Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa
File:                     28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa (raw, json)
Hash identifier:          UVqU8v/pPiymO3tZadKJZ1ewaCtv8LOahwyxKK05hPo=
Subject key identifier:   34:23:0A:93:67:1C:2B:86:8A:C2:AF:3F:4F:EF:C0:7E:92:A4:FB:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE92F6BAD492FAF4628480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        98.243.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:92:f6:ba:d4:92:fa:f4:62:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=238bad6a-4ef3-4ad8-b424-4d66266482da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:51:64:03:f4:1a:04:cb:49:44:10:08:7d:
                    4a:1b:82:d8:6e:8d:41:1b:45:1b:a6:7c:01:43:2f:
                    18:a3:10:a5:23:1d:d1:48:59:25:3e:68:e9:fd:05:
                    f8:35:a7:d2:96:b9:ad:a8:01:1c:0d:3b:9e:c8:a1:
                    27:a5:c8:3b:10:2c:e3:73:ad:fc:7a:0c:79:88:2a:
                    f0:18:62:2e:12:3d:ae:08:4b:bc:15:ea:99:3f:47:
                    57:28:5f:9f:6a:5a:87:4b:9d:7c:ea:60:52:24:91:
                    21:7e:9f:b8:cd:ed:a6:01:60:8f:43:96:85:77:ba:
                    39:29:e6:31:a1:b3:9b:02:47:d5:8a:ff:a8:54:f7:
                    52:58:23:40:9b:20:c9:26:6d:ef:fd:4a:1e:58:bf:
                    bb:df:06:9b:23:23:a9:8e:bc:43:17:5a:c1:89:e0:
                    9e:f5:6a:36:40:0f:c6:7c:dd:d0:e0:17:fa:71:c6:
                    a0:22:3d:fe:fc:36:aa:af:de:75:80:c5:dc:5a:69:
                    c5:a1:b3:c0:17:a4:28:0f:05:ac:df:87:4e:a5:0a:
                    b4:fc:90:71:9f:d5:f9:be:a9:2e:2e:ba:13:6d:2e:
                    12:32:65:af:03:da:1f:05:b7:f8:0f:03:b0:20:43:
                    93:12:13:a2:ac:eb:34:aa:d5:73:4a:1f:2e:40:c2:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:0A:93:67:1C:2B:86:8A:C2:AF:3F:4F:EF:C0:7E:92:A4:FB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e0:8c:5e:e9:99:be:08:c6:eb:92:ce:f2:b4:f0:11:94:4f:
         e7:4a:2f:39:15:27:f9:07:a0:42:1b:8e:63:4e:3a:a0:2c:1b:
         2d:66:79:0f:3d:62:3d:13:50:4a:4e:67:0a:c7:55:14:06:f2:
         8e:1c:9a:97:50:27:80:ff:c3:14:87:bf:c1:88:40:55:7c:94:
         25:76:e4:78:b2:90:5c:a7:d7:c6:4b:5f:b8:e2:41:9b:32:89:
         30:64:87:15:d8:44:fe:68:cd:30:ca:b4:53:6c:14:02:04:ef:
         73:72:61:4c:63:70:34:80:6b:c3:47:20:ad:7f:0c:71:f8:98:
         85:2b:a9:f1:bf:9a:1e:93:59:78:f2:e8:4a:fc:ee:27:c1:84:
         dc:00:fe:7d:9d:32:f7:35:ef:eb:f0:f3:9c:fa:8f:51:e8:ac:
         e5:cb:bf:a9:3f:8e:f2:73:f6:fa:40:4c:39:33:96:00:61:d1:
         90:6b:7c:62:89:76:9f:a4:3b:72:40:c4:8c:48:5e:15:b0:8b:
         eb:11:3c:73:97:14:0a:0a:8e:9f:7c:fb:7a:03:37:b0:19:49:
         85:e8:58:5d:2d:e7:2d:13:04:a0:60:dd:84:bd:6a:33:bb:a7:
         19:e3:cb:30:24:80:45:0c:2c:d2:1e:dd:e7:cf:52:ed:05:47:
         68:5b:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:10 2025 by rpki-client