Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d4fac1-9d51-3a34-ae57-c26e68627f7f.roa
File:                     18d4fac1-9d51-3a34-ae57-c26e68627f7f.roa (raw, json)
Hash identifier:          dZSymIhxmrsCax24/3DY5Nhj179FHPk/WtLbGz0pvVg=
Subject key identifier:   6D:1A:80:DC:FC:26:AF:31:E7:7F:4A:C5:7B:9D:F1:9E:E3:C9:75:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC79257D752F453CC4CC30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d4fac1-9d51-3a34-ae57-c26e68627f7f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        98.216.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:79:25:7d:75:2f:45:3c:c4:cc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2f6c2bac-6c0b-42b6-b4ed-cc1d4c0a3eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:99:49:c6:b7:80:34:ea:39:4b:73:a6:63:
                    ea:9c:4b:1b:1f:3c:e8:be:2e:38:ac:60:bf:ce:52:
                    b3:24:8b:f5:c4:1b:4c:bb:f0:8e:b7:f8:3f:8e:e9:
                    53:02:6b:eb:02:63:bb:eb:b4:cf:5b:11:21:22:39:
                    a8:52:49:bf:a4:91:91:5d:86:c8:e4:4d:8a:27:58:
                    22:95:de:da:ee:c2:b6:ea:63:84:89:9d:67:98:53:
                    f8:31:d5:b2:38:89:91:74:58:97:17:bb:f4:0e:30:
                    fb:56:8f:11:35:9b:7c:76:ff:65:d2:86:96:db:0d:
                    81:da:12:c7:a1:54:55:d6:e5:ac:5b:8b:30:a0:b3:
                    e8:9f:7f:fb:fc:79:e0:93:0d:64:7c:4d:b2:79:b5:
                    b7:57:19:81:51:2d:7c:cf:70:77:52:73:94:f5:73:
                    d1:1c:60:cb:ee:9e:65:b8:24:ac:a8:66:77:5d:16:
                    d7:f0:8e:b6:86:97:13:36:c3:a7:4d:fb:55:dc:ac:
                    46:5d:8e:03:d3:05:a9:e0:9a:d0:2d:0d:15:3c:7b:
                    0a:43:0f:31:23:d7:d1:3b:85:0a:3b:a2:65:45:69:
                    24:2b:01:42:2b:23:37:89:eb:18:a3:6a:24:d2:2f:
                    94:00:4d:e1:e5:ea:ab:15:45:ab:e7:e4:54:1c:f6:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:80:DC:FC:26:AF:31:E7:7F:4A:C5:7B:9D:F1:9E:E3:C9:75:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d4fac1-9d51-3a34-ae57-c26e68627f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.216.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:51:a8:a1:7d:d1:a6:d5:68:a6:13:46:51:02:0d:02:bd:df:
         be:66:4f:6c:8e:53:d5:b8:3b:28:f8:bf:fe:49:c0:99:c5:91:
         64:7d:f9:9c:ab:2e:09:6e:e0:91:d4:3c:06:1b:12:e5:93:dd:
         5a:a5:2c:00:c9:c4:bb:e7:27:21:93:e6:e9:33:ed:32:c0:df:
         dc:c4:ee:74:0c:f3:77:7d:be:fc:54:e2:4f:f6:63:41:06:e3:
         1a:a3:5f:35:22:30:54:aa:c4:03:10:44:8d:3d:31:ac:2e:36:
         11:11:31:03:20:77:b5:26:8a:e7:d1:72:42:4a:d2:6b:f9:62:
         23:60:7a:94:f6:97:99:36:6a:72:36:ff:85:23:7c:93:c6:bc:
         9c:79:2a:2a:21:3a:8a:fa:95:f0:61:fa:02:88:fc:76:82:9a:
         a8:89:37:3d:f2:a5:05:27:c7:8c:14:55:b7:f8:1d:e3:f0:80:
         61:5a:3f:a3:16:ad:46:bd:f3:ff:65:9a:d9:d8:eb:b6:a9:35:
         21:c6:ea:53:9f:8e:70:32:d3:c7:3f:9d:b6:9a:ba:7a:e1:7d:
         12:12:ec:73:da:47:1b:7c:34:24:6d:9e:34:c0:47:38:00:d4:
         29:b2:8d:22:89:1e:c1:0c:0b:6a:a7:a2:f8:ba:df:ac:ad:64:
         3a:32:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:06 2025 by rpki-client