Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27525c38-26ad-32b0-b2fd-b3df9166b1dd.roa
File:                     27525c38-26ad-32b0-b2fd-b3df9166b1dd.roa (raw, json)
Hash identifier:          RsDIxHZ4WdHJIywU3+EEg4P3EyEb6JvHBC4BvBMtl1c=
Subject key identifier:   33:11:D3:63:E4:0D:CA:EA:D1:7D:BA:D1:5C:B0:D4:BC:E0:AE:F7:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED2809A3880461C760F280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27525c38-26ad-32b0-b2fd-b3df9166b1dd.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.196.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:28:09:a3:88:04:61:c7:60:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ea4d5703-a86d-4109-bd78-13e00d73d2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:22:62:0e:e7:c8:ca:d1:56:4c:16:17:a7:
                    f9:dd:26:ba:48:21:6c:70:40:de:0f:66:78:5a:8b:
                    c4:4f:38:7e:81:70:a6:78:98:25:91:dd:22:90:ba:
                    25:e3:4c:36:8a:0f:e9:1f:45:dc:81:c9:e4:1b:b1:
                    9f:43:b3:e1:a4:98:18:0d:6e:c1:f4:35:99:4f:4f:
                    07:a3:41:55:e0:ae:26:23:7f:e3:a4:e0:17:04:e0:
                    6c:f2:7e:ff:d3:70:d4:7e:aa:aa:f5:27:26:d2:2e:
                    47:a3:b7:44:76:0b:a9:fb:93:a6:2f:ce:be:4f:72:
                    56:c1:f0:f6:92:44:14:65:ac:aa:69:95:cb:50:11:
                    9d:ef:61:64:56:50:b0:f9:75:03:a9:d6:83:35:6c:
                    7b:60:d7:2f:0d:5d:90:8c:50:e9:67:f8:c9:4e:ac:
                    73:25:72:3f:6a:87:22:02:fe:8e:67:e9:8a:25:9d:
                    28:56:64:38:db:1e:cf:de:43:87:c5:9b:28:9a:e7:
                    11:ec:5d:4b:a7:cc:d1:47:94:22:70:0f:c3:8b:6d:
                    0e:23:3e:70:04:26:65:12:b1:ea:9f:f4:45:02:81:
                    68:ca:ec:af:0f:c5:df:c2:a4:49:f1:03:3d:d5:96:
                    54:ef:4b:16:44:5c:f6:c6:17:68:6f:ec:35:63:b8:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:11:D3:63:E4:0D:CA:EA:D1:7D:BA:D1:5C:B0:D4:BC:E0:AE:F7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27525c38-26ad-32b0-b2fd-b3df9166b1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:ea:b3:cf:f9:3c:ea:d1:81:0f:9e:6d:6f:6b:0f:8d:c7:
         cf:b4:67:bf:71:4a:47:8f:d7:30:85:b9:85:12:b0:11:24:6d:
         4d:00:b9:d8:61:1c:71:eb:92:70:51:8d:a3:03:4f:e4:d0:0c:
         8e:93:e2:68:d7:5f:70:90:25:ac:79:69:e9:12:6f:59:59:7f:
         2f:4b:e8:18:74:3c:9c:b5:26:b1:18:c7:35:17:6a:58:fc:27:
         7e:78:d7:be:0f:7a:ac:33:4c:8a:2b:88:00:b8:bd:4e:5c:54:
         4a:b4:b7:4c:2b:3a:0c:34:4f:f0:e8:e2:57:ee:88:df:e6:69:
         3c:56:b3:52:98:4c:93:4e:68:ea:64:cf:2c:ce:7f:9c:ee:74:
         86:2b:9d:ba:06:7f:a4:47:e8:2d:0c:b7:b2:46:fe:44:ef:79:
         6c:e6:86:04:9b:b5:3c:8b:82:fa:24:f9:c8:93:8b:a8:5e:cd:
         e7:1c:85:ee:f0:1e:3a:d1:41:e8:b1:2f:e7:04:4c:f9:f6:5c:
         b6:fd:28:61:aa:42:c3:6a:59:ee:5e:f8:5d:10:da:d8:bc:91:
         3e:27:82:d6:49:e8:8d:08:41:a7:fd:3f:da:57:bb:5c:e5:b8:
         db:4f:0a:b8:7d:46:dd:61:84:f1:58:91:67:83:68:e8:3d:1d:
         31:5b:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:32:08 2025 by rpki-client