f8:10:8f:f0:3b:07:c6:44:5c:e2:da:36:98:86:e4:08:10:
         7b:d4:4e:43:2a:9b:b4:2e:53:5f:07:55:44:3c:86:9d:0a:0a:
         86:53:17:46:a9:d8:af:7b:64:ee:56:48:9e:57:48:1a:ed:15:
         6a:bd:90:7f:a6:07:16:c7:ef:de:1a:4e:3d:e8:f5:94:bf:cf:
         12:c8:76:af:a1:56:24:3e:98:53:16:10:b2:b0:a3:a7:a2:ca:
         77:0b:55:14:82:3a:cb:6a:00:9a:37:c3:f0:4b:05:61:05:74:
         be:44:f0:d0:38:0b:15:08:5f:ae:b3:44:b4:13:3c:4b:88:c9:
         9f:78:9d:9e:e4:fe:5e:99:7a:a9:70:b4:54:26:81:88:be:fd:
         1d:77:2e:88:64:65:a7:7e:74:ef:a0:1d:82:40:96:2f:b8:2e:
         32:e4:91:38:a9:b5:ff:52:59:0a:74:0f:0b:b9:c8:4f:b2:fb:
         38:d4:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:46:59 2025 by rpki-client